Good afternoon, I am wanting to veto a sync event where a user sync is equal to from-move = "true" and the qualified-src-dn= contains the word INACTIVE..

I have tried what I think to be all of the xpath functions but I cannot get it to work. If I could do this in the actions I think I would have more options but my solution needs to be applicable to the Condition portion of the rule. Please see my trace below and ask any questions. Thank you in advance!

11:35:49 66418700 Drvrs: TEST_DRIVER ST:Start transaction.
11:35:49 66418700 Drvrs: TEST_DRIVER STiscarding transaction because entry was deleted.
11:35:49 66418700 Drvrs: TEST_DRIVER ST:Start transaction.
11:35:49 66418700 Drvrs: TEST_DRIVER ST:Processing events for transaction.
11:35:49 66418700 Drvrs: TEST_DRIVER ST:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.5.4.0">DirXML</product>
<contact>NetIQ Corporation</contact>
</source>
<input>
<sync cached-time="20180208163548.959Z" class-name="User" event-id="SERVER#20180208163548#1#2:abc0975e-8026-4fe8-59b3-5e97c0ab2680" from-move="true" old-src-dn="\VAULT\TREE\USER\USERA" qualified-old-src-dn="O=TREE\OU=USER\CN=USERA" qualified-src-dn="O=INACTIVE\CN=USERA" src-dn="\VAULT\INACTIVE\USERA" src-entry-id="52522" timestamp="0#0"/>
</input>
</nds>
11:35:49 66418700 Drvrs: TEST_DRIVER ST:Applying event transformation policies.
11:35:49 66418700 Drvrs: TEST_DRIVER ST:Applying policy: User expirations.
11:35:49 66418700 Drvrs: TEST_DRIVER ST: Applying to sync #1.
11:35:49 66418700 Drvrs: TEST_DRIVER ST: Evaluating selection criteria for rule 'Break if 3 character admin account'.
11:35:49 66418700 Drvrs: TEST_DRIVER ST: (if-class-name equal "User") = TRUE.
11:35:49 66418700 Drvrs: TEST_DRIVER ST: Query from policy
11:35:49 66418700 Drvrs: TEST_DRIVER ST:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.5.4.0">DirXML</product>
<contact>NetIQ Corporation</contact>
</source>
<input>
<query class-name="User" dest-dn="\VAULT\INACTIVE\USERA" dest-entry-id="52522" scope="entry">
<read-attr attr-name="CN"/>
</query>
</input>
</nds>
11:35:49 66418700 Drvrs: TEST_DRIVER ST: Pumping XDS to eDirectory.
11:35:49 66418700 Drvrs: TEST_DRIVER ST: Performing operation query for \VAULT\INACTIVE\USERA.
11:35:49 66418700 Drvrs: TEST_DRIVER ST: --JCLNT-- \VAULT\SVS\IDM\ENTERPRISE\TEST_DRIVER : Duplicating : context = 1946222673, tempContext = 1946222731
11:35:49 66418700 Drvrs: TEST_DRIVER ST: --JCLNT-- \VAULT\SVS\IDM\ENTERPRISE\TEST_DRIVER : Calling free on tempContext = 1946222731
11:35:49 66418700 Drvrs: TEST_DRIVER ST: Query from policy result
11:35:49 66418700 Drvrs: TEST_DRIVER ST:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.5.4.0">DirXML</product>
<contact>NetIQ Corporation</contact>
</source>
<output>
<instance class-name="User" qualified-src-dn="O=INACTIVE\CN=USERA" src-dn="\VAULT\INACTIVE\USERA" src-entry-id="52522">
<attr attr-name="CN">
<value naming="true" timestamp="1518107748#9" type="string">USERA</value>
</attr>
</instance>
<status level="success"></status>
</output>
</nds>
11:35:49 66418700 Drvrs: TEST_DRIVER ST: (if-attr 'CN' match "WWW") = FALSE.
11:35:49 66418700 Drvrs: TEST_DRIVER ST: Rule rejected.
11:35:49 66418700 Drvrs: TEST_DRIVER ST: Evaluating selection criteria for rule 'Break if Login disabled, status unchanged, or postdated term'.
11:35:49 66418700 Drvrs: TEST_DRIVER ST: (if-operation equal "sync") = TRUE.
11:35:49 66418700 Drvrs: TEST_DRIVER ST: (if-xpath true "@from-move= 'true'") = TRUE.
11:35:49 66418700 Drvrs: TEST_DRIVER ST: (if-xpath true "@qualified-src-dn= /text()='INACTIVE'") = FALSE.