API tools faq
paste
Advertisement
sunway2

AD3

sunway2
Jul 10th, 2012
56
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 345.28 KB | None | 0 0
raw download clone embed print report
  1. 07/10/12 04:00:08.798]:ADTRACE PT:Applying output transformation policies.
  2. [07/10/12 04:00:08.798]:ADTRACE PT:Applying policy: %+C%14CNOVLADENTEX-otp-EntitlementsImpl%-C.
  3. [07/10/12 04:00:08.798]:ADTRACE PT: Applying to status #1.
  4. [07/10/12 04:00:08.798]:ADTRACE PT: Evaluating selection criteria for rule 'Intercept outbound queries for ADDomain'.
  5. [07/10/12 04:00:08.814]:ADTRACE PT: (if-class-name equal "ADDomain") = FALSE.
  6. [07/10/12 04:00:08.814]:ADTRACE PT: Rule rejected.
  7. [07/10/12 04:00:08.814]:ADTRACE PT:Policy returned:
  8. [07/10/12 04:00:08.814]:ADTRACE PT:
  9. <nds dtdversion="4.0" ndsversion="8.x">
  10. <source>
  11. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  12. <contact>Novell, Inc.</contact>
  13. </source>
  14. <output>
  15. <status event-id="0" level="success"></status>
  16. </output>
  17. </nds>
  18. [07/10/12 04:00:08.814]:ADTRACE PT:Applying policy: %+C%14CNOVLADENTEX-otp-ExchangeMailboxPolicy%-C.
  19. [07/10/12 04:00:08.814]:ADTRACE PT: Applying to status #1.
  20. [07/10/12 04:00:08.814]:ADTRACE PT: Evaluating selection criteria for rule 'Exchange: Remove HomeMDB when disabled'.
  21. [07/10/12 04:00:08.814]:ADTRACE PT: (if-global-variable 'drv.exchMailboxMethod' equal "disabled") = TRUE.
  22. [07/10/12 04:00:08.814]:ADTRACE PT: Rule selected.
  23. [07/10/12 04:00:08.814]:ADTRACE PT: Applying rule 'Exchange: Remove HomeMDB when disabled'.
  24. [07/10/12 04:00:08.814]:ADTRACE PT: Action: do-strip-op-attr("homeMDB").
  25. [07/10/12 04:00:08.814]:ADTRACE PT:Policy returned:
  26. [07/10/12 04:00:08.814]:ADTRACE PT:
  27. <nds dtdversion="4.0" ndsversion="8.x">
  28. <source>
  29. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  30. <contact>Novell, Inc.</contact>
  31. </source>
  32. <output>
  33. <status event-id="0" level="success"></status>
  34. </output>
  35. </nds>
  36. [07/10/12 04:00:08.814]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-otp-FormatConversions%-C.
  37. [07/10/12 04:00:08.814]:ADTRACE PT: Applying to status #1.
  38. [07/10/12 04:00:08.814]:ADTRACE PT: Evaluating selection criteria for rule 'Street Address: Convert LF to CR-LF'.
  39. [07/10/12 04:00:08.814]:ADTRACE PT: Rule selected.
  40. [07/10/12 04:00:08.814]:ADTRACE PT: Applying rule 'Street Address: Convert LF to CR-LF'.
  41. [07/10/12 04:00:08.814]:ADTRACE PT: Action: do-reformat-op-attr("streetAddress",token-replace-all("[^\r]\n","\r\n",token-local-variable("current-value"))).
  42. [07/10/12 04:00:08.814]:ADTRACE PT: Evaluating selection criteria for rule 'logonHours: Convert to Active Directory form'.
  43. [07/10/12 04:00:08.814]:ADTRACE PT: Rule selected.
  44. [07/10/12 04:00:08.814]:ADTRACE PT: Applying rule 'logonHours: Convert to Active Directory form'.
  45. [07/10/12 04:00:08.814]:ADTRACE PT: Action: do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2ADLenient($current-value)")).
  46. [07/10/12 04:00:08.814]:ADTRACE PT: Evaluating selection criteria for rule 'accountExpires: Convert to Active Directory form'.
  47. [07/10/12 04:00:08.814]:ADTRACE PT: (if-op-attr 'accountExpires' changing) = FALSE.
  48. [07/10/12 04:00:08.814]:ADTRACE PT: Rule rejected.
  49. [07/10/12 04:00:08.814]:ADTRACE PT: Evaluating selection criteria for rule 'lockoutTime: Convert to Active Directory form'.
  50. [07/10/12 04:00:08.814]:ADTRACE PT: Rule selected.
  51. [07/10/12 04:00:08.814]:ADTRACE PT: Applying rule 'lockoutTime: Convert to Active Directory form'.
  52. [07/10/12 04:00:08.814]:ADTRACE PT: Action: do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateEpoch2FileTime($current-value)")).
  53. [07/10/12 04:00:08.814]:ADTRACE PT: Evaluating selection criteria for rule 'Add: User - convert multi-valued Telephone to single value'.
  54. [07/10/12 04:00:08.814]:ADTRACE PT: (if-operation equal "add") = FALSE.
  55. [07/10/12 04:00:08.814]:ADTRACE PT: Rule rejected.
  56. [07/10/12 04:00:08.814]:ADTRACE PT: Evaluating selection criteria for rule 'update Active Directory logon name'.
  57. [07/10/12 04:00:08.814]:ADTRACE PT: (if-xpath true "self::status[@level = 'success']/operation-data/windows-2000-logon-name") = FALSE.
  58. [07/10/12 04:00:08.814]:ADTRACE PT: Rule rejected.
  59. [07/10/12 04:00:08.814]:ADTRACE PT:Policy returned:
  60. [07/10/12 04:00:08.814]:ADTRACE PT:
  61. <nds dtdversion="4.0" ndsversion="8.x">
  62. <source>
  63. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  64. <contact>Novell, Inc.</contact>
  65. </source>
  66. <output>
  67. <status event-id="0" level="success"></status>
  68. </output>
  69. </nds>
  70. [07/10/12 04:00:08.814]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-otp-ExchangeEntitlementQuery%-C.
  71. [07/10/12 04:00:08.814]:ADTRACE PT: Applying to status #1.
  72. [07/10/12 04:00:08.814]:ADTRACE PT: Evaluating selection criteria for rule 'Add dest-dn to the Exchange Entitlement Query'.
  73. [07/10/12 04:00:08.814]:ADTRACE PT: (if-operation equal "query") = FALSE.
  74. [07/10/12 04:00:08.814]:ADTRACE PT: Rule rejected.
  75. [07/10/12 04:00:08.814]:ADTRACE PT:Policy returned:
  76. [07/10/12 04:00:08.814]:ADTRACE PT:
  77. <nds dtdversion="4.0" ndsversion="8.x">
  78. <source>
  79. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  80. <contact>Novell, Inc.</contact>
  81. </source>
  82. <output>
  83. <status event-id="0" level="success"></status>
  84. </output>
  85. </nds>
  86. [07/10/12 04:00:08.814]:ADTRACE PT:Applying policy: %+C%14CNOVLPWDSYNC-otp-EmailOnFailedPwdPub%-C.
  87. [07/10/12 04:00:08.814]:ADTRACE PT: Applying to status #1.
  88. [07/10/12 04:00:08.814]:ADTRACE PT: Evaluating selection criteria for rule 'Send e-mail for a failed publish password operation'.
  89. [07/10/12 04:00:08.814]:ADTRACE PT: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  90. [07/10/12 04:00:08.814]:ADTRACE PT: (if-operation equal "status") = TRUE.
  91. [07/10/12 04:00:08.829]:ADTRACE PT: (if-xpath true "self::status[@level != 'success']/operation-data/password-publish-status") = FALSE.
  92. [07/10/12 04:00:08.829]:ADTRACE PT: Rule rejected.
  93. [07/10/12 04:00:08.829]:ADTRACE PT:Policy returned:
  94. [07/10/12 04:00:08.829]:ADTRACE PT:
  95. <nds dtdversion="4.0" ndsversion="8.x">
  96. <source>
  97. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  98. <contact>Novell, Inc.</contact>
  99. </source>
  100. <output>
  101. <status event-id="0" level="success"></status>
  102. </output>
  103. </nds>
  104. [07/10/12 04:00:08.829]:ADTRACE PT:Applying policy: %+C%14CNOVLATRKBASE-otp-Subscribe%-C.
  105. [07/10/12 04:00:08.829]:ADTRACE PT: Applying to status #1.
  106. [07/10/12 04:00:08.829]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - Initialize Realm Mapping'.
  107. [07/10/12 04:00:08.829]:ADTRACE PT: (if-global-variable 'drv.acctTrk.enable' equal "true") = TRUE.
  108. [07/10/12 04:00:08.829]:ADTRACE PT: (if-global-variable 'drv.acctTrk.mode' equal "fanout") = FALSE.
  109. [07/10/12 04:00:08.829]:ADTRACE PT: Rule rejected.
  110. [07/10/12 04:00:08.829]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled or wrong object class'.
  111. [07/10/12 04:00:08.829]:ADTRACE PT: Rule selected.
  112. [07/10/12 04:00:08.829]:ADTRACE PT: Applying rule 'AccountTracking - disregard if disabled or wrong object class'.
  113. [07/10/12 04:00:08.829]:ADTRACE PT: Action: do-if().
  114. [07/10/12 04:00:08.829]:ADTRACE PT: Evaluating conditions.
  115. [07/10/12 04:00:08.829]:ADTRACE PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  116. [07/10/12 04:00:08.829]:ADTRACE PT: Performing else actions.
  117. [07/10/12 04:00:08.829]:ADTRACE PT: Action: do-for-each(arg-node-set(token-global-variable("drv.acctTrk.objectClass"))).
  118. [07/10/12 04:00:08.829]:ADTRACE PT: arg-node-set(token-global-variable("drv.acctTrk.objectClass"))
  119. [07/10/12 04:00:08.829]:ADTRACE PT: token-global-variable("drv.acctTrk.objectClass")
  120. [07/10/12 04:00:08.829]:ADTRACE PT: Token Value: {"user"}.
  121. [07/10/12 04:00:08.829]:ADTRACE PT: Arg Value: {"user"}.
  122. [07/10/12 04:00:08.829]:ADTRACE PT: Performing actions for local-variable(current-node) = "user".
  123. [07/10/12 04:00:08.829]:ADTRACE PT: Action: do-if().
  124. [07/10/12 04:00:08.829]:ADTRACE PT: Evaluating conditions.
  125. [07/10/12 04:00:08.829]:ADTRACE PT: (if-class-name equal "$current-node$") = FALSE.
  126. [07/10/12 04:00:08.829]:ADTRACE PT: Performing else actions.
  127. [07/10/12 04:00:08.829]:ADTRACE PT: Action: do-if().
  128. [07/10/12 04:00:08.829]:ADTRACE PT: Evaluating conditions.
  129. [07/10/12 04:00:08.829]:ADTRACE PT: (if-local-variable 'pass' not-available) = TRUE.
  130. [07/10/12 04:00:08.829]:ADTRACE PT: Performing if actions.
  131. [07/10/12 04:00:08.829]:ADTRACE PT: Action: do-break().
  132. [07/10/12 04:00:08.829]:ADTRACE PT:Policy returned:
  133. [07/10/12 04:00:08.829]:ADTRACE PT:
  134. <nds dtdversion="4.0" ndsversion="8.x">
  135. <source>
  136. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  137. <contact>Novell, Inc.</contact>
  138. </source>
  139. <output>
  140. <status event-id="0" level="success"></status>
  141. </output>
  142. </nds>
  143. [07/10/12 04:00:08.829]:ADTRACE PT:
  144. <nds dtdversion="4.0" ndsversion="8.x">
  145. <source>
  146. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  147. <contact>Novell, Inc.</contact>
  148. </source>
  149. <output>
  150. <status event-id="0" level="success"></status>
  151. </output>
  152. </nds>
  153. [07/10/12 04:00:08.829]:ADTRACE PT:Remote Interface Driver: Sending...
  154. [07/10/12 04:00:08.829]:ADTRACE PT:
  155. <nds dtdversion="4.0" ndsversion="8.x">
  156. <source>
  157. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  158. <contact>Novell, Inc.</contact>
  159. </source>
  160. <output>
  161. <status event-id="0" level="success"></status>
  162. </output>
  163. </nds>
  164. [07/10/12 04:00:08.829]:ADTRACE PT:Remote Interface Driver: Document sent.
  165. [07/10/12 04:01:08.673]:ADTRACE :Remote Interface Driver: Received.
  166. [07/10/12 04:01:08.673]:ADTRACE :
  167. <nds dtdversion="2.2">
  168. <source>
  169. <product version="4.0.1.0">DirXML</product>
  170. <contact>Novell, Inc.</contact>
  171. </source>
  172. <input>
  173. <status level="success" type="heartbeat"/>
  174. </input>
  175. </nds>
  176. [07/10/12 04:01:08.673]:ADTRACE :Remote Interface Driver: Received document for publisher channel
  177. [07/10/12 04:01:08.673]:ADTRACE :Remote Interface Driver: Waiting for receive...
  178. [07/10/12 04:01:08.673]:ADTRACE PT:Receiving DOM document from application.
  179. [07/10/12 04:01:08.673]:ADTRACE PT:
  180. <nds dtdversion="2.2">
  181. <source>
  182. <product version="4.0.1.0">DirXML</product>
  183. <contact>Novell, Inc.</contact>
  184. </source>
  185. <input>
  186. <status level="success" type="heartbeat"/>
  187. </input>
  188. </nds>
  189. [07/10/12 04:01:08.673]:ADTRACE PT:Applying input transformation policies.
  190. [07/10/12 04:01:08.673]:ADTRACE PT:Applying policy: %+C%14CNOVLAUDTENTC-itp-SendEntitlementsEvents%-C.
  191. [07/10/12 04:01:08.673]:ADTRACE PT: Applying to status #1.
  192. [07/10/12 04:01:08.673]:ADTRACE PT: Evaluating selection criteria for rule '00031200 - Account Create By Entitlement Grant'.
  193. [07/10/12 04:01:08.673]:ADTRACE PT: (if-operation equal "status") = TRUE.
  194. [07/10/12 04:01:08.673]:ADTRACE PT: (if-op-property 'accountAction' equal "accountCreateByEntitlementGrant") = FALSE.
  195. [07/10/12 04:01:08.673]:ADTRACE PT: Rule rejected.
  196. [07/10/12 04:01:08.673]:ADTRACE PT: Evaluating selection criteria for rule '00031201 - Account Delete By Entitlement Revoke'.
  197. [07/10/12 04:01:08.673]:ADTRACE PT: (if-operation equal "status") = TRUE.
  198. [07/10/12 04:01:08.673]:ADTRACE PT: (if-xpath true "./operation-data/entitlement-impl/@state = '0'") = FALSE.
  199. [07/10/12 04:01:08.673]:ADTRACE PT: (if-operation equal "status") = TRUE.
  200. [07/10/12 04:01:08.673]:ADTRACE PT: (if-op-property 'accountAction' equal "accountDeleteByEntitlementRevoke") = FALSE.
  201. [07/10/12 04:01:08.673]:ADTRACE PT: Rule rejected.
  202. [07/10/12 04:01:08.673]:ADTRACE PT: Evaluating selection criteria for rule '00031202 - Account Disable By Entitlement Revoke'.
  203. [07/10/12 04:01:08.689]:ADTRACE PT: (if-operation equal "status") = TRUE.
  204. [07/10/12 04:01:08.689]:ADTRACE PT: (if-op-property 'accountAction' equal "accountDisableByEntitlementRevoke") = FALSE.
  205. [07/10/12 04:01:08.689]:ADTRACE PT: Rule rejected.
  206. [07/10/12 04:01:08.689]:ADTRACE PT: Evaluating selection criteria for rule '00031203 - Account Enable By Entitlement Grant'.
  207. [07/10/12 04:01:08.689]:ADTRACE PT: (if-operation equal "status") = TRUE.
  208. [07/10/12 04:01:08.689]:ADTRACE PT: (if-op-property 'accountAction' equal "accountEnableByEntitlementGrant") = FALSE.
  209. [07/10/12 04:01:08.689]:ADTRACE PT: Rule rejected.
  210. [07/10/12 04:01:08.689]:ADTRACE PT: Evaluating selection criteria for rule 'Generate Audit Event'.
  211. [07/10/12 04:01:08.689]:ADTRACE PT: (if-operation equal "status") = TRUE.
  212. [07/10/12 04:01:08.689]:ADTRACE PT: (if-local-variable 'auditEventID' available) = FALSE.
  213. [07/10/12 04:01:08.689]:ADTRACE PT: Rule rejected.
  214. [07/10/12 04:01:08.689]:ADTRACE PT:Policy returned:
  215. [07/10/12 04:01:08.689]:ADTRACE PT:
  216. <nds dtdversion="2.2">
  217. <source>
  218. <product version="4.0.1.0">DirXML</product>
  219. <contact>Novell, Inc.</contact>
  220. </source>
  221. <input>
  222. <status level="success" type="heartbeat"/>
  223. </input>
  224. </nds>
  225. [07/10/12 04:01:08.689]:ADTRACE PT:Applying policy: %+C%14CNOVLADENTEX-itp-InitEntitlementConfigurationResource%-C.
  226. [07/10/12 04:01:08.689]:ADTRACE PT: Applying to status #1.
  227. [07/10/12 04:01:08.689]:ADTRACE PT: Evaluating selection criteria for rule 'Make sure we only run once and when we're ready'.
  228. [07/10/12 04:01:08.689]:ADTRACE PT: (if-local-variable 'objectClass' match ".+") = TRUE.
  229. [07/10/12 04:01:08.689]:ADTRACE PT: (if-local-variable 'entConfigInitialized' equal "true") = TRUE.
  230. [07/10/12 04:01:08.689]:ADTRACE PT: Rule selected.
  231. [07/10/12 04:01:08.689]:ADTRACE PT: Applying rule 'Make sure we only run once and when we're ready'.
  232. [07/10/12 04:01:08.689]:ADTRACE PT: Action: do-break().
  233. [07/10/12 04:01:08.689]:ADTRACE PT:Policy returned:
  234. [07/10/12 04:01:08.689]:ADTRACE PT:
  235. <nds dtdversion="2.2">
  236. <source>
  237. <product version="4.0.1.0">DirXML</product>
  238. <contact>Novell, Inc.</contact>
  239. </source>
  240. <input>
  241. <status level="success" type="heartbeat"/>
  242. </input>
  243. </nds>
  244. [07/10/12 04:01:08.689]:ADTRACE PT:Applying policy: %+C%14CNOVLADMSINFO-itp-InitManagedSystemInfo%-C.
  245. [07/10/12 04:01:08.689]:ADTRACE PT: Applying to status #1.
  246. [07/10/12 04:01:08.689]:ADTRACE PT: Evaluating selection criteria for rule 'Make sure we only run once and when we're ready'.
  247. [07/10/12 04:01:08.689]:ADTRACE PT: (if-local-variable 'objectClass' match ".+") = TRUE.
  248. [07/10/12 04:01:08.689]:ADTRACE PT: (if-local-variable 'mSysInfoInitialized' equal "true") = TRUE.
  249. [07/10/12 04:01:08.689]:ADTRACE PT: Rule selected.
  250. [07/10/12 04:01:08.689]:ADTRACE PT: Applying rule 'Make sure we only run once and when we're ready'.
  251. [07/10/12 04:01:08.689]:ADTRACE PT: Action: do-break().
  252. [07/10/12 04:01:08.689]:ADTRACE PT:Policy returned:
  253. [07/10/12 04:01:08.689]:ADTRACE PT:
  254. <nds dtdversion="2.2">
  255. <source>
  256. <product version="4.0.1.0">DirXML</product>
  257. <contact>Novell, Inc.</contact>
  258. </source>
  259. <input>
  260. <status level="success" type="heartbeat"/>
  261. </input>
  262. </nds>
  263. [07/10/12 04:01:08.689]:ADTRACE PT:Applying policy: %+C%14CNOVLATRKBASE-itp-Publish%-C.
  264. [07/10/12 04:01:08.689]:ADTRACE PT: Applying to status #1.
  265. [07/10/12 04:01:08.689]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled or wrong object class'.
  266. [07/10/12 04:01:08.689]:ADTRACE PT: Rule selected.
  267. [07/10/12 04:01:08.689]:ADTRACE PT: Applying rule 'AccountTracking - disregard if disabled or wrong object class'.
  268. [07/10/12 04:01:08.689]:ADTRACE PT: Action: do-if().
  269. [07/10/12 04:01:08.689]:ADTRACE PT: Evaluating conditions.
  270. [07/10/12 04:01:08.689]:ADTRACE PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  271. [07/10/12 04:01:08.689]:ADTRACE PT: Performing else actions.
  272. [07/10/12 04:01:08.689]:ADTRACE PT: Action: do-if().
  273. [07/10/12 04:01:08.689]:ADTRACE PT: Evaluating conditions.
  274. [07/10/12 04:01:08.689]:ADTRACE PT: (if-class-name available) = FALSE.
  275. [07/10/12 04:01:08.689]:ADTRACE PT: Performing else actions.
  276. [07/10/12 04:01:08.689]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - on add-association sync the operation-properties to status operations'.
  277. [07/10/12 04:01:08.689]:ADTRACE PT: (if-operation equal "add-association") = FALSE.
  278. [07/10/12 04:01:08.689]:ADTRACE PT: Rule rejected.
  279. [07/10/12 04:01:08.689]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - Query for destination DN using Association'.
  280. [07/10/12 04:01:08.689]:ADTRACE PT: (if-operation match "modify|delete|move|rename") = FALSE.
  281. [07/10/12 04:01:08.689]:ADTRACE PT: Rule rejected.
  282. [07/10/12 04:01:08.689]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - add interested properties to current doc for future use.'.
  283. [07/10/12 04:01:08.689]:ADTRACE PT: (if-operation match "add|modify|delete|rename|move|status") = TRUE.
  284. [07/10/12 04:01:08.704]:ADTRACE PT: Rule selected.
  285. [07/10/12 04:01:08.704]:ADTRACE PT: Applying rule 'AccountTracking - add interested properties to current doc for future use.'.
  286. [07/10/12 04:01:08.704]:ADTRACE PT: Action: do-for-each(arg-node-set(token-global-variable("drv.acctTrk.identifiers"))).
  287. [07/10/12 04:01:08.704]:ADTRACE PT: arg-node-set(token-global-variable("drv.acctTrk.identifiers"))
  288. [07/10/12 04:01:08.704]:ADTRACE PT: token-global-variable("drv.acctTrk.identifiers")
  289. [07/10/12 04:01:08.704]:ADTRACE PT: Token Value: {"sAMAccountName","userPrincipalName","LDAPDN","association"}.
  290. [07/10/12 04:01:08.704]:ADTRACE PT: Arg Value: {"sAMAccountName","userPrincipalName","LDAPDN","association"}.
  291. [07/10/12 04:01:08.704]:ADTRACE PT: Performing actions for local-variable(current-node) = "sAMAccountName".
  292. [07/10/12 04:01:08.704]:ADTRACE PT: Action: do-if().
  293. [07/10/12 04:01:08.704]:ADTRACE PT: Evaluating conditions.
  294. [07/10/12 04:01:08.704]:ADTRACE PT: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  295. [07/10/12 04:01:08.704]:ADTRACE PT: Performing else actions.
  296. [07/10/12 04:01:08.704]:ADTRACE PT: Action: do-if().
  297. [07/10/12 04:01:08.704]:ADTRACE PT: Evaluating conditions.
  298. [07/10/12 04:01:08.704]:ADTRACE PT: (if-local-variable 'current-node' equal "association") = FALSE.
  299. [07/10/12 04:01:08.704]:ADTRACE PT: Performing else actions.
  300. [07/10/12 04:01:08.704]:ADTRACE PT: Action: do-if().
  301. [07/10/12 04:01:08.704]:ADTRACE PT: Evaluating conditions.
  302. [07/10/12 04:01:08.704]:ADTRACE PT: Expanded variable reference '$current-node$' to 'sAMAccountName'.
  303. [07/10/12 04:01:08.704]:ADTRACE PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  304. [07/10/12 04:01:08.704]:ADTRACE PT: Expanded variable reference '$current-node$' to 'sAMAccountName'.
  305. [07/10/12 04:01:08.704]:ADTRACE PT: (if-op-attr '$current-node$' available) = FALSE.
  306. [07/10/12 04:01:08.704]:ADTRACE PT: Performing else actions.
  307. [07/10/12 04:01:08.704]:ADTRACE PT: Performing actions for local-variable(current-node) = "userPrincipalName".
  308. [07/10/12 04:01:08.704]:ADTRACE PT: Action: do-if().
  309. [07/10/12 04:01:08.704]:ADTRACE PT: Evaluating conditions.
  310. [07/10/12 04:01:08.704]:ADTRACE PT: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  311. [07/10/12 04:01:08.704]:ADTRACE PT: Performing else actions.
  312. [07/10/12 04:01:08.704]:ADTRACE PT: Action: do-if().
  313. [07/10/12 04:01:08.704]:ADTRACE PT: Evaluating conditions.
  314. [07/10/12 04:01:08.704]:ADTRACE PT: (if-local-variable 'current-node' equal "association") = FALSE.
  315. [07/10/12 04:01:08.704]:ADTRACE PT: Performing else actions.
  316. [07/10/12 04:01:08.704]:ADTRACE PT: Action: do-if().
  317. [07/10/12 04:01:08.704]:ADTRACE PT: Evaluating conditions.
  318. [07/10/12 04:01:08.704]:ADTRACE PT: Expanded variable reference '$current-node$' to 'userPrincipalName'.
  319. [07/10/12 04:01:08.704]:ADTRACE PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  320. [07/10/12 04:01:08.704]:ADTRACE PT: Expanded variable reference '$current-node$' to 'userPrincipalName'.
  321. [07/10/12 04:01:08.704]:ADTRACE PT: (if-op-attr '$current-node$' available) = FALSE.
  322. [07/10/12 04:01:08.704]:ADTRACE PT: Performing else actions.
  323. [07/10/12 04:01:08.704]:ADTRACE PT: Performing actions for local-variable(current-node) = "LDAPDN".
  324. [07/10/12 04:01:08.704]:ADTRACE PT: Action: do-if().
  325. [07/10/12 04:01:08.704]:ADTRACE PT: Evaluating conditions.
  326. [07/10/12 04:01:08.704]:ADTRACE PT: (if-local-variable 'current-node' equal "LDAPDN") = TRUE.
  327. [07/10/12 04:01:08.704]:ADTRACE PT: Expanded variable reference '$current-node$' to 'LDAPDN'.
  328. [07/10/12 04:01:08.704]:ADTRACE PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  329. [07/10/12 04:01:08.704]:ADTRACE PT: (if-src-dn available) = FALSE.
  330. [07/10/12 04:01:08.720]:ADTRACE PT: Performing else actions.
  331. [07/10/12 04:01:08.720]:ADTRACE PT: Action: do-if().
  332. [07/10/12 04:01:08.720]:ADTRACE PT: Evaluating conditions.
  333. [07/10/12 04:01:08.720]:ADTRACE PT: (if-local-variable 'current-node' equal "association") = FALSE.
  334. [07/10/12 04:01:08.720]:ADTRACE PT: Performing else actions.
  335. [07/10/12 04:01:08.720]:ADTRACE PT: Action: do-if().
  336. [07/10/12 04:01:08.720]:ADTRACE PT: Evaluating conditions.
  337. [07/10/12 04:01:08.720]:ADTRACE PT: Expanded variable reference '$current-node$' to 'LDAPDN'.
  338. [07/10/12 04:01:08.720]:ADTRACE PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  339. [07/10/12 04:01:08.720]:ADTRACE PT: Expanded variable reference '$current-node$' to 'LDAPDN'.
  340. [07/10/12 04:01:08.720]:ADTRACE PT: (if-op-attr '$current-node$' available) = FALSE.
  341. [07/10/12 04:01:08.720]:ADTRACE PT: Performing else actions.
  342. [07/10/12 04:01:08.720]:ADTRACE PT: Performing actions for local-variable(current-node) = "association".
  343. [07/10/12 04:01:08.720]:ADTRACE PT: Action: do-if().
  344. [07/10/12 04:01:08.720]:ADTRACE PT: Evaluating conditions.
  345. [07/10/12 04:01:08.720]:ADTRACE PT: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  346. [07/10/12 04:01:08.720]:ADTRACE PT: Performing else actions.
  347. [07/10/12 04:01:08.720]:ADTRACE PT: Action: do-if().
  348. [07/10/12 04:01:08.720]:ADTRACE PT: Evaluating conditions.
  349. [07/10/12 04:01:08.720]:ADTRACE PT: (if-local-variable 'current-node' equal "association") = TRUE.
  350. [07/10/12 04:01:08.720]:ADTRACE PT: Expanded variable reference '$current-node$' to 'association'.
  351. [07/10/12 04:01:08.720]:ADTRACE PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  352. [07/10/12 04:01:08.720]:ADTRACE PT: (if-association available) = FALSE.
  353. [07/10/12 04:01:08.720]:ADTRACE PT: Performing else actions.
  354. [07/10/12 04:01:08.720]:ADTRACE PT: Action: do-if().
  355. [07/10/12 04:01:08.720]:ADTRACE PT: Evaluating conditions.
  356. [07/10/12 04:01:08.720]:ADTRACE PT: Expanded variable reference '$current-node$' to 'association'.
  357. [07/10/12 04:01:08.720]:ADTRACE PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  358. [07/10/12 04:01:08.720]:ADTRACE PT: Expanded variable reference '$current-node$' to 'association'.
  359. [07/10/12 04:01:08.720]:ADTRACE PT: (if-op-attr '$current-node$' available) = FALSE.
  360. [07/10/12 04:01:08.720]:ADTRACE PT: Performing else actions.
  361. [07/10/12 04:01:08.720]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - Initialize status properties on published events'.
  362. [07/10/12 04:01:08.720]:ADTRACE PT: (if-operation match "add|modify|delete|rename|move") = FALSE.
  363. [07/10/12 04:01:08.720]:ADTRACE PT: Rule rejected.
  364. [07/10/12 04:01:08.720]:ADTRACE PT:Policy returned:
  365. [07/10/12 04:01:08.720]:ADTRACE PT:
  366. <nds dtdversion="2.2">
  367. <source>
  368. <product version="4.0.1.0">DirXML</product>
  369. <contact>Novell, Inc.</contact>
  370. </source>
  371. <input>
  372. <status level="success" type="heartbeat"/>
  373. </input>
  374. </nds>
  375. [07/10/12 04:01:08.720]:ADTRACE PT:Applying policy: %+C%14CNOVLATRKBASE-itp-WriteAccounts%-C.
  376. [07/10/12 04:01:08.720]:ADTRACE PT: Applying to status #1.
  377. [07/10/12 04:01:08.720]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - Initialize Realm Mapping'.
  378. [07/10/12 04:01:08.720]:ADTRACE PT: (if-global-variable 'drv.acctTrk.enable' equal "true") = TRUE.
  379. [07/10/12 04:01:08.720]:ADTRACE PT: (if-global-variable 'drv.acctTrk.mode' equal "fanout") = FALSE.
  380. [07/10/12 04:01:08.720]:ADTRACE PT: Rule rejected.
  381. [07/10/12 04:01:08.720]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled'.
  382. [07/10/12 04:01:08.720]:ADTRACE PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  383. [07/10/12 04:01:08.720]:ADTRACE PT: Rule rejected.
  384. [07/10/12 04:01:08.720]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - query DirXML-Accounts Attribute'.
  385. [07/10/12 04:01:08.720]:ADTRACE PT: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  386. [07/10/12 04:01:08.720]:ADTRACE PT: Rule rejected.
  387. [07/10/12 04:01:08.720]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - remove Dirxml-Account values on regular delete operation'.
  388. [07/10/12 04:01:08.720]:ADTRACE PT: (if-operation match "delete|remove-association") = FALSE.
  389. [07/10/12 04:01:08.720]:ADTRACE PT: (if-operation equal "status") = TRUE.
  390. [07/10/12 04:01:08.720]:ADTRACE PT: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  391. [07/10/12 04:01:08.720]:ADTRACE PT: Rule rejected.
  392. [07/10/12 04:01:08.720]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - update DirXMLAccounts attribute on regular operations'.
  393. [07/10/12 04:01:08.736]:ADTRACE PT: (if-op-property 'AccountTracking-Operation' not-available) = TRUE.
  394. [07/10/12 04:01:08.736]:ADTRACE PT: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  395. [07/10/12 04:01:08.736]:ADTRACE PT: (if-operation equal "status") = TRUE.
  396. [07/10/12 04:01:08.736]:ADTRACE PT: (if-xpath true "./@level='success' or ./@level='warning'") = TRUE.
  397. [07/10/12 04:01:08.736]:ADTRACE PT: (if-op-property 'AccountTracking-Operation' available) = FALSE.
  398. [07/10/12 04:01:08.736]:ADTRACE PT: Rule rejected.
  399. [07/10/12 04:01:08.736]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - update DirXMLAccounts attribute on mapped operations'.
  400. [07/10/12 04:01:08.736]:ADTRACE PT: (if-xpath true "operation-data/account-tracking-operation") = FALSE.
  401. [07/10/12 04:01:08.736]:ADTRACE PT: (if-xpath true "operation-data/account-tracking-operation") = FALSE.
  402. [07/10/12 04:01:08.736]:ADTRACE PT: Rule rejected.
  403. [07/10/12 04:01:08.736]:ADTRACE PT:Policy returned:
  404. [07/10/12 04:01:08.736]:ADTRACE PT:
  405. <nds dtdversion="2.2">
  406. <source>
  407. <product version="4.0.1.0">DirXML</product>
  408. <contact>Novell, Inc.</contact>
  409. </source>
  410. <input>
  411. <status level="success" type="heartbeat"/>
  412. </input>
  413. </nds>
  414. [07/10/12 04:01:08.736]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-itp-SubscriberUserAdd%-C.
  415. [07/10/12 04:01:08.736]:ADTRACE PT: Applying to status #1.
  416. [07/10/12 04:01:08.736]:ADTRACE PT: Evaluating selection criteria for rule 'Populate DirXML-ADContext on initial user add'.
  417. [07/10/12 04:01:08.736]:ADTRACE PT: (if-operation equal "add-association") = FALSE.
  418. [07/10/12 04:01:08.736]:ADTRACE PT: Rule rejected.
  419. [07/10/12 04:01:08.736]:ADTRACE PT:Policy returned:
  420. [07/10/12 04:01:08.736]:ADTRACE PT:
  421. <nds dtdversion="2.2">
  422. <source>
  423. <product version="4.0.1.0">DirXML</product>
  424. <contact>Novell, Inc.</contact>
  425. </source>
  426. <input>
  427. <status level="success" type="heartbeat"/>
  428. </input>
  429. </nds>
  430. [07/10/12 04:01:08.736]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-itp-FormatConversions%-C.
  431. [07/10/12 04:01:08.736]:ADTRACE PT: Applying to status #1.
  432. [07/10/12 04:01:08.736]:ADTRACE PT: Evaluating selection criteria for rule 'streetAddress: Convert CR-LF to LF'.
  433. [07/10/12 04:01:08.736]:ADTRACE PT: Rule selected.
  434. [07/10/12 04:01:08.736]:ADTRACE PT: Applying rule 'streetAddress: Convert CR-LF to LF'.
  435. [07/10/12 04:01:08.736]:ADTRACE PT: Action: do-reformat-op-attr("streetAddress",token-replace-all("\r\n","\r",token-local-variable("current-value"))).
  436. [07/10/12 04:01:08.736]:ADTRACE PT: Evaluating selection criteria for rule 'logonHours: Convert to Login Allowed Time Map form'.
  437. [07/10/12 04:01:08.736]:ADTRACE PT: Rule selected.
  438. [07/10/12 04:01:08.736]:ADTRACE PT: Applying rule 'logonHours: Convert to Login Allowed Time Map form'.
  439. [07/10/12 04:01:08.736]:ADTRACE PT: Action: do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2eDir($current-value)")).
  440. [07/10/12 04:01:08.736]:ADTRACE PT: Evaluating selection criteria for rule 'accountExpires: Convert to Identity Vault time format'.
  441. [07/10/12 04:01:08.736]:ADTRACE PT: Rule selected.
  442. [07/10/12 04:01:08.736]:ADTRACE PT: Applying rule 'accountExpires: Convert to Identity Vault time format'.
  443. [07/10/12 04:01:08.736]:ADTRACE PT: Action: do-reformat-op-attr("accountExpires",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
  444. [07/10/12 04:01:08.736]:ADTRACE PT: Evaluating selection criteria for rule 'lockoutTime: Convert to Identity Vault time format'.
  445. [07/10/12 04:01:08.736]:ADTRACE PT: Rule selected.
  446. [07/10/12 04:01:08.736]:ADTRACE PT: Applying rule 'lockoutTime: Convert to Identity Vault time format'.
  447. [07/10/12 04:01:08.736]:ADTRACE PT: Action: do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
  448. [07/10/12 04:01:08.736]:ADTRACE PT:Policy returned:
  449. [07/10/12 04:01:08.736]:ADTRACE PT:
  450. <nds dtdversion="2.2">
  451. <source>
  452. <product version="4.0.1.0">DirXML</product>
  453. <contact>Novell, Inc.</contact>
  454. </source>
  455. <input>
  456. <status level="success" type="heartbeat"/>
  457. </input>
  458. </nds>
  459. [07/10/12 04:01:08.736]:ADTRACE PT:Applying policy: %+C%14CNOVLDATACOLL-itp-DataCollectionQuerySupport%-C.
  460. [07/10/12 04:01:08.736]:ADTRACE PT: Applying to status #1.
  461. [07/10/12 04:01:08.736]:ADTRACE PT: Evaluating selection criteria for rule 'Rename @association-ref to @association and change @type from "dn" to "{dn}"'.
  462. [07/10/12 04:01:08.736]:ADTRACE PT: (if-operation equal "instance") = FALSE.
  463. [07/10/12 04:01:08.736]:ADTRACE PT: Rule rejected.
  464. [07/10/12 04:01:08.736]:ADTRACE PT:Policy returned:
  465. [07/10/12 04:01:08.736]:ADTRACE PT:
  466. <nds dtdversion="2.2">
  467. <source>
  468. <product version="4.0.1.0">DirXML</product>
  469. <contact>Novell, Inc.</contact>
  470. </source>
  471. <input>
  472. <status level="success" type="heartbeat"/>
  473. </input>
  474. </nds>
  475. [07/10/12 04:01:08.736]:ADTRACE PT:Applying policy: %+C%14CNOVLADENTEX-itp-EntitlementsImpl%-C.
  476. [07/10/12 04:01:08.736]:ADTRACE PT: Applying to status #1.
  477. [07/10/12 04:01:08.736]:ADTRACE PT: Evaluating selection criteria for rule 'Intercept ADDomain (tagged identity query) query response'.
  478. [07/10/12 04:01:08.751]:ADTRACE PT: (if-operation equal "instance") = FALSE.
  479. [07/10/12 04:01:08.751]:ADTRACE PT: Rule rejected.
  480. [07/10/12 04:01:08.751]:ADTRACE PT: Evaluating selection criteria for rule 'Intercept ADDomain (tagged identity query) query status'.
  481. [07/10/12 04:01:08.751]:ADTRACE PT: (if-xpath true "../status[@event-id='query-driver-ident']/operation-data/@UserAccountEntitlementQuery") = FALSE.
  482. [07/10/12 04:01:08.751]:ADTRACE PT: Rule rejected.
  483. [07/10/12 04:01:08.751]:ADTRACE PT: Evaluating selection criteria for rule 'Check target of add-association for group membership entitlements'.
  484. [07/10/12 04:01:08.751]:ADTRACE PT: (if-global-variable 'drv.entitlement.Group' equal "true") = TRUE.
  485. [07/10/12 04:01:08.751]:ADTRACE PT: (if-operation equal "add-association") = FALSE.
  486. [07/10/12 04:01:08.751]:ADTRACE PT: Rule rejected.
  487. [07/10/12 04:01:08.751]:ADTRACE PT: Evaluating selection criteria for rule 'Check target of add-association for Exchange mailbox entitlements'.
  488. [07/10/12 04:01:08.751]:ADTRACE PT: (if-global-variable 'drv.exchMailboxMethod' equal "entitlement") = FALSE.
  489. [07/10/12 04:01:08.751]:ADTRACE PT: Rule rejected.
  490. [07/10/12 04:01:08.751]:ADTRACE PT:Policy returned:
  491. [07/10/12 04:01:08.751]:ADTRACE PT:
  492. <nds dtdversion="2.2">
  493. <source>
  494. <product version="4.0.1.0">DirXML</product>
  495. <contact>Novell, Inc.</contact>
  496. </source>
  497. <input>
  498. <status level="success" type="heartbeat"/>
  499. </input>
  500. </nds>
  501. [07/10/12 04:01:08.751]:ADTRACE PT:Applying policy: %+C%14CNOVLPWDSYNC-itp-EmailOnFailedPwdSub%-C.
  502. [07/10/12 04:01:08.751]:ADTRACE PT: Applying to status #1.
  503. [07/10/12 04:01:08.751]:ADTRACE PT: Evaluating selection criteria for rule 'Send e-mail on a failure when subscribing to passwords'.
  504. [07/10/12 04:01:08.751]:ADTRACE PT: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  505. [07/10/12 04:01:08.751]:ADTRACE PT: (if-operation equal "status") = TRUE.
  506. [07/10/12 04:01:08.751]:ADTRACE PT: (if-xpath true "self::status[@level != 'success'][text() != '']/operation-data/password-subscribe-status/association[text() != '']") = FALSE.
  507. [07/10/12 04:01:08.751]:ADTRACE PT: Rule rejected.
  508. [07/10/12 04:01:08.751]:ADTRACE PT: Evaluating selection criteria for rule 'Send e-mail on failure to reset connected system password using the Identity Vault password'.
  509. [07/10/12 04:01:08.751]:ADTRACE PT: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  510. [07/10/12 04:01:08.751]:ADTRACE PT: (if-operation equal "status") = TRUE.
  511. [07/10/12 04:01:08.751]:ADTRACE PT: (if-xpath true "self::status[@level != 'success']/operation-data/password-reset-status") = FALSE.
  512. [07/10/12 04:01:08.751]:ADTRACE PT: Rule rejected.
  513. [07/10/12 04:01:08.751]:ADTRACE PT:Policy returned:
  514. [07/10/12 04:01:08.751]:ADTRACE PT:
  515. <nds dtdversion="2.2">
  516. <source>
  517. <product version="4.0.1.0">DirXML</product>
  518. <contact>Novell, Inc.</contact>
  519. </source>
  520. <input>
  521. <status level="success" type="heartbeat"/>
  522. </input>
  523. </nds>
  524. [07/10/12 04:01:08.751]:ADTRACE PT:Applying schema mapping policies to input.
  525. [07/10/12 04:01:08.751]:ADTRACE PT:Applying policy: %+C%14CNOVLDATACOLL-smp-SkipSchemaMapping%-C.
  526. [07/10/12 04:01:08.751]:ADTRACE PT: Applying to status #1.
  527. [07/10/12 04:01:08.751]:ADTRACE PT: Evaluating selection criteria for rule 'skip'.
  528. [07/10/12 04:01:08.751]:ADTRACE PT: (if-operation equal "instance") = FALSE.
  529. [07/10/12 04:01:08.751]:ADTRACE PT: Rule rejected.
  530. [07/10/12 04:01:08.751]:ADTRACE PT: Evaluating selection criteria for rule 'restore'.
  531. [07/10/12 04:01:08.751]:ADTRACE PT: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  532. [07/10/12 04:01:08.751]:ADTRACE PT: Rule rejected.
  533. [07/10/12 04:01:08.751]:ADTRACE PT:Policy returned:
  534. [07/10/12 04:01:08.751]:ADTRACE PT:
  535. <nds dtdversion="2.2">
  536. <source>
  537. <product version="4.0.1.0">DirXML</product>
  538. <contact>Novell, Inc.</contact>
  539. </source>
  540. <input>
  541. <status level="success" type="heartbeat"/>
  542. </input>
  543. </nds>
  544. [07/10/12 04:01:08.751]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-smp%-C.
  545. [07/10/12 04:01:08.751]:ADTRACE PT:Applying policy: %+C%14CNOVLDATACOLL-smp-SkipSchemaMapping%-C.
  546. [07/10/12 04:01:08.751]:ADTRACE PT: Applying to status #1.
  547. [07/10/12 04:01:08.751]:ADTRACE PT: Evaluating selection criteria for rule 'skip'.
  548. [07/10/12 04:01:08.751]:ADTRACE PT: (if-operation equal "instance") = FALSE.
  549. [07/10/12 04:01:08.751]:ADTRACE PT: Rule rejected.
  550. [07/10/12 04:01:08.751]:ADTRACE PT: Evaluating selection criteria for rule 'restore'.
  551. [07/10/12 04:01:08.751]:ADTRACE PT: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  552. [07/10/12 04:01:08.751]:ADTRACE PT: Rule rejected.
  553. [07/10/12 04:01:08.751]:ADTRACE PT:Policy returned:
  554. [07/10/12 04:01:08.751]:ADTRACE PT:
  555. <nds dtdversion="2.2">
  556. <source>
  557. <product version="4.0.1.0">DirXML</product>
  558. <contact>Novell, Inc.</contact>
  559. </source>
  560. <input>
  561. <status level="success" type="heartbeat"/>
  562. </input>
  563. </nds>
  564. [07/10/12 04:01:08.767]:ADTRACE PT:Resolving association references.
  565. [07/10/12 04:01:08.767]:ADTRACE PT:Applying event transformation policies.
  566. [07/10/12 04:01:08.767]:ADTRACE PT:Applying policy: %+C%14CNOVLADENTEX-pub-etp-EntitlementsImpl%-C.
  567. [07/10/12 04:01:08.767]:ADTRACE PT: Applying to status #1.
  568. [07/10/12 04:01:08.767]:ADTRACE PT: Evaluating selection criteria for rule 'Disallow user account delete when using entitlements'.
  569. [07/10/12 04:01:08.767]:ADTRACE PT: (if-operation equal "delete") = FALSE.
  570. [07/10/12 04:01:08.767]:ADTRACE PT: Rule rejected.
  571. [07/10/12 04:01:08.767]:ADTRACE PT: Evaluating selection criteria for rule 'Strip Login Disabled from operation (Disable Option)'.
  572. [07/10/12 04:01:08.767]:ADTRACE PT: (if-global-variable 'drv.entitlement.UserAccount' equal "true") = TRUE.
  573. [07/10/12 04:01:08.767]:ADTRACE PT: (if-global-variable 'drv.entitlement.remove' equal "disable") = TRUE.
  574. [07/10/12 04:01:08.767]:ADTRACE PT: (if-class-name equal "User") = FALSE.
  575. [07/10/12 04:01:08.767]:ADTRACE PT: Rule rejected.
  576. [07/10/12 04:01:08.767]:ADTRACE PT:Policy returned:
  577. [07/10/12 04:01:08.767]:ADTRACE PT:
  578. <nds dtdversion="2.2">
  579. <source>
  580. <product version="4.0.1.0">DirXML</product>
  581. <contact>Novell, Inc.</contact>
  582. </source>
  583. <input>
  584. <status level="success" type="heartbeat"/>
  585. </input>
  586. </nds>
  587. [07/10/12 04:01:08.767]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-pub-etp-HandleMovesAndRenames%-C.
  588. [07/10/12 04:01:08.767]:ADTRACE PT: Applying to status #1.
  589. [07/10/12 04:01:08.767]:ADTRACE PT: Evaluating selection criteria for rule 'break if not a move or rename'.
  590. [07/10/12 04:01:08.767]:ADTRACE PT: (if-operation not-match "move|rename") = TRUE.
  591. [07/10/12 04:01:08.767]:ADTRACE PT: Rule selected.
  592. [07/10/12 04:01:08.767]:ADTRACE PT: Applying rule 'break if not a move or rename'.
  593. [07/10/12 04:01:08.767]:ADTRACE PT: Action: do-break().
  594. [07/10/12 04:01:08.767]:ADTRACE PT:Policy returned:
  595. [07/10/12 04:01:08.767]:ADTRACE PT:
  596. <nds dtdversion="2.2">
  597. <source>
  598. <product version="4.0.1.0">DirXML</product>
  599. <contact>Novell, Inc.</contact>
  600. </source>
  601. <input>
  602. <status level="success" type="heartbeat"/>
  603. </input>
  604. </nds>
  605. [07/10/12 04:01:08.767]:ADTRACE PT:Applying publisher filter.
  606. [07/10/12 04:01:08.767]:ADTRACE PT:Publisher processing status for .
  607. [07/10/12 04:01:08.767]:ADTRACE PT:Applying command transformation policies.
  608. [07/10/12 04:01:08.767]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-pub-ctp-UserNameMap%-C.
  609. [07/10/12 04:01:08.767]:ADTRACE PT: Applying to status #1.
  610. [07/10/12 04:01:08.767]:ADTRACE PT: Evaluating selection criteria for rule 'consider user objects when name mapping is enabled'.
  611. [07/10/12 04:01:08.767]:ADTRACE PT: (if-class-name not-equal "User") = TRUE.
  612. [07/10/12 04:01:08.767]:ADTRACE PT: Rule selected.
  613. [07/10/12 04:01:08.767]:ADTRACE PT: Applying rule 'consider user objects when name mapping is enabled'.
  614. [07/10/12 04:01:08.767]:ADTRACE PT: Action: do-break().
  615. [07/10/12 04:01:08.767]:ADTRACE PT:Policy returned:
  616. [07/10/12 04:01:08.767]:ADTRACE PT:
  617. <nds dtdversion="2.2">
  618. <source>
  619. <product version="4.0.1.0">DirXML</product>
  620. <contact>Novell, Inc.</contact>
  621. </source>
  622. <input>
  623. <status level="success" type="heartbeat"/>
  624. </input>
  625. </nds>
  626. [07/10/12 04:01:08.767]:ADTRACE PT:Applying policy: %+C%14CNOVLPWDSYNC-pub-ctp-DefaultPwd%-C.
  627. [07/10/12 04:01:08.767]:ADTRACE PT: Applying to status #1.
  628. [07/10/12 04:01:08.767]:ADTRACE PT: Evaluating selection criteria for rule 'On User add, provide default password of @Dirxml1 if no password exists'.
  629. [07/10/12 04:01:08.767]:ADTRACE PT: (if-operation equal "add") = FALSE.
  630. [07/10/12 04:01:08.767]:ADTRACE PT: Rule rejected.
  631. [07/10/12 04:01:08.767]:ADTRACE PT:Policy returned:
  632. [07/10/12 04:01:08.767]:ADTRACE PT:
  633. <nds dtdversion="2.2">
  634. <source>
  635. <product version="4.0.1.0">DirXML</product>
  636. <contact>Novell, Inc.</contact>
  637. </source>
  638. <input>
  639. <status level="success" type="heartbeat"/>
  640. </input>
  641. </nds>
  642. [07/10/12 04:01:08.767]:ADTRACE PT:Applying policy: %+C%14CNOVLPWDSYNC-pub-ctp-CheckPwdGCV%-C.
  643. [07/10/12 04:01:08.767]:ADTRACE PT: Applying to status #1.
  644. [07/10/12 04:01:08.767]:ADTRACE PT: Evaluating selection criteria for rule 'Block publishing passwords to the Identity Vault when adding an object'.
  645. [07/10/12 04:01:08.767]:ADTRACE PT: (if-global-variable 'enable-password-publish' equal "false") = FALSE.
  646. [07/10/12 04:01:08.767]:ADTRACE PT: Rule rejected.
  647. [07/10/12 04:01:08.767]:ADTRACE PT: Evaluating selection criteria for rule 'Block sending modify-password changes to the Identity Vault'.
  648. [07/10/12 04:01:08.767]:ADTRACE PT: (if-global-variable 'enable-password-publish' equal "false") = FALSE.
  649. [07/10/12 04:01:08.767]:ADTRACE PT: Rule rejected.
  650. [07/10/12 04:01:08.767]:ADTRACE PT:Policy returned:
  651. [07/10/12 04:01:08.767]:ADTRACE PT:
  652. <nds dtdversion="2.2">
  653. <source>
  654. <product version="4.0.1.0">DirXML</product>
  655. <contact>Novell, Inc.</contact>
  656. </source>
  657. <input>
  658. <status level="success" type="heartbeat"/>
  659. </input>
  660. </nds>
  661. [07/10/12 04:01:08.783]:ADTRACE PT:Applying policy: %+C%14CNOVLPWDSYNC-pub-ctp-PublishDistPwd%-C.
  662. [07/10/12 04:01:08.783]:ADTRACE PT: Applying to status #1.
  663. [07/10/12 04:01:08.783]:ADTRACE PT: Evaluating selection criteria for rule 'Add nspmDistributionAttribute attribute to add operation'.
  664. [07/10/12 04:01:08.783]:ADTRACE PT: (if-global-variable 'publish-password-to-dp' equal "true") = FALSE.
  665. [07/10/12 04:01:08.783]:ADTRACE PT: Rule rejected.
  666. [07/10/12 04:01:08.783]:ADTRACE PT: Evaluating selection criteria for rule 'Change modify-password operations to a modify'.
  667. [07/10/12 04:01:08.783]:ADTRACE PT: (if-global-variable 'publish-password-to-dp' equal "true") = FALSE.
  668. [07/10/12 04:01:08.783]:ADTRACE PT: Rule rejected.
  669. [07/10/12 04:01:08.783]:ADTRACE PT:Policy returned:
  670. [07/10/12 04:01:08.783]:ADTRACE PT:
  671. <nds dtdversion="2.2">
  672. <source>
  673. <product version="4.0.1.0">DirXML</product>
  674. <contact>Novell, Inc.</contact>
  675. </source>
  676. <input>
  677. <status level="success" type="heartbeat"/>
  678. </input>
  679. </nds>
  680. [07/10/12 04:01:08.783]:ADTRACE PT:Applying policy: %+C%14CNOVLPWDSYNC-pub-ctp-PublishNDSPwd%-C.
  681. [07/10/12 04:01:08.783]:ADTRACE PT: Applying to status #1.
  682. [07/10/12 04:01:08.783]:ADTRACE PT: Evaluating selection criteria for rule 'Block publishing passwords to eDirectory password'.
  683. [07/10/12 04:01:08.783]:ADTRACE PT: (if-global-variable 'publish-password-to-nds' equal "false") = FALSE.
  684. [07/10/12 04:01:08.783]:ADTRACE PT: Rule rejected.
  685. [07/10/12 04:01:08.783]:ADTRACE PT: Evaluating selection criteria for rule 'Block sending modify-password changes to the eDirectory password'.
  686. [07/10/12 04:01:08.783]:ADTRACE PT: (if-global-variable 'publish-password-to-nds' equal "false") = FALSE.
  687. [07/10/12 04:01:08.783]:ADTRACE PT: Rule rejected.
  688. [07/10/12 04:01:08.783]:ADTRACE PT:Policy returned:
  689. [07/10/12 04:01:08.783]:ADTRACE PT:
  690. <nds dtdversion="2.2">
  691. <source>
  692. <product version="4.0.1.0">DirXML</product>
  693. <contact>Novell, Inc.</contact>
  694. </source>
  695. <input>
  696. <status level="success" type="heartbeat"/>
  697. </input>
  698. </nds>
  699. [07/10/12 04:01:08.783]:ADTRACE PT:Applying policy: %+C%14CNOVLPWDSYNC-pub-ctp-AddPwdPayload%-C.
  700. [07/10/12 04:01:08.783]:ADTRACE PT: Applying to status #1.
  701. [07/10/12 04:01:08.783]:ADTRACE PT: Evaluating selection criteria for rule 'Add operation-data element to password operations'.
  702. [07/10/12 04:01:08.783]:ADTRACE PT: (if-operation equal "add") = FALSE.
  703. [07/10/12 04:01:08.783]:ADTRACE PT: (if-operation equal "add") = FALSE.
  704. [07/10/12 04:01:08.783]:ADTRACE PT: (if-operation equal "modify-password") = FALSE.
  705. [07/10/12 04:01:08.783]:ADTRACE PT: (if-operation equal "modify") = FALSE.
  706. [07/10/12 04:01:08.783]:ADTRACE PT: Rule rejected.
  707. [07/10/12 04:01:08.783]:ADTRACE PT: Evaluating selection criteria for rule 'Add payload data to password operations'.
  708. [07/10/12 04:01:08.783]:ADTRACE PT: (if-operation equal "add") = FALSE.
  709. [07/10/12 04:01:08.783]:ADTRACE PT: (if-operation equal "add") = FALSE.
  710. [07/10/12 04:01:08.783]:ADTRACE PT: (if-operation equal "modify-password") = FALSE.
  711. [07/10/12 04:01:08.783]:ADTRACE PT: (if-operation equal "modify") = FALSE.
  712. [07/10/12 04:01:08.783]:ADTRACE PT: Rule rejected.
  713. [07/10/12 04:01:08.783]:ADTRACE PT:Policy returned:
  714. [07/10/12 04:01:08.783]:ADTRACE PT:
  715. <nds dtdversion="2.2">
  716. <source>
  717. <product version="4.0.1.0">DirXML</product>
  718. <contact>Novell, Inc.</contact>
  719. </source>
  720. <input>
  721. <status level="success" type="heartbeat"/>
  722. </input>
  723. </nds>
  724. [07/10/12 04:01:08.783]:ADTRACE PT:Applying policy: %+C%14CNOVLATRKBASE-pub-ctp-WriteAccountsOnAdds%-C.
  725. [07/10/12 04:01:08.783]:ADTRACE PT: Applying to status #1.
  726. [07/10/12 04:01:08.783]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - disregard policy if disabled'.
  727. [07/10/12 04:01:08.783]:ADTRACE PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  728. [07/10/12 04:01:08.783]:ADTRACE PT: Rule rejected.
  729. [07/10/12 04:01:08.783]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - on add operation add Dirxml-Accounts'.
  730. [07/10/12 04:01:08.783]:ADTRACE PT: (if-operation equal "add") = FALSE.
  731. [07/10/12 04:01:08.783]:ADTRACE PT: Rule rejected.
  732. [07/10/12 04:01:08.783]:ADTRACE PT:Policy returned:
  733. [07/10/12 04:01:08.783]:ADTRACE PT:
  734. <nds dtdversion="2.2">
  735. <source>
  736. <product version="4.0.1.0">DirXML</product>
  737. <contact>Novell, Inc.</contact>
  738. </source>
  739. <input>
  740. <status level="success" type="heartbeat"/>
  741. </input>
  742. </nds>
  743. [07/10/12 04:01:08.798]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-pub-ctp%-C.
  744. [07/10/12 04:01:08.798]:ADTRACE PT: Applying to status #1.
  745. [07/10/12 04:01:08.798]:ADTRACE PT: Evaluating selection criteria for rule 'set cached context value on merge'.
  746. [07/10/12 04:01:08.798]:ADTRACE PT: (if-operation equal "modify") = FALSE.
  747. [07/10/12 04:01:08.798]:ADTRACE PT: Rule rejected.
  748. [07/10/12 04:01:08.798]:ADTRACE PT: Evaluating selection criteria for rule 'remove managed attributes when object disassociated'.
  749. [07/10/12 04:01:08.798]:ADTRACE PT: (if-operation equal "remove-association") = FALSE.
  750. [07/10/12 04:01:08.798]:ADTRACE PT: Rule rejected.
  751. [07/10/12 04:01:08.798]:ADTRACE PT: Evaluating selection criteria for rule 'Prevent unassociated users from being removed from groups'.
  752. [07/10/12 04:01:08.798]:ADTRACE PT: (if-operation equal "modify") = FALSE.
  753. [07/10/12 04:01:08.798]:ADTRACE PT: Rule rejected.
  754. [07/10/12 04:01:08.798]:ADTRACE PT: Evaluating selection criteria for rule 'Set Equivalent To Me when group members change'.
  755. [07/10/12 04:01:08.798]:ADTRACE PT: (if-class-name equal "Group") = FALSE.
  756. [07/10/12 04:01:08.798]:ADTRACE PT: Rule rejected.
  757. [07/10/12 04:01:08.798]:ADTRACE PT:Policy returned:
  758. [07/10/12 04:01:08.798]:ADTRACE PT:
  759. <nds dtdversion="2.2">
  760. <source>
  761. <product version="4.0.1.0">DirXML</product>
  762. <contact>Novell, Inc.</contact>
  763. </source>
  764. <input>
  765. <status level="success" type="heartbeat"/>
  766. </input>
  767. </nds>
  768. [07/10/12 04:01:08.798]:ADTRACE PT:Applying XSLT policy: %+C%14CNOVLADDCFG-pub-cts%-C.
  769. [07/10/12 04:01:08.798]:ADTRACE PT:Policy returned:
  770. [07/10/12 04:01:08.798]:ADTRACE PT:
  771. <nds dtdversion="2.2">
  772. <source>
  773. <product version="4.0.1.0">DirXML</product>
  774. <contact>Novell, Inc.</contact>
  775. </source>
  776. <input>
  777. <status level="success" type="heartbeat"/>
  778. </input>
  779. </nds>
  780. [07/10/12 04:01:08.798]:ADTRACE PT:Filtering out notification-only attributes.
  781. [07/10/12 04:01:08.798]:ADTRACE PT:Pumping XDS to eDirectory.
  782. [07/10/12 04:01:08.798]:ADTRACE PT:Performing operation status for .
  783. [07/10/12 04:01:08.798]:ADTRACE PT:
  784. DirXML Log Event -------------------
  785. Driver: \xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver
  786. Channel: Publisher
  787. Status: Success
  788. [07/10/12 04:01:08.798]:ADTRACE PT:Fixing up association references.
  789. [07/10/12 04:01:08.798]:ADTRACE PT:Applying schema mapping policies to output.
  790. [07/10/12 04:01:08.798]:ADTRACE PT:Applying policy: %+C%14CNOVLDATACOLL-smp-SkipSchemaMapping%-C.
  791. [07/10/12 04:01:08.798]:ADTRACE PT: Applying to status #1.
  792. [07/10/12 04:01:08.798]:ADTRACE PT: Evaluating selection criteria for rule 'skip'.
  793. [07/10/12 04:01:08.798]:ADTRACE PT: (if-operation equal "instance") = FALSE.
  794. [07/10/12 04:01:08.798]:ADTRACE PT: Rule rejected.
  795. [07/10/12 04:01:08.798]:ADTRACE PT: Evaluating selection criteria for rule 'restore'.
  796. [07/10/12 04:01:08.798]:ADTRACE PT: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  797. [07/10/12 04:01:08.798]:ADTRACE PT: Rule rejected.
  798. [07/10/12 04:01:08.798]:ADTRACE PT:Policy returned:
  799. [07/10/12 04:01:08.798]:ADTRACE PT:
  800. <nds dtdversion="4.0" ndsversion="8.x">
  801. <source>
  802. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  803. <contact>Novell, Inc.</contact>
  804. </source>
  805. <output>
  806. <status event-id="0" level="success"></status>
  807. </output>
  808. </nds>
  809. [07/10/12 04:01:08.798]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-smp%-C.
  810. [07/10/12 04:01:08.798]:ADTRACE PT:Applying policy: %+C%14CNOVLDATACOLL-smp-SkipSchemaMapping%-C.
  811. [07/10/12 04:01:08.798]:ADTRACE PT: Applying to status #1.
  812. [07/10/12 04:01:08.798]:ADTRACE PT: Evaluating selection criteria for rule 'skip'.
  813. [07/10/12 04:01:08.798]:ADTRACE PT: (if-operation equal "instance") = FALSE.
  814. [07/10/12 04:01:08.798]:ADTRACE PT: Rule rejected.
  815. [07/10/12 04:01:08.798]:ADTRACE PT: Evaluating selection criteria for rule 'restore'.
  816. [07/10/12 04:01:08.798]:ADTRACE PT: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  817. [07/10/12 04:01:08.798]:ADTRACE PT: Rule rejected.
  818. [07/10/12 04:01:08.798]:ADTRACE PT:Policy returned:
  819. [07/10/12 04:01:08.798]:ADTRACE PT:
  820. <nds dtdversion="4.0" ndsversion="8.x">
  821. <source>
  822. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  823. <contact>Novell, Inc.</contact>
  824. </source>
  825. <output>
  826. <status event-id="0" level="success"></status>
  827. </output>
  828. </nds>
  829. [07/10/12 04:01:08.798]:ADTRACE PT:Applying output transformation policies.
  830. [07/10/12 04:01:08.798]:ADTRACE PT:Applying policy: %+C%14CNOVLADENTEX-otp-EntitlementsImpl%-C.
  831. [07/10/12 04:01:08.814]:ADTRACE PT: Applying to status #1.
  832. [07/10/12 04:01:08.814]:ADTRACE PT: Evaluating selection criteria for rule 'Intercept outbound queries for ADDomain'.
  833. [07/10/12 04:01:08.814]:ADTRACE PT: (if-class-name equal "ADDomain") = FALSE.
  834. [07/10/12 04:01:08.814]:ADTRACE PT: Rule rejected.
  835. [07/10/12 04:01:08.814]:ADTRACE PT:Policy returned:
  836. [07/10/12 04:01:08.814]:ADTRACE PT:
  837. <nds dtdversion="4.0" ndsversion="8.x">
  838. <source>
  839. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  840. <contact>Novell, Inc.</contact>
  841. </source>
  842. <output>
  843. <status event-id="0" level="success"></status>
  844. </output>
  845. </nds>
  846. [07/10/12 04:01:08.814]:ADTRACE PT:Applying policy: %+C%14CNOVLADENTEX-otp-ExchangeMailboxPolicy%-C.
  847. [07/10/12 04:01:08.814]:ADTRACE PT: Applying to status #1.
  848. [07/10/12 04:01:08.814]:ADTRACE PT: Evaluating selection criteria for rule 'Exchange: Remove HomeMDB when disabled'.
  849. [07/10/12 04:01:08.814]:ADTRACE PT: (if-global-variable 'drv.exchMailboxMethod' equal "disabled") = TRUE.
  850. [07/10/12 04:01:08.814]:ADTRACE PT: Rule selected.
  851. [07/10/12 04:01:08.814]:ADTRACE PT: Applying rule 'Exchange: Remove HomeMDB when disabled'.
  852. [07/10/12 04:01:08.814]:ADTRACE PT: Action: do-strip-op-attr("homeMDB").
  853. [07/10/12 04:01:08.814]:ADTRACE PT:Policy returned:
  854. [07/10/12 04:01:08.814]:ADTRACE PT:
  855. <nds dtdversion="4.0" ndsversion="8.x">
  856. <source>
  857. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  858. <contact>Novell, Inc.</contact>
  859. </source>
  860. <output>
  861. <status event-id="0" level="success"></status>
  862. </output>
  863. </nds>
  864. [07/10/12 04:01:08.814]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-otp-FormatConversions%-C.
  865. [07/10/12 04:01:08.814]:ADTRACE PT: Applying to status #1.
  866. [07/10/12 04:01:08.814]:ADTRACE PT: Evaluating selection criteria for rule 'Street Address: Convert LF to CR-LF'.
  867. [07/10/12 04:01:08.814]:ADTRACE PT: Rule selected.
  868. [07/10/12 04:01:08.814]:ADTRACE PT: Applying rule 'Street Address: Convert LF to CR-LF'.
  869. [07/10/12 04:01:08.814]:ADTRACE PT: Action: do-reformat-op-attr("streetAddress",token-replace-all("[^\r]\n","\r\n",token-local-variable("current-value"))).
  870. [07/10/12 04:01:08.814]:ADTRACE PT: Evaluating selection criteria for rule 'logonHours: Convert to Active Directory form'.
  871. [07/10/12 04:01:08.814]:ADTRACE PT: Rule selected.
  872. [07/10/12 04:01:08.814]:ADTRACE PT: Applying rule 'logonHours: Convert to Active Directory form'.
  873. [07/10/12 04:01:08.814]:ADTRACE PT: Action: do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2ADLenient($current-value)")).
  874. [07/10/12 04:01:08.814]:ADTRACE PT: Evaluating selection criteria for rule 'accountExpires: Convert to Active Directory form'.
  875. [07/10/12 04:01:08.814]:ADTRACE PT: (if-op-attr 'accountExpires' changing) = FALSE.
  876. [07/10/12 04:01:08.814]:ADTRACE PT: Rule rejected.
  877. [07/10/12 04:01:08.814]:ADTRACE PT: Evaluating selection criteria for rule 'lockoutTime: Convert to Active Directory form'.
  878. [07/10/12 04:01:08.814]:ADTRACE PT: Rule selected.
  879. [07/10/12 04:01:08.814]:ADTRACE PT: Applying rule 'lockoutTime: Convert to Active Directory form'.
  880. [07/10/12 04:01:08.814]:ADTRACE PT: Action: do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateEpoch2FileTime($current-value)")).
  881. [07/10/12 04:01:08.814]:ADTRACE PT: Evaluating selection criteria for rule 'Add: User - convert multi-valued Telephone to single value'.
  882. [07/10/12 04:01:08.814]:ADTRACE PT: (if-operation equal "add") = FALSE.
  883. [07/10/12 04:01:08.814]:ADTRACE PT: Rule rejected.
  884. [07/10/12 04:01:08.814]:ADTRACE PT: Evaluating selection criteria for rule 'update Active Directory logon name'.
  885. [07/10/12 04:01:08.814]:ADTRACE PT: (if-xpath true "self::status[@level = 'success']/operation-data/windows-2000-logon-name") = FALSE.
  886. [07/10/12 04:01:08.814]:ADTRACE PT: Rule rejected.
  887. [07/10/12 04:01:08.814]:ADTRACE PT:Policy returned:
  888. [07/10/12 04:01:08.814]:ADTRACE PT:
  889. <nds dtdversion="4.0" ndsversion="8.x">
  890. <source>
  891. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  892. <contact>Novell, Inc.</contact>
  893. </source>
  894. <output>
  895. <status event-id="0" level="success"></status>
  896. </output>
  897. </nds>
  898. [07/10/12 04:01:08.814]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-otp-ExchangeEntitlementQuery%-C.
  899. [07/10/12 04:01:08.814]:ADTRACE PT: Applying to status #1.
  900. [07/10/12 04:01:08.814]:ADTRACE PT: Evaluating selection criteria for rule 'Add dest-dn to the Exchange Entitlement Query'.
  901. [07/10/12 04:01:08.814]:ADTRACE PT: (if-operation equal "query") = FALSE.
  902. [07/10/12 04:01:08.814]:ADTRACE PT: Rule rejected.
  903. [07/10/12 04:01:08.814]:ADTRACE PT:Policy returned:
  904. [07/10/12 04:01:08.814]:ADTRACE PT:
  905. <nds dtdversion="4.0" ndsversion="8.x">
  906. <source>
  907. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  908. <contact>Novell, Inc.</contact>
  909. </source>
  910. <output>
  911. <status event-id="0" level="success"></status>
  912. </output>
  913. </nds>
  914. [07/10/12 04:01:08.814]:ADTRACE PT:Applying policy: %+C%14CNOVLPWDSYNC-otp-EmailOnFailedPwdPub%-C.
  915. [07/10/12 04:01:08.829]:ADTRACE PT: Applying to status #1.
  916. [07/10/12 04:01:08.829]:ADTRACE PT: Evaluating selection criteria for rule 'Send e-mail for a failed publish password operation'.
  917. [07/10/12 04:01:08.829]:ADTRACE PT: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  918. [07/10/12 04:01:08.829]:ADTRACE PT: (if-operation equal "status") = TRUE.
  919. [07/10/12 04:01:08.829]:ADTRACE PT: (if-xpath true "self::status[@level != 'success']/operation-data/password-publish-status") = FALSE.
  920. [07/10/12 04:01:08.829]:ADTRACE PT: Rule rejected.
  921. [07/10/12 04:01:08.829]:ADTRACE PT:Policy returned:
  922. [07/10/12 04:01:08.829]:ADTRACE PT:
  923. <nds dtdversion="4.0" ndsversion="8.x">
  924. <source>
  925. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  926. <contact>Novell, Inc.</contact>
  927. </source>
  928. <output>
  929. <status event-id="0" level="success"></status>
  930. </output>
  931. </nds>
  932. [07/10/12 04:01:08.829]:ADTRACE PT:Applying policy: %+C%14CNOVLATRKBASE-otp-Subscribe%-C.
  933. [07/10/12 04:01:08.829]:ADTRACE PT: Applying to status #1.
  934. [07/10/12 04:01:08.829]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - Initialize Realm Mapping'.
  935. [07/10/12 04:01:08.829]:ADTRACE PT: (if-global-variable 'drv.acctTrk.enable' equal "true") = TRUE.
  936. [07/10/12 04:01:08.829]:ADTRACE PT: (if-global-variable 'drv.acctTrk.mode' equal "fanout") = FALSE.
  937. [07/10/12 04:01:08.829]:ADTRACE PT: Rule rejected.
  938. [07/10/12 04:01:08.829]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled or wrong object class'.
  939. [07/10/12 04:01:08.829]:ADTRACE PT: Rule selected.
  940. [07/10/12 04:01:08.829]:ADTRACE PT: Applying rule 'AccountTracking - disregard if disabled or wrong object class'.
  941. [07/10/12 04:01:08.829]:ADTRACE PT: Action: do-if().
  942. [07/10/12 04:01:08.829]:ADTRACE PT: Evaluating conditions.
  943. [07/10/12 04:01:08.829]:ADTRACE PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  944. [07/10/12 04:01:08.829]:ADTRACE PT: Performing else actions.
  945. [07/10/12 04:01:08.829]:ADTRACE PT: Action: do-for-each(arg-node-set(token-global-variable("drv.acctTrk.objectClass"))).
  946. [07/10/12 04:01:08.829]:ADTRACE PT: arg-node-set(token-global-variable("drv.acctTrk.objectClass"))
  947. [07/10/12 04:01:08.829]:ADTRACE PT: token-global-variable("drv.acctTrk.objectClass")
  948. [07/10/12 04:01:08.829]:ADTRACE PT: Token Value: {"user"}.
  949. [07/10/12 04:01:08.829]:ADTRACE PT: Arg Value: {"user"}.
  950. [07/10/12 04:01:08.829]:ADTRACE PT: Performing actions for local-variable(current-node) = "user".
  951. [07/10/12 04:01:08.829]:ADTRACE PT: Action: do-if().
  952. [07/10/12 04:01:08.829]:ADTRACE PT: Evaluating conditions.
  953. [07/10/12 04:01:08.829]:ADTRACE PT: (if-class-name equal "$current-node$") = FALSE.
  954. [07/10/12 04:01:08.829]:ADTRACE PT: Performing else actions.
  955. [07/10/12 04:01:08.829]:ADTRACE PT: Action: do-if().
  956. [07/10/12 04:01:08.829]:ADTRACE PT: Evaluating conditions.
  957. [07/10/12 04:01:08.829]:ADTRACE PT: (if-local-variable 'pass' not-available) = TRUE.
  958. [07/10/12 04:01:08.829]:ADTRACE PT: Performing if actions.
  959. [07/10/12 04:01:08.829]:ADTRACE PT: Action: do-break().
  960. [07/10/12 04:01:08.829]:ADTRACE PT:Policy returned:
  961. [07/10/12 04:01:08.829]:ADTRACE PT:
  962. <nds dtdversion="4.0" ndsversion="8.x">
  963. <source>
  964. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  965. <contact>Novell, Inc.</contact>
  966. </source>
  967. <output>
  968. <status event-id="0" level="success"></status>
  969. </output>
  970. </nds>
  971. [07/10/12 04:01:08.829]:ADTRACE PT:
  972. <nds dtdversion="4.0" ndsversion="8.x">
  973. <source>
  974. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  975. <contact>Novell, Inc.</contact>
  976. </source>
  977. <output>
  978. <status event-id="0" level="success"></status>
  979. </output>
  980. </nds>
  981. [07/10/12 04:01:08.829]:ADTRACE PT:Remote Interface Driver: Sending...
  982. [07/10/12 04:01:08.829]:ADTRACE PT:
  983. <nds dtdversion="4.0" ndsversion="8.x">
  984. <source>
  985. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  986. <contact>Novell, Inc.</contact>
  987. </source>
  988. <output>
  989. <status event-id="0" level="success"></status>
  990. </output>
  991. </nds>
  992. [07/10/12 04:01:08.829]:ADTRACE PT:Remote Interface Driver: Document sent.
  993. [07/10/12 04:02:08.673]:ADTRACE :Remote Interface Driver: Received.
  994. [07/10/12 04:02:08.673]:ADTRACE :
  995. <nds dtdversion="2.2">
  996. <source>
  997. <product version="4.0.1.0">DirXML</product>
  998. <contact>Novell, Inc.</contact>
  999. </source>
  1000. <input>
  1001. <status level="success" type="heartbeat"/>
  1002. </input>
  1003. </nds>
  1004. [07/10/12 04:02:08.689]:ADTRACE :Remote Interface Driver: Received document for publisher channel
  1005. [07/10/12 04:02:08.689]:ADTRACE :Remote Interface Driver: Waiting for receive...
  1006. [07/10/12 04:02:08.689]:ADTRACE PT:Receiving DOM document from application.
  1007. [07/10/12 04:02:08.689]:ADTRACE PT:
  1008. <nds dtdversion="2.2">
  1009. <source>
  1010. <product version="4.0.1.0">DirXML</product>
  1011. <contact>Novell, Inc.</contact>
  1012. </source>
  1013. <input>
  1014. <status level="success" type="heartbeat"/>
  1015. </input>
  1016. </nds>
  1017. [07/10/12 04:02:08.689]:ADTRACE PT:Applying input transformation policies.
  1018. [07/10/12 04:02:08.689]:ADTRACE PT:Applying policy: %+C%14CNOVLAUDTENTC-itp-SendEntitlementsEvents%-C.
  1019. [07/10/12 04:02:08.689]:ADTRACE PT: Applying to status #1.
  1020. [07/10/12 04:02:08.689]:ADTRACE PT: Evaluating selection criteria for rule '00031200 - Account Create By Entitlement Grant'.
  1021. [07/10/12 04:02:08.689]:ADTRACE PT: (if-operation equal "status") = TRUE.
  1022. [07/10/12 04:02:08.689]:ADTRACE PT: (if-op-property 'accountAction' equal "accountCreateByEntitlementGrant") = FALSE.
  1023. [07/10/12 04:02:08.689]:ADTRACE PT: Rule rejected.
  1024. [07/10/12 04:02:08.689]:ADTRACE PT: Evaluating selection criteria for rule '00031201 - Account Delete By Entitlement Revoke'.
  1025. [07/10/12 04:02:08.689]:ADTRACE PT: (if-operation equal "status") = TRUE.
  1026. [07/10/12 04:02:08.689]:ADTRACE PT: (if-xpath true "./operation-data/entitlement-impl/@state = '0'") = FALSE.
  1027. [07/10/12 04:02:08.689]:ADTRACE PT: (if-operation equal "status") = TRUE.
  1028. [07/10/12 04:02:08.689]:ADTRACE PT: (if-op-property 'accountAction' equal "accountDeleteByEntitlementRevoke") = FALSE.
  1029. [07/10/12 04:02:08.689]:ADTRACE PT: Rule rejected.
  1030. [07/10/12 04:02:08.689]:ADTRACE PT: Evaluating selection criteria for rule '00031202 - Account Disable By Entitlement Revoke'.
  1031. [07/10/12 04:02:08.689]:ADTRACE PT: (if-operation equal "status") = TRUE.
  1032. [07/10/12 04:02:08.689]:ADTRACE PT: (if-op-property 'accountAction' equal "accountDisableByEntitlementRevoke") = FALSE.
  1033. [07/10/12 04:02:08.689]:ADTRACE PT: Rule rejected.
  1034. [07/10/12 04:02:08.689]:ADTRACE PT: Evaluating selection criteria for rule '00031203 - Account Enable By Entitlement Grant'.
  1035. [07/10/12 04:02:08.689]:ADTRACE PT: (if-operation equal "status") = TRUE.
  1036. [07/10/12 04:02:08.689]:ADTRACE PT: (if-op-property 'accountAction' equal "accountEnableByEntitlementGrant") = FALSE.
  1037. [07/10/12 04:02:08.689]:ADTRACE PT: Rule rejected.
  1038. [07/10/12 04:02:08.689]:ADTRACE PT: Evaluating selection criteria for rule 'Generate Audit Event'.
  1039. [07/10/12 04:02:08.689]:ADTRACE PT: (if-operation equal "status") = TRUE.
  1040. [07/10/12 04:02:08.689]:ADTRACE PT: (if-local-variable 'auditEventID' available) = FALSE.
  1041. [07/10/12 04:02:08.689]:ADTRACE PT: Rule rejected.
  1042. [07/10/12 04:02:08.689]:ADTRACE PT:Policy returned:
  1043. [07/10/12 04:02:08.689]:ADTRACE PT:
  1044. <nds dtdversion="2.2">
  1045. <source>
  1046. <product version="4.0.1.0">DirXML</product>
  1047. <contact>Novell, Inc.</contact>
  1048. </source>
  1049. <input>
  1050. <status level="success" type="heartbeat"/>
  1051. </input>
  1052. </nds>
  1053. [07/10/12 04:02:08.689]:ADTRACE PT:Applying policy: %+C%14CNOVLADENTEX-itp-InitEntitlementConfigurationResource%-C.
  1054. [07/10/12 04:02:08.689]:ADTRACE PT: Applying to status #1.
  1055. [07/10/12 04:02:08.689]:ADTRACE PT: Evaluating selection criteria for rule 'Make sure we only run once and when we're ready'.
  1056. [07/10/12 04:02:08.689]:ADTRACE PT: (if-local-variable 'objectClass' match ".+") = TRUE.
  1057. [07/10/12 04:02:08.689]:ADTRACE PT: (if-local-variable 'entConfigInitialized' equal "true") = TRUE.
  1058. [07/10/12 04:02:08.689]:ADTRACE PT: Rule selected.
  1059. [07/10/12 04:02:08.689]:ADTRACE PT: Applying rule 'Make sure we only run once and when we're ready'.
  1060. [07/10/12 04:02:08.689]:ADTRACE PT: Action: do-break().
  1061. [07/10/12 04:02:08.689]:ADTRACE PT:Policy returned:
  1062. [07/10/12 04:02:08.689]:ADTRACE PT:
  1063. <nds dtdversion="2.2">
  1064. <source>
  1065. <product version="4.0.1.0">DirXML</product>
  1066. <contact>Novell, Inc.</contact>
  1067. </source>
  1068. <input>
  1069. <status level="success" type="heartbeat"/>
  1070. </input>
  1071. </nds>
  1072. [07/10/12 04:02:08.689]:ADTRACE PT:Applying policy: %+C%14CNOVLADMSINFO-itp-InitManagedSystemInfo%-C.
  1073. [07/10/12 04:02:08.689]:ADTRACE PT: Applying to status #1.
  1074. [07/10/12 04:02:08.689]:ADTRACE PT: Evaluating selection criteria for rule 'Make sure we only run once and when we're ready'.
  1075. [07/10/12 04:02:08.689]:ADTRACE PT: (if-local-variable 'objectClass' match ".+") = TRUE.
  1076. [07/10/12 04:02:08.689]:ADTRACE PT: (if-local-variable 'mSysInfoInitialized' equal "true") = TRUE.
  1077. [07/10/12 04:02:08.704]:ADTRACE PT: Rule selected.
  1078. [07/10/12 04:02:08.704]:ADTRACE PT: Applying rule 'Make sure we only run once and when we're ready'.
  1079. [07/10/12 04:02:08.704]:ADTRACE PT: Action: do-break().
  1080. [07/10/12 04:02:08.704]:ADTRACE PT:Policy returned:
  1081. [07/10/12 04:02:08.704]:ADTRACE PT:
  1082. <nds dtdversion="2.2">
  1083. <source>
  1084. <product version="4.0.1.0">DirXML</product>
  1085. <contact>Novell, Inc.</contact>
  1086. </source>
  1087. <input>
  1088. <status level="success" type="heartbeat"/>
  1089. </input>
  1090. </nds>
  1091. [07/10/12 04:02:08.704]:ADTRACE PT:Applying policy: %+C%14CNOVLATRKBASE-itp-Publish%-C.
  1092. [07/10/12 04:02:08.704]:ADTRACE PT: Applying to status #1.
  1093. [07/10/12 04:02:08.704]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled or wrong object class'.
  1094. [07/10/12 04:02:08.704]:ADTRACE PT: Rule selected.
  1095. [07/10/12 04:02:08.704]:ADTRACE PT: Applying rule 'AccountTracking - disregard if disabled or wrong object class'.
  1096. [07/10/12 04:02:08.704]:ADTRACE PT: Action: do-if().
  1097. [07/10/12 04:02:08.704]:ADTRACE PT: Evaluating conditions.
  1098. [07/10/12 04:02:08.704]:ADTRACE PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  1099. [07/10/12 04:02:08.704]:ADTRACE PT: Performing else actions.
  1100. [07/10/12 04:02:08.704]:ADTRACE PT: Action: do-if().
  1101. [07/10/12 04:02:08.704]:ADTRACE PT: Evaluating conditions.
  1102. [07/10/12 04:02:08.704]:ADTRACE PT: (if-class-name available) = FALSE.
  1103. [07/10/12 04:02:08.704]:ADTRACE PT: Performing else actions.
  1104. [07/10/12 04:02:08.704]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - on add-association sync the operation-properties to status operations'.
  1105. [07/10/12 04:02:08.704]:ADTRACE PT: (if-operation equal "add-association") = FALSE.
  1106. [07/10/12 04:02:08.704]:ADTRACE PT: Rule rejected.
  1107. [07/10/12 04:02:08.704]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - Query for destination DN using Association'.
  1108. [07/10/12 04:02:08.704]:ADTRACE PT: (if-operation match "modify|delete|move|rename") = FALSE.
  1109. [07/10/12 04:02:08.704]:ADTRACE PT: Rule rejected.
  1110. [07/10/12 04:02:08.704]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - add interested properties to current doc for future use.'.
  1111. [07/10/12 04:02:08.704]:ADTRACE PT: (if-operation match "add|modify|delete|rename|move|status") = TRUE.
  1112. [07/10/12 04:02:08.704]:ADTRACE PT: Rule selected.
  1113. [07/10/12 04:02:08.704]:ADTRACE PT: Applying rule 'AccountTracking - add interested properties to current doc for future use.'.
  1114. [07/10/12 04:02:08.704]:ADTRACE PT: Action: do-for-each(arg-node-set(token-global-variable("drv.acctTrk.identifiers"))).
  1115. [07/10/12 04:02:08.704]:ADTRACE PT: arg-node-set(token-global-variable("drv.acctTrk.identifiers"))
  1116. [07/10/12 04:02:08.704]:ADTRACE PT: token-global-variable("drv.acctTrk.identifiers")
  1117. [07/10/12 04:02:08.704]:ADTRACE PT: Token Value: {"sAMAccountName","userPrincipalName","LDAPDN","association"}.
  1118. [07/10/12 04:02:08.704]:ADTRACE PT: Arg Value: {"sAMAccountName","userPrincipalName","LDAPDN","association"}.
  1119. [07/10/12 04:02:08.704]:ADTRACE PT: Performing actions for local-variable(current-node) = "sAMAccountName".
  1120. [07/10/12 04:02:08.704]:ADTRACE PT: Action: do-if().
  1121. [07/10/12 04:02:08.704]:ADTRACE PT: Evaluating conditions.
  1122. [07/10/12 04:02:08.704]:ADTRACE PT: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  1123. [07/10/12 04:02:08.704]:ADTRACE PT: Performing else actions.
  1124. [07/10/12 04:02:08.704]:ADTRACE PT: Action: do-if().
  1125. [07/10/12 04:02:08.704]:ADTRACE PT: Evaluating conditions.
  1126. [07/10/12 04:02:08.704]:ADTRACE PT: (if-local-variable 'current-node' equal "association") = FALSE.
  1127. [07/10/12 04:02:08.704]:ADTRACE PT: Performing else actions.
  1128. [07/10/12 04:02:08.704]:ADTRACE PT: Action: do-if().
  1129. [07/10/12 04:02:08.704]:ADTRACE PT: Evaluating conditions.
  1130. [07/10/12 04:02:08.704]:ADTRACE PT: Expanded variable reference '$current-node$' to 'sAMAccountName'.
  1131. [07/10/12 04:02:08.704]:ADTRACE PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  1132. [07/10/12 04:02:08.704]:ADTRACE PT: Expanded variable reference '$current-node$' to 'sAMAccountName'.
  1133. [07/10/12 04:02:08.704]:ADTRACE PT: (if-op-attr '$current-node$' available) = FALSE.
  1134. [07/10/12 04:02:08.704]:ADTRACE PT: Performing else actions.
  1135. [07/10/12 04:02:08.720]:ADTRACE PT: Performing actions for local-variable(current-node) = "userPrincipalName".
  1136. [07/10/12 04:02:08.720]:ADTRACE PT: Action: do-if().
  1137. [07/10/12 04:02:08.720]:ADTRACE PT: Evaluating conditions.
  1138. [07/10/12 04:02:08.720]:ADTRACE PT: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  1139. [07/10/12 04:02:08.720]:ADTRACE PT: Performing else actions.
  1140. [07/10/12 04:02:08.720]:ADTRACE PT: Action: do-if().
  1141. [07/10/12 04:02:08.720]:ADTRACE PT: Evaluating conditions.
  1142. [07/10/12 04:02:08.720]:ADTRACE PT: (if-local-variable 'current-node' equal "association") = FALSE.
  1143. [07/10/12 04:02:08.720]:ADTRACE PT: Performing else actions.
  1144. [07/10/12 04:02:08.720]:ADTRACE PT: Action: do-if().
  1145. [07/10/12 04:02:08.720]:ADTRACE PT: Evaluating conditions.
  1146. [07/10/12 04:02:08.720]:ADTRACE PT: Expanded variable reference '$current-node$' to 'userPrincipalName'.
  1147. [07/10/12 04:02:08.720]:ADTRACE PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  1148. [07/10/12 04:02:08.720]:ADTRACE PT: Expanded variable reference '$current-node$' to 'userPrincipalName'.
  1149. [07/10/12 04:02:08.720]:ADTRACE PT: (if-op-attr '$current-node$' available) = FALSE.
  1150. [07/10/12 04:02:08.720]:ADTRACE PT: Performing else actions.
  1151. [07/10/12 04:02:08.720]:ADTRACE PT: Performing actions for local-variable(current-node) = "LDAPDN".
  1152. [07/10/12 04:02:08.720]:ADTRACE PT: Action: do-if().
  1153. [07/10/12 04:02:08.720]:ADTRACE PT: Evaluating conditions.
  1154. [07/10/12 04:02:08.720]:ADTRACE PT: (if-local-variable 'current-node' equal "LDAPDN") = TRUE.
  1155. [07/10/12 04:02:08.720]:ADTRACE PT: Expanded variable reference '$current-node$' to 'LDAPDN'.
  1156. [07/10/12 04:02:08.720]:ADTRACE PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  1157. [07/10/12 04:02:08.720]:ADTRACE PT: (if-src-dn available) = FALSE.
  1158. [07/10/12 04:02:08.720]:ADTRACE PT: Performing else actions.
  1159. [07/10/12 04:02:08.720]:ADTRACE PT: Action: do-if().
  1160. [07/10/12 04:02:08.720]:ADTRACE PT: Evaluating conditions.
  1161. [07/10/12 04:02:08.720]:ADTRACE PT: (if-local-variable 'current-node' equal "association") = FALSE.
  1162. [07/10/12 04:02:08.720]:ADTRACE PT: Performing else actions.
  1163. [07/10/12 04:02:08.720]:ADTRACE PT: Action: do-if().
  1164. [07/10/12 04:02:08.720]:ADTRACE PT: Evaluating conditions.
  1165. [07/10/12 04:02:08.720]:ADTRACE PT: Expanded variable reference '$current-node$' to 'LDAPDN'.
  1166. [07/10/12 04:02:08.720]:ADTRACE PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  1167. [07/10/12 04:02:08.720]:ADTRACE PT: Expanded variable reference '$current-node$' to 'LDAPDN'.
  1168. [07/10/12 04:02:08.720]:ADTRACE PT: (if-op-attr '$current-node$' available) = FALSE.
  1169. [07/10/12 04:02:08.720]:ADTRACE PT: Performing else actions.
  1170. [07/10/12 04:02:08.720]:ADTRACE PT: Performing actions for local-variable(current-node) = "association".
  1171. [07/10/12 04:02:08.720]:ADTRACE PT: Action: do-if().
  1172. [07/10/12 04:02:08.720]:ADTRACE PT: Evaluating conditions.
  1173. [07/10/12 04:02:08.720]:ADTRACE PT: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  1174. [07/10/12 04:02:08.720]:ADTRACE PT: Performing else actions.
  1175. [07/10/12 04:02:08.720]:ADTRACE PT: Action: do-if().
  1176. [07/10/12 04:02:08.720]:ADTRACE PT: Evaluating conditions.
  1177. [07/10/12 04:02:08.720]:ADTRACE PT: (if-local-variable 'current-node' equal "association") = TRUE.
  1178. [07/10/12 04:02:08.720]:ADTRACE PT: Expanded variable reference '$current-node$' to 'association'.
  1179. [07/10/12 04:02:08.720]:ADTRACE PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  1180. [07/10/12 04:02:08.720]:ADTRACE PT: (if-association available) = FALSE.
  1181. [07/10/12 04:02:08.720]:ADTRACE PT: Performing else actions.
  1182. [07/10/12 04:02:08.720]:ADTRACE PT: Action: do-if().
  1183. [07/10/12 04:02:08.720]:ADTRACE PT: Evaluating conditions.
  1184. [07/10/12 04:02:08.720]:ADTRACE PT: Expanded variable reference '$current-node$' to 'association'.
  1185. [07/10/12 04:02:08.720]:ADTRACE PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  1186. [07/10/12 04:02:08.720]:ADTRACE PT: Expanded variable reference '$current-node$' to 'association'.
  1187. [07/10/12 04:02:08.720]:ADTRACE PT: (if-op-attr '$current-node$' available) = FALSE.
  1188. [07/10/12 04:02:08.720]:ADTRACE PT: Performing else actions.
  1189. [07/10/12 04:02:08.720]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - Initialize status properties on published events'.
  1190. [07/10/12 04:02:08.736]:ADTRACE PT: (if-operation match "add|modify|delete|rename|move") = FALSE.
  1191. [07/10/12 04:02:08.736]:ADTRACE PT: Rule rejected.
  1192. [07/10/12 04:02:08.736]:ADTRACE PT:Policy returned:
  1193. [07/10/12 04:02:08.736]:ADTRACE PT:
  1194. <nds dtdversion="2.2">
  1195. <source>
  1196. <product version="4.0.1.0">DirXML</product>
  1197. <contact>Novell, Inc.</contact>
  1198. </source>
  1199. <input>
  1200. <status level="success" type="heartbeat"/>
  1201. </input>
  1202. </nds>
  1203. [07/10/12 04:02:08.736]:ADTRACE PT:Applying policy: %+C%14CNOVLATRKBASE-itp-WriteAccounts%-C.
  1204. [07/10/12 04:02:08.736]:ADTRACE PT: Applying to status #1.
  1205. [07/10/12 04:02:08.736]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - Initialize Realm Mapping'.
  1206. [07/10/12 04:02:08.736]:ADTRACE PT: (if-global-variable 'drv.acctTrk.enable' equal "true") = TRUE.
  1207. [07/10/12 04:02:08.736]:ADTRACE PT: (if-global-variable 'drv.acctTrk.mode' equal "fanout") = FALSE.
  1208. [07/10/12 04:02:08.736]:ADTRACE PT: Rule rejected.
  1209. [07/10/12 04:02:08.736]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled'.
  1210. [07/10/12 04:02:08.736]:ADTRACE PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  1211. [07/10/12 04:02:08.736]:ADTRACE PT: Rule rejected.
  1212. [07/10/12 04:02:08.736]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - query DirXML-Accounts Attribute'.
  1213. [07/10/12 04:02:08.736]:ADTRACE PT: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  1214. [07/10/12 04:02:08.736]:ADTRACE PT: Rule rejected.
  1215. [07/10/12 04:02:08.736]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - remove Dirxml-Account values on regular delete operation'.
  1216. [07/10/12 04:02:08.736]:ADTRACE PT: (if-operation match "delete|remove-association") = FALSE.
  1217. [07/10/12 04:02:08.736]:ADTRACE PT: (if-operation equal "status") = TRUE.
  1218. [07/10/12 04:02:08.736]:ADTRACE PT: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  1219. [07/10/12 04:02:08.736]:ADTRACE PT: Rule rejected.
  1220. [07/10/12 04:02:08.736]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - update DirXMLAccounts attribute on regular operations'.
  1221. [07/10/12 04:02:08.736]:ADTRACE PT: (if-op-property 'AccountTracking-Operation' not-available) = TRUE.
  1222. [07/10/12 04:02:08.736]:ADTRACE PT: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  1223. [07/10/12 04:02:08.736]:ADTRACE PT: (if-operation equal "status") = TRUE.
  1224. [07/10/12 04:02:08.736]:ADTRACE PT: (if-xpath true "./@level='success' or ./@level='warning'") = TRUE.
  1225. [07/10/12 04:02:08.736]:ADTRACE PT: (if-op-property 'AccountTracking-Operation' available) = FALSE.
  1226. [07/10/12 04:02:08.736]:ADTRACE PT: Rule rejected.
  1227. [07/10/12 04:02:08.736]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - update DirXMLAccounts attribute on mapped operations'.
  1228. [07/10/12 04:02:08.736]:ADTRACE PT: (if-xpath true "operation-data/account-tracking-operation") = FALSE.
  1229. [07/10/12 04:02:08.736]:ADTRACE PT: (if-xpath true "operation-data/account-tracking-operation") = FALSE.
  1230. [07/10/12 04:02:08.736]:ADTRACE PT: Rule rejected.
  1231. [07/10/12 04:02:08.736]:ADTRACE PT:Policy returned:
  1232. [07/10/12 04:02:08.736]:ADTRACE PT:
  1233. <nds dtdversion="2.2">
  1234. <source>
  1235. <product version="4.0.1.0">DirXML</product>
  1236. <contact>Novell, Inc.</contact>
  1237. </source>
  1238. <input>
  1239. <status level="success" type="heartbeat"/>
  1240. </input>
  1241. </nds>
  1242. [07/10/12 04:02:08.736]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-itp-SubscriberUserAdd%-C.
  1243. [07/10/12 04:02:08.736]:ADTRACE PT: Applying to status #1.
  1244. [07/10/12 04:02:08.736]:ADTRACE PT: Evaluating selection criteria for rule 'Populate DirXML-ADContext on initial user add'.
  1245. [07/10/12 04:02:08.736]:ADTRACE PT: (if-operation equal "add-association") = FALSE.
  1246. [07/10/12 04:02:08.736]:ADTRACE PT: Rule rejected.
  1247. [07/10/12 04:02:08.736]:ADTRACE PT:Policy returned:
  1248. [07/10/12 04:02:08.736]:ADTRACE PT:
  1249. <nds dtdversion="2.2">
  1250. <source>
  1251. <product version="4.0.1.0">DirXML</product>
  1252. <contact>Novell, Inc.</contact>
  1253. </source>
  1254. <input>
  1255. <status level="success" type="heartbeat"/>
  1256. </input>
  1257. </nds>
  1258. [07/10/12 04:02:08.736]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-itp-FormatConversions%-C.
  1259. [07/10/12 04:02:08.736]:ADTRACE PT: Applying to status #1.
  1260. [07/10/12 04:02:08.736]:ADTRACE PT: Evaluating selection criteria for rule 'streetAddress: Convert CR-LF to LF'.
  1261. [07/10/12 04:02:08.736]:ADTRACE PT: Rule selected.
  1262. [07/10/12 04:02:08.736]:ADTRACE PT: Applying rule 'streetAddress: Convert CR-LF to LF'.
  1263. [07/10/12 04:02:08.736]:ADTRACE PT: Action: do-reformat-op-attr("streetAddress",token-replace-all("\r\n","\r",token-local-variable("current-value"))).
  1264. [07/10/12 04:02:08.751]:ADTRACE PT: Evaluating selection criteria for rule 'logonHours: Convert to Login Allowed Time Map form'.
  1265. [07/10/12 04:02:08.751]:ADTRACE PT: Rule selected.
  1266. [07/10/12 04:02:08.751]:ADTRACE PT: Applying rule 'logonHours: Convert to Login Allowed Time Map form'.
  1267. [07/10/12 04:02:08.751]:ADTRACE PT: Action: do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2eDir($current-value)")).
  1268. [07/10/12 04:02:08.751]:ADTRACE PT: Evaluating selection criteria for rule 'accountExpires: Convert to Identity Vault time format'.
  1269. [07/10/12 04:02:08.751]:ADTRACE PT: Rule selected.
  1270. [07/10/12 04:02:08.751]:ADTRACE PT: Applying rule 'accountExpires: Convert to Identity Vault time format'.
  1271. [07/10/12 04:02:08.751]:ADTRACE PT: Action: do-reformat-op-attr("accountExpires",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
  1272. [07/10/12 04:02:08.751]:ADTRACE PT: Evaluating selection criteria for rule 'lockoutTime: Convert to Identity Vault time format'.
  1273. [07/10/12 04:02:08.751]:ADTRACE PT: Rule selected.
  1274. [07/10/12 04:02:08.751]:ADTRACE PT: Applying rule 'lockoutTime: Convert to Identity Vault time format'.
  1275. [07/10/12 04:02:08.751]:ADTRACE PT: Action: do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
  1276. [07/10/12 04:02:08.751]:ADTRACE PT:Policy returned:
  1277. [07/10/12 04:02:08.751]:ADTRACE PT:
  1278. <nds dtdversion="2.2">
  1279. <source>
  1280. <product version="4.0.1.0">DirXML</product>
  1281. <contact>Novell, Inc.</contact>
  1282. </source>
  1283. <input>
  1284. <status level="success" type="heartbeat"/>
  1285. </input>
  1286. </nds>
  1287. [07/10/12 04:02:08.751]:ADTRACE PT:Applying policy: %+C%14CNOVLDATACOLL-itp-DataCollectionQuerySupport%-C.
  1288. [07/10/12 04:02:08.751]:ADTRACE PT: Applying to status #1.
  1289. [07/10/12 04:02:08.751]:ADTRACE PT: Evaluating selection criteria for rule 'Rename @association-ref to @association and change @type from "dn" to "{dn}"'.
  1290. [07/10/12 04:02:08.751]:ADTRACE PT: (if-operation equal "instance") = FALSE.
  1291. [07/10/12 04:02:08.751]:ADTRACE PT: Rule rejected.
  1292. [07/10/12 04:02:08.751]:ADTRACE PT:Policy returned:
  1293. [07/10/12 04:02:08.751]:ADTRACE PT:
  1294. <nds dtdversion="2.2">
  1295. <source>
  1296. <product version="4.0.1.0">DirXML</product>
  1297. <contact>Novell, Inc.</contact>
  1298. </source>
  1299. <input>
  1300. <status level="success" type="heartbeat"/>
  1301. </input>
  1302. </nds>
  1303. [07/10/12 04:02:08.751]:ADTRACE PT:Applying policy: %+C%14CNOVLADENTEX-itp-EntitlementsImpl%-C.
  1304. [07/10/12 04:02:08.751]:ADTRACE PT: Applying to status #1.
  1305. [07/10/12 04:02:08.751]:ADTRACE PT: Evaluating selection criteria for rule 'Intercept ADDomain (tagged identity query) query response'.
  1306. [07/10/12 04:02:08.751]:ADTRACE PT: (if-operation equal "instance") = FALSE.
  1307. [07/10/12 04:02:08.751]:ADTRACE PT: Rule rejected.
  1308. [07/10/12 04:02:08.751]:ADTRACE PT: Evaluating selection criteria for rule 'Intercept ADDomain (tagged identity query) query status'.
  1309. [07/10/12 04:02:08.751]:ADTRACE PT: (if-xpath true "../status[@event-id='query-driver-ident']/operation-data/@UserAccountEntitlementQuery") = FALSE.
  1310. [07/10/12 04:02:08.751]:ADTRACE PT: Rule rejected.
  1311. [07/10/12 04:02:08.751]:ADTRACE PT: Evaluating selection criteria for rule 'Check target of add-association for group membership entitlements'.
  1312. [07/10/12 04:02:08.751]:ADTRACE PT: (if-global-variable 'drv.entitlement.Group' equal "true") = TRUE.
  1313. [07/10/12 04:02:08.751]:ADTRACE PT: (if-operation equal "add-association") = FALSE.
  1314. [07/10/12 04:02:08.751]:ADTRACE PT: Rule rejected.
  1315. [07/10/12 04:02:08.751]:ADTRACE PT: Evaluating selection criteria for rule 'Check target of add-association for Exchange mailbox entitlements'.
  1316. [07/10/12 04:02:08.751]:ADTRACE PT: (if-global-variable 'drv.exchMailboxMethod' equal "entitlement") = FALSE.
  1317. [07/10/12 04:02:08.751]:ADTRACE PT: Rule rejected.
  1318. [07/10/12 04:02:08.751]:ADTRACE PT:Policy returned:
  1319. [07/10/12 04:02:08.751]:ADTRACE PT:
  1320. <nds dtdversion="2.2">
  1321. <source>
  1322. <product version="4.0.1.0">DirXML</product>
  1323. <contact>Novell, Inc.</contact>
  1324. </source>
  1325. <input>
  1326. <status level="success" type="heartbeat"/>
  1327. </input>
  1328. </nds>
  1329. [07/10/12 04:02:08.751]:ADTRACE PT:Applying policy: %+C%14CNOVLPWDSYNC-itp-EmailOnFailedPwdSub%-C.
  1330. [07/10/12 04:02:08.751]:ADTRACE PT: Applying to status #1.
  1331. [07/10/12 04:02:08.751]:ADTRACE PT: Evaluating selection criteria for rule 'Send e-mail on a failure when subscribing to passwords'.
  1332. [07/10/12 04:02:08.751]:ADTRACE PT: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  1333. [07/10/12 04:02:08.751]:ADTRACE PT: (if-operation equal "status") = TRUE.
  1334. [07/10/12 04:02:08.751]:ADTRACE PT: (if-xpath true "self::status[@level != 'success'][text() != '']/operation-data/password-subscribe-status/association[text() != '']") = FALSE.
  1335. [07/10/12 04:02:08.751]:ADTRACE PT: Rule rejected.
  1336. [07/10/12 04:02:08.751]:ADTRACE PT: Evaluating selection criteria for rule 'Send e-mail on failure to reset connected system password using the Identity Vault password'.
  1337. [07/10/12 04:02:08.751]:ADTRACE PT: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  1338. [07/10/12 04:02:08.751]:ADTRACE PT: (if-operation equal "status") = TRUE.
  1339. [07/10/12 04:02:08.751]:ADTRACE PT: (if-xpath true "self::status[@level != 'success']/operation-data/password-reset-status") = FALSE.
  1340. [07/10/12 04:02:08.767]:ADTRACE PT: Rule rejected.
  1341. [07/10/12 04:02:08.767]:ADTRACE PT:Policy returned:
  1342. [07/10/12 04:02:08.767]:ADTRACE PT:
  1343. <nds dtdversion="2.2">
  1344. <source>
  1345. <product version="4.0.1.0">DirXML</product>
  1346. <contact>Novell, Inc.</contact>
  1347. </source>
  1348. <input>
  1349. <status level="success" type="heartbeat"/>
  1350. </input>
  1351. </nds>
  1352. [07/10/12 04:02:08.767]:ADTRACE PT:Applying schema mapping policies to input.
  1353. [07/10/12 04:02:08.767]:ADTRACE PT:Applying policy: %+C%14CNOVLDATACOLL-smp-SkipSchemaMapping%-C.
  1354. [07/10/12 04:02:08.767]:ADTRACE PT: Applying to status #1.
  1355. [07/10/12 04:02:08.767]:ADTRACE PT: Evaluating selection criteria for rule 'skip'.
  1356. [07/10/12 04:02:08.767]:ADTRACE PT: (if-operation equal "instance") = FALSE.
  1357. [07/10/12 04:02:08.767]:ADTRACE PT: Rule rejected.
  1358. [07/10/12 04:02:08.767]:ADTRACE PT: Evaluating selection criteria for rule 'restore'.
  1359. [07/10/12 04:02:08.767]:ADTRACE PT: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  1360. [07/10/12 04:02:08.767]:ADTRACE PT: Rule rejected.
  1361. [07/10/12 04:02:08.767]:ADTRACE PT:Policy returned:
  1362. [07/10/12 04:02:08.767]:ADTRACE PT:
  1363. <nds dtdversion="2.2">
  1364. <source>
  1365. <product version="4.0.1.0">DirXML</product>
  1366. <contact>Novell, Inc.</contact>
  1367. </source>
  1368. <input>
  1369. <status level="success" type="heartbeat"/>
  1370. </input>
  1371. </nds>
  1372. [07/10/12 04:02:08.767]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-smp%-C.
  1373. [07/10/12 04:02:08.767]:ADTRACE PT:Applying policy: %+C%14CNOVLDATACOLL-smp-SkipSchemaMapping%-C.
  1374. [07/10/12 04:02:08.767]:ADTRACE PT: Applying to status #1.
  1375. [07/10/12 04:02:08.767]:ADTRACE PT: Evaluating selection criteria for rule 'skip'.
  1376. [07/10/12 04:02:08.767]:ADTRACE PT: (if-operation equal "instance") = FALSE.
  1377. [07/10/12 04:02:08.767]:ADTRACE PT: Rule rejected.
  1378. [07/10/12 04:02:08.767]:ADTRACE PT: Evaluating selection criteria for rule 'restore'.
  1379. [07/10/12 04:02:08.767]:ADTRACE PT: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  1380. [07/10/12 04:02:08.767]:ADTRACE PT: Rule rejected.
  1381. [07/10/12 04:02:08.767]:ADTRACE PT:Policy returned:
  1382. [07/10/12 04:02:08.767]:ADTRACE PT:
  1383. <nds dtdversion="2.2">
  1384. <source>
  1385. <product version="4.0.1.0">DirXML</product>
  1386. <contact>Novell, Inc.</contact>
  1387. </source>
  1388. <input>
  1389. <status level="success" type="heartbeat"/>
  1390. </input>
  1391. </nds>
  1392. [07/10/12 04:02:08.767]:ADTRACE PT:Resolving association references.
  1393. [07/10/12 04:02:08.767]:ADTRACE PT:Applying event transformation policies.
  1394. [07/10/12 04:02:08.767]:ADTRACE PT:Applying policy: %+C%14CNOVLADENTEX-pub-etp-EntitlementsImpl%-C.
  1395. [07/10/12 04:02:08.767]:ADTRACE PT: Applying to status #1.
  1396. [07/10/12 04:02:08.767]:ADTRACE PT: Evaluating selection criteria for rule 'Disallow user account delete when using entitlements'.
  1397. [07/10/12 04:02:08.767]:ADTRACE PT: (if-operation equal "delete") = FALSE.
  1398. [07/10/12 04:02:08.767]:ADTRACE PT: Rule rejected.
  1399. [07/10/12 04:02:08.767]:ADTRACE PT: Evaluating selection criteria for rule 'Strip Login Disabled from operation (Disable Option)'.
  1400. [07/10/12 04:02:08.767]:ADTRACE PT: (if-global-variable 'drv.entitlement.UserAccount' equal "true") = TRUE.
  1401. [07/10/12 04:02:08.767]:ADTRACE PT: (if-global-variable 'drv.entitlement.remove' equal "disable") = TRUE.
  1402. [07/10/12 04:02:08.767]:ADTRACE PT: (if-class-name equal "User") = FALSE.
  1403. [07/10/12 04:02:08.767]:ADTRACE PT: Rule rejected.
  1404. [07/10/12 04:02:08.767]:ADTRACE PT:Policy returned:
  1405. [07/10/12 04:02:08.767]:ADTRACE PT:
  1406. <nds dtdversion="2.2">
  1407. <source>
  1408. <product version="4.0.1.0">DirXML</product>
  1409. <contact>Novell, Inc.</contact>
  1410. </source>
  1411. <input>
  1412. <status level="success" type="heartbeat"/>
  1413. </input>
  1414. </nds>
  1415. [07/10/12 04:02:08.767]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-pub-etp-HandleMovesAndRenames%-C.
  1416. [07/10/12 04:02:08.767]:ADTRACE PT: Applying to status #1.
  1417. [07/10/12 04:02:08.767]:ADTRACE PT: Evaluating selection criteria for rule 'break if not a move or rename'.
  1418. [07/10/12 04:02:08.767]:ADTRACE PT: (if-operation not-match "move|rename") = TRUE.
  1419. [07/10/12 04:02:08.767]:ADTRACE PT: Rule selected.
  1420. [07/10/12 04:02:08.767]:ADTRACE PT: Applying rule 'break if not a move or rename'.
  1421. [07/10/12 04:02:08.767]:ADTRACE PT: Action: do-break().
  1422. [07/10/12 04:02:08.767]:ADTRACE PT:Policy returned:
  1423. [07/10/12 04:02:08.767]:ADTRACE PT:
  1424. <nds dtdversion="2.2">
  1425. <source>
  1426. <product version="4.0.1.0">DirXML</product>
  1427. <contact>Novell, Inc.</contact>
  1428. </source>
  1429. <input>
  1430. <status level="success" type="heartbeat"/>
  1431. </input>
  1432. </nds>
  1433. [07/10/12 04:02:08.767]:ADTRACE PT:Applying publisher filter.
  1434. [07/10/12 04:02:08.767]:ADTRACE PT:Publisher processing status for .
  1435. [07/10/12 04:02:08.767]:ADTRACE PT:Applying command transformation policies.
  1436. [07/10/12 04:02:08.767]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-pub-ctp-UserNameMap%-C.
  1437. [07/10/12 04:02:08.767]:ADTRACE PT: Applying to status #1.
  1438. [07/10/12 04:02:08.783]:ADTRACE PT: Evaluating selection criteria for rule 'consider user objects when name mapping is enabled'.
  1439. [07/10/12 04:02:08.783]:ADTRACE PT: (if-class-name not-equal "User") = TRUE.
  1440. [07/10/12 04:02:08.783]:ADTRACE PT: Rule selected.
  1441. [07/10/12 04:02:08.783]:ADTRACE PT: Applying rule 'consider user objects when name mapping is enabled'.
  1442. [07/10/12 04:02:08.783]:ADTRACE PT: Action: do-break().
  1443. [07/10/12 04:02:08.783]:ADTRACE PT:Policy returned:
  1444. [07/10/12 04:02:08.783]:ADTRACE PT:
  1445. <nds dtdversion="2.2">
  1446. <source>
  1447. <product version="4.0.1.0">DirXML</product>
  1448. <contact>Novell, Inc.</contact>
  1449. </source>
  1450. <input>
  1451. <status level="success" type="heartbeat"/>
  1452. </input>
  1453. </nds>
  1454. [07/10/12 04:02:08.783]:ADTRACE PT:Applying policy: %+C%14CNOVLPWDSYNC-pub-ctp-DefaultPwd%-C.
  1455. [07/10/12 04:02:08.783]:ADTRACE PT: Applying to status #1.
  1456. [07/10/12 04:02:08.783]:ADTRACE PT: Evaluating selection criteria for rule 'On User add, provide default password of @Dirxml1 if no password exists'.
  1457. [07/10/12 04:02:08.783]:ADTRACE PT: (if-operation equal "add") = FALSE.
  1458. [07/10/12 04:02:08.783]:ADTRACE PT: Rule rejected.
  1459. [07/10/12 04:02:08.783]:ADTRACE PT:Policy returned:
  1460. [07/10/12 04:02:08.783]:ADTRACE PT:
  1461. <nds dtdversion="2.2">
  1462. <source>
  1463. <product version="4.0.1.0">DirXML</product>
  1464. <contact>Novell, Inc.</contact>
  1465. </source>
  1466. <input>
  1467. <status level="success" type="heartbeat"/>
  1468. </input>
  1469. </nds>
  1470. [07/10/12 04:02:08.783]:ADTRACE PT:Applying policy: %+C%14CNOVLPWDSYNC-pub-ctp-CheckPwdGCV%-C.
  1471. [07/10/12 04:02:08.783]:ADTRACE PT: Applying to status #1.
  1472. [07/10/12 04:02:08.783]:ADTRACE PT: Evaluating selection criteria for rule 'Block publishing passwords to the Identity Vault when adding an object'.
  1473. [07/10/12 04:02:08.783]:ADTRACE PT: (if-global-variable 'enable-password-publish' equal "false") = FALSE.
  1474. [07/10/12 04:02:08.783]:ADTRACE PT: Rule rejected.
  1475. [07/10/12 04:02:08.783]:ADTRACE PT: Evaluating selection criteria for rule 'Block sending modify-password changes to the Identity Vault'.
  1476. [07/10/12 04:02:08.783]:ADTRACE PT: (if-global-variable 'enable-password-publish' equal "false") = FALSE.
  1477. [07/10/12 04:02:08.783]:ADTRACE PT: Rule rejected.
  1478. [07/10/12 04:02:08.783]:ADTRACE PT:Policy returned:
  1479. [07/10/12 04:02:08.783]:ADTRACE PT:
  1480. <nds dtdversion="2.2">
  1481. <source>
  1482. <product version="4.0.1.0">DirXML</product>
  1483. <contact>Novell, Inc.</contact>
  1484. </source>
  1485. <input>
  1486. <status level="success" type="heartbeat"/>
  1487. </input>
  1488. </nds>
  1489. [07/10/12 04:02:08.783]:ADTRACE PT:Applying policy: %+C%14CNOVLPWDSYNC-pub-ctp-PublishDistPwd%-C.
  1490. [07/10/12 04:02:08.783]:ADTRACE PT: Applying to status #1.
  1491. [07/10/12 04:02:08.783]:ADTRACE PT: Evaluating selection criteria for rule 'Add nspmDistributionAttribute attribute to add operation'.
  1492. [07/10/12 04:02:08.783]:ADTRACE PT: (if-global-variable 'publish-password-to-dp' equal "true") = FALSE.
  1493. [07/10/12 04:02:08.783]:ADTRACE PT: Rule rejected.
  1494. [07/10/12 04:02:08.783]:ADTRACE PT: Evaluating selection criteria for rule 'Change modify-password operations to a modify'.
  1495. [07/10/12 04:02:08.783]:ADTRACE PT: (if-global-variable 'publish-password-to-dp' equal "true") = FALSE.
  1496. [07/10/12 04:02:08.783]:ADTRACE PT: Rule rejected.
  1497. [07/10/12 04:02:08.783]:ADTRACE PT:Policy returned:
  1498. [07/10/12 04:02:08.783]:ADTRACE PT:
  1499. <nds dtdversion="2.2">
  1500. <source>
  1501. <product version="4.0.1.0">DirXML</product>
  1502. <contact>Novell, Inc.</contact>
  1503. </source>
  1504. <input>
  1505. <status level="success" type="heartbeat"/>
  1506. </input>
  1507. </nds>
  1508. [07/10/12 04:02:08.783]:ADTRACE PT:Applying policy: %+C%14CNOVLPWDSYNC-pub-ctp-PublishNDSPwd%-C.
  1509. [07/10/12 04:02:08.783]:ADTRACE PT: Applying to status #1.
  1510. [07/10/12 04:02:08.783]:ADTRACE PT: Evaluating selection criteria for rule 'Block publishing passwords to eDirectory password'.
  1511. [07/10/12 04:02:08.783]:ADTRACE PT: (if-global-variable 'publish-password-to-nds' equal "false") = FALSE.
  1512. [07/10/12 04:02:08.783]:ADTRACE PT: Rule rejected.
  1513. [07/10/12 04:02:08.783]:ADTRACE PT: Evaluating selection criteria for rule 'Block sending modify-password changes to the eDirectory password'.
  1514. [07/10/12 04:02:08.783]:ADTRACE PT: (if-global-variable 'publish-password-to-nds' equal "false") = FALSE.
  1515. [07/10/12 04:02:08.783]:ADTRACE PT: Rule rejected.
  1516. [07/10/12 04:02:08.783]:ADTRACE PT:Policy returned:
  1517. [07/10/12 04:02:08.783]:ADTRACE PT:
  1518. <nds dtdversion="2.2">
  1519. <source>
  1520. <product version="4.0.1.0">DirXML</product>
  1521. <contact>Novell, Inc.</contact>
  1522. </source>
  1523. <input>
  1524. <status level="success" type="heartbeat"/>
  1525. </input>
  1526. </nds>
  1527. [07/10/12 04:02:08.783]:ADTRACE PT:Applying policy: %+C%14CNOVLPWDSYNC-pub-ctp-AddPwdPayload%-C.
  1528. [07/10/12 04:02:08.783]:ADTRACE PT: Applying to status #1.
  1529. [07/10/12 04:02:08.783]:ADTRACE PT: Evaluating selection criteria for rule 'Add operation-data element to password operations'.
  1530. [07/10/12 04:02:08.798]:ADTRACE PT: (if-operation equal "add") = FALSE.
  1531. [07/10/12 04:02:08.798]:ADTRACE PT: (if-operation equal "add") = FALSE.
  1532. [07/10/12 04:02:08.798]:ADTRACE PT: (if-operation equal "modify-password") = FALSE.
  1533. [07/10/12 04:02:08.798]:ADTRACE PT: (if-operation equal "modify") = FALSE.
  1534. [07/10/12 04:02:08.798]:ADTRACE PT: Rule rejected.
  1535. [07/10/12 04:02:08.798]:ADTRACE PT: Evaluating selection criteria for rule 'Add payload data to password operations'.
  1536. [07/10/12 04:02:08.798]:ADTRACE PT: (if-operation equal "add") = FALSE.
  1537. [07/10/12 04:02:08.798]:ADTRACE PT: (if-operation equal "add") = FALSE.
  1538. [07/10/12 04:02:08.798]:ADTRACE PT: (if-operation equal "modify-password") = FALSE.
  1539. [07/10/12 04:02:08.798]:ADTRACE PT: (if-operation equal "modify") = FALSE.
  1540. [07/10/12 04:02:08.798]:ADTRACE PT: Rule rejected.
  1541. [07/10/12 04:02:08.798]:ADTRACE PT:Policy returned:
  1542. [07/10/12 04:02:08.798]:ADTRACE PT:
  1543. <nds dtdversion="2.2">
  1544. <source>
  1545. <product version="4.0.1.0">DirXML</product>
  1546. <contact>Novell, Inc.</contact>
  1547. </source>
  1548. <input>
  1549. <status level="success" type="heartbeat"/>
  1550. </input>
  1551. </nds>
  1552. [07/10/12 04:02:08.798]:ADTRACE PT:Applying policy: %+C%14CNOVLATRKBASE-pub-ctp-WriteAccountsOnAdds%-C.
  1553. [07/10/12 04:02:08.798]:ADTRACE PT: Applying to status #1.
  1554. [07/10/12 04:02:08.798]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - disregard policy if disabled'.
  1555. [07/10/12 04:02:08.798]:ADTRACE PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  1556. [07/10/12 04:02:08.798]:ADTRACE PT: Rule rejected.
  1557. [07/10/12 04:02:08.798]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - on add operation add Dirxml-Accounts'.
  1558. [07/10/12 04:02:08.798]:ADTRACE PT: (if-operation equal "add") = FALSE.
  1559. [07/10/12 04:02:08.798]:ADTRACE PT: Rule rejected.
  1560. [07/10/12 04:02:08.798]:ADTRACE PT:Policy returned:
  1561. [07/10/12 04:02:08.798]:ADTRACE PT:
  1562. <nds dtdversion="2.2">
  1563. <source>
  1564. <product version="4.0.1.0">DirXML</product>
  1565. <contact>Novell, Inc.</contact>
  1566. </source>
  1567. <input>
  1568. <status level="success" type="heartbeat"/>
  1569. </input>
  1570. </nds>
  1571. [07/10/12 04:02:08.798]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-pub-ctp%-C.
  1572. [07/10/12 04:02:08.798]:ADTRACE PT: Applying to status #1.
  1573. [07/10/12 04:02:08.798]:ADTRACE PT: Evaluating selection criteria for rule 'set cached context value on merge'.
  1574. [07/10/12 04:02:08.798]:ADTRACE PT: (if-operation equal "modify") = FALSE.
  1575. [07/10/12 04:02:08.798]:ADTRACE PT: Rule rejected.
  1576. [07/10/12 04:02:08.798]:ADTRACE PT: Evaluating selection criteria for rule 'remove managed attributes when object disassociated'.
  1577. [07/10/12 04:02:08.798]:ADTRACE PT: (if-operation equal "remove-association") = FALSE.
  1578. [07/10/12 04:02:08.798]:ADTRACE PT: Rule rejected.
  1579. [07/10/12 04:02:08.798]:ADTRACE PT: Evaluating selection criteria for rule 'Prevent unassociated users from being removed from groups'.
  1580. [07/10/12 04:02:08.798]:ADTRACE PT: (if-operation equal "modify") = FALSE.
  1581. [07/10/12 04:02:08.798]:ADTRACE PT: Rule rejected.
  1582. [07/10/12 04:02:08.798]:ADTRACE PT: Evaluating selection criteria for rule 'Set Equivalent To Me when group members change'.
  1583. [07/10/12 04:02:08.798]:ADTRACE PT: (if-class-name equal "Group") = FALSE.
  1584. [07/10/12 04:02:08.798]:ADTRACE PT: Rule rejected.
  1585. [07/10/12 04:02:08.798]:ADTRACE PT:Policy returned:
  1586. [07/10/12 04:02:08.798]:ADTRACE PT:
  1587. <nds dtdversion="2.2">
  1588. <source>
  1589. <product version="4.0.1.0">DirXML</product>
  1590. <contact>Novell, Inc.</contact>
  1591. </source>
  1592. <input>
  1593. <status level="success" type="heartbeat"/>
  1594. </input>
  1595. </nds>
  1596. [07/10/12 04:02:08.798]:ADTRACE PT:Applying XSLT policy: %+C%14CNOVLADDCFG-pub-cts%-C.
  1597. [07/10/12 04:02:08.798]:ADTRACE PT:Policy returned:
  1598. [07/10/12 04:02:08.798]:ADTRACE PT:
  1599. <nds dtdversion="2.2">
  1600. <source>
  1601. <product version="4.0.1.0">DirXML</product>
  1602. <contact>Novell, Inc.</contact>
  1603. </source>
  1604. <input>
  1605. <status level="success" type="heartbeat"/>
  1606. </input>
  1607. </nds>
  1608. [07/10/12 04:02:08.798]:ADTRACE PT:Filtering out notification-only attributes.
  1609. [07/10/12 04:02:08.798]:ADTRACE PT:Pumping XDS to eDirectory.
  1610. [07/10/12 04:02:08.798]:ADTRACE PT:Performing operation status for .
  1611. [07/10/12 04:02:08.798]:ADTRACE PT:
  1612. DirXML Log Event -------------------
  1613. Driver: \xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver
  1614. Channel: Publisher
  1615. Status: Success
  1616. [07/10/12 04:02:08.798]:ADTRACE PT:Fixing up association references.
  1617. [07/10/12 04:02:08.798]:ADTRACE PT:Applying schema mapping policies to output.
  1618. [07/10/12 04:02:08.798]:ADTRACE PT:Applying policy: %+C%14CNOVLDATACOLL-smp-SkipSchemaMapping%-C.
  1619. [07/10/12 04:02:08.798]:ADTRACE PT: Applying to status #1.
  1620. [07/10/12 04:02:08.798]:ADTRACE PT: Evaluating selection criteria for rule 'skip'.
  1621. [07/10/12 04:02:08.798]:ADTRACE PT: (if-operation equal "instance") = FALSE.
  1622. [07/10/12 04:02:08.814]:ADTRACE PT: Rule rejected.
  1623. [07/10/12 04:02:08.814]:ADTRACE PT: Evaluating selection criteria for rule 'restore'.
  1624. [07/10/12 04:02:08.814]:ADTRACE PT: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  1625. [07/10/12 04:02:08.814]:ADTRACE PT: Rule rejected.
  1626. [07/10/12 04:02:08.814]:ADTRACE PT:Policy returned:
  1627. [07/10/12 04:02:08.814]:ADTRACE PT:
  1628. <nds dtdversion="4.0" ndsversion="8.x">
  1629. <source>
  1630. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  1631. <contact>Novell, Inc.</contact>
  1632. </source>
  1633. <output>
  1634. <status event-id="0" level="success"></status>
  1635. </output>
  1636. </nds>
  1637. [07/10/12 04:02:08.814]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-smp%-C.
  1638. [07/10/12 04:02:08.814]:ADTRACE PT:Applying policy: %+C%14CNOVLDATACOLL-smp-SkipSchemaMapping%-C.
  1639. [07/10/12 04:02:08.814]:ADTRACE PT: Applying to status #1.
  1640. [07/10/12 04:02:08.814]:ADTRACE PT: Evaluating selection criteria for rule 'skip'.
  1641. [07/10/12 04:02:08.814]:ADTRACE PT: (if-operation equal "instance") = FALSE.
  1642. [07/10/12 04:02:08.814]:ADTRACE PT: Rule rejected.
  1643. [07/10/12 04:02:08.814]:ADTRACE PT: Evaluating selection criteria for rule 'restore'.
  1644. [07/10/12 04:02:08.814]:ADTRACE PT: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  1645. [07/10/12 04:02:08.814]:ADTRACE PT: Rule rejected.
  1646. [07/10/12 04:02:08.814]:ADTRACE PT:Policy returned:
  1647. [07/10/12 04:02:08.814]:ADTRACE PT:
  1648. <nds dtdversion="4.0" ndsversion="8.x">
  1649. <source>
  1650. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  1651. <contact>Novell, Inc.</contact>
  1652. </source>
  1653. <output>
  1654. <status event-id="0" level="success"></status>
  1655. </output>
  1656. </nds>
  1657. [07/10/12 04:02:08.814]:ADTRACE PT:Applying output transformation policies.
  1658. [07/10/12 04:02:08.814]:ADTRACE PT:Applying policy: %+C%14CNOVLADENTEX-otp-EntitlementsImpl%-C.
  1659. [07/10/12 04:02:08.814]:ADTRACE PT: Applying to status #1.
  1660. [07/10/12 04:02:08.814]:ADTRACE PT: Evaluating selection criteria for rule 'Intercept outbound queries for ADDomain'.
  1661. [07/10/12 04:02:08.814]:ADTRACE PT: (if-class-name equal "ADDomain") = FALSE.
  1662. [07/10/12 04:02:08.814]:ADTRACE PT: Rule rejected.
  1663. [07/10/12 04:02:08.814]:ADTRACE PT:Policy returned:
  1664. [07/10/12 04:02:08.814]:ADTRACE PT:
  1665. <nds dtdversion="4.0" ndsversion="8.x">
  1666. <source>
  1667. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  1668. <contact>Novell, Inc.</contact>
  1669. </source>
  1670. <output>
  1671. <status event-id="0" level="success"></status>
  1672. </output>
  1673. </nds>
  1674. [07/10/12 04:02:08.814]:ADTRACE PT:Applying policy: %+C%14CNOVLADENTEX-otp-ExchangeMailboxPolicy%-C.
  1675. [07/10/12 04:02:08.814]:ADTRACE PT: Applying to status #1.
  1676. [07/10/12 04:02:08.814]:ADTRACE PT: Evaluating selection criteria for rule 'Exchange: Remove HomeMDB when disabled'.
  1677. [07/10/12 04:02:08.814]:ADTRACE PT: (if-global-variable 'drv.exchMailboxMethod' equal "disabled") = TRUE.
  1678. [07/10/12 04:02:08.814]:ADTRACE PT: Rule selected.
  1679. [07/10/12 04:02:08.814]:ADTRACE PT: Applying rule 'Exchange: Remove HomeMDB when disabled'.
  1680. [07/10/12 04:02:08.814]:ADTRACE PT: Action: do-strip-op-attr("homeMDB").
  1681. [07/10/12 04:02:08.814]:ADTRACE PT:Policy returned:
  1682. [07/10/12 04:02:08.814]:ADTRACE PT:
  1683. <nds dtdversion="4.0" ndsversion="8.x">
  1684. <source>
  1685. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  1686. <contact>Novell, Inc.</contact>
  1687. </source>
  1688. <output>
  1689. <status event-id="0" level="success"></status>
  1690. </output>
  1691. </nds>
  1692. [07/10/12 04:02:08.814]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-otp-FormatConversions%-C.
  1693. [07/10/12 04:02:08.814]:ADTRACE PT: Applying to status #1.
  1694. [07/10/12 04:02:08.814]:ADTRACE PT: Evaluating selection criteria for rule 'Street Address: Convert LF to CR-LF'.
  1695. [07/10/12 04:02:08.814]:ADTRACE PT: Rule selected.
  1696. [07/10/12 04:02:08.814]:ADTRACE PT: Applying rule 'Street Address: Convert LF to CR-LF'.
  1697. [07/10/12 04:02:08.814]:ADTRACE PT: Action: do-reformat-op-attr("streetAddress",token-replace-all("[^\r]\n","\r\n",token-local-variable("current-value"))).
  1698. [07/10/12 04:02:08.814]:ADTRACE PT: Evaluating selection criteria for rule 'logonHours: Convert to Active Directory form'.
  1699. [07/10/12 04:02:08.814]:ADTRACE PT: Rule selected.
  1700. [07/10/12 04:02:08.814]:ADTRACE PT: Applying rule 'logonHours: Convert to Active Directory form'.
  1701. [07/10/12 04:02:08.814]:ADTRACE PT: Action: do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2ADLenient($current-value)")).
  1702. [07/10/12 04:02:08.814]:ADTRACE PT: Evaluating selection criteria for rule 'accountExpires: Convert to Active Directory form'.
  1703. [07/10/12 04:02:08.814]:ADTRACE PT: (if-op-attr 'accountExpires' changing) = FALSE.
  1704. [07/10/12 04:02:08.814]:ADTRACE PT: Rule rejected.
  1705. [07/10/12 04:02:08.814]:ADTRACE PT: Evaluating selection criteria for rule 'lockoutTime: Convert to Active Directory form'.
  1706. [07/10/12 04:02:08.814]:ADTRACE PT: Rule selected.
  1707. [07/10/12 04:02:08.814]:ADTRACE PT: Applying rule 'lockoutTime: Convert to Active Directory form'.
  1708. [07/10/12 04:02:08.814]:ADTRACE PT: Action: do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateEpoch2FileTime($current-value)")).
  1709. [07/10/12 04:02:08.814]:ADTRACE PT: Evaluating selection criteria for rule 'Add: User - convert multi-valued Telephone to single value'.
  1710. [07/10/12 04:02:08.829]:ADTRACE PT: (if-operation equal "add") = FALSE.
  1711. [07/10/12 04:02:08.829]:ADTRACE PT: Rule rejected.
  1712. [07/10/12 04:02:08.829]:ADTRACE PT: Evaluating selection criteria for rule 'update Active Directory logon name'.
  1713. [07/10/12 04:02:08.829]:ADTRACE PT: (if-xpath true "self::status[@level = 'success']/operation-data/windows-2000-logon-name") = FALSE.
  1714. [07/10/12 04:02:08.829]:ADTRACE PT: Rule rejected.
  1715. [07/10/12 04:02:08.829]:ADTRACE PT:Policy returned:
  1716. [07/10/12 04:02:08.829]:ADTRACE PT:
  1717. <nds dtdversion="4.0" ndsversion="8.x">
  1718. <source>
  1719. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  1720. <contact>Novell, Inc.</contact>
  1721. </source>
  1722. <output>
  1723. <status event-id="0" level="success"></status>
  1724. </output>
  1725. </nds>
  1726. [07/10/12 04:02:08.829]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-otp-ExchangeEntitlementQuery%-C.
  1727. [07/10/12 04:02:08.829]:ADTRACE PT: Applying to status #1.
  1728. [07/10/12 04:02:08.829]:ADTRACE PT: Evaluating selection criteria for rule 'Add dest-dn to the Exchange Entitlement Query'.
  1729. [07/10/12 04:02:08.829]:ADTRACE PT: (if-operation equal "query") = FALSE.
  1730. [07/10/12 04:02:08.829]:ADTRACE PT: Rule rejected.
  1731. [07/10/12 04:02:08.829]:ADTRACE PT:Policy returned:
  1732. [07/10/12 04:02:08.829]:ADTRACE PT:
  1733. <nds dtdversion="4.0" ndsversion="8.x">
  1734. <source>
  1735. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  1736. <contact>Novell, Inc.</contact>
  1737. </source>
  1738. <output>
  1739. <status event-id="0" level="success"></status>
  1740. </output>
  1741. </nds>
  1742. [07/10/12 04:02:08.829]:ADTRACE PT:Applying policy: %+C%14CNOVLPWDSYNC-otp-EmailOnFailedPwdPub%-C.
  1743. [07/10/12 04:02:08.829]:ADTRACE PT: Applying to status #1.
  1744. [07/10/12 04:02:08.829]:ADTRACE PT: Evaluating selection criteria for rule 'Send e-mail for a failed publish password operation'.
  1745. [07/10/12 04:02:08.829]:ADTRACE PT: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  1746. [07/10/12 04:02:08.829]:ADTRACE PT: (if-operation equal "status") = TRUE.
  1747. [07/10/12 04:02:08.829]:ADTRACE PT: (if-xpath true "self::status[@level != 'success']/operation-data/password-publish-status") = FALSE.
  1748. [07/10/12 04:02:08.829]:ADTRACE PT: Rule rejected.
  1749. [07/10/12 04:02:08.829]:ADTRACE PT:Policy returned:
  1750. [07/10/12 04:02:08.829]:ADTRACE PT:
  1751. <nds dtdversion="4.0" ndsversion="8.x">
  1752. <source>
  1753. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  1754. <contact>Novell, Inc.</contact>
  1755. </source>
  1756. <output>
  1757. <status event-id="0" level="success"></status>
  1758. </output>
  1759. </nds>
  1760. [07/10/12 04:02:08.829]:ADTRACE PT:Applying policy: %+C%14CNOVLATRKBASE-otp-Subscribe%-C.
  1761. [07/10/12 04:02:08.829]:ADTRACE PT: Applying to status #1.
  1762. [07/10/12 04:02:08.829]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - Initialize Realm Mapping'.
  1763. [07/10/12 04:02:08.829]:ADTRACE PT: (if-global-variable 'drv.acctTrk.enable' equal "true") = TRUE.
  1764. [07/10/12 04:02:08.829]:ADTRACE PT: (if-global-variable 'drv.acctTrk.mode' equal "fanout") = FALSE.
  1765. [07/10/12 04:02:08.829]:ADTRACE PT: Rule rejected.
  1766. [07/10/12 04:02:08.829]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled or wrong object class'.
  1767. [07/10/12 04:02:08.829]:ADTRACE PT: Rule selected.
  1768. [07/10/12 04:02:08.829]:ADTRACE PT: Applying rule 'AccountTracking - disregard if disabled or wrong object class'.
  1769. [07/10/12 04:02:08.829]:ADTRACE PT: Action: do-if().
  1770. [07/10/12 04:02:08.829]:ADTRACE PT: Evaluating conditions.
  1771. [07/10/12 04:02:08.829]:ADTRACE PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  1772. [07/10/12 04:02:08.829]:ADTRACE PT: Performing else actions.
  1773. [07/10/12 04:02:08.829]:ADTRACE PT: Action: do-for-each(arg-node-set(token-global-variable("drv.acctTrk.objectClass"))).
  1774. [07/10/12 04:02:08.829]:ADTRACE PT: arg-node-set(token-global-variable("drv.acctTrk.objectClass"))
  1775. [07/10/12 04:02:08.829]:ADTRACE PT: token-global-variable("drv.acctTrk.objectClass")
  1776. [07/10/12 04:02:08.829]:ADTRACE PT: Token Value: {"user"}.
  1777. [07/10/12 04:02:08.829]:ADTRACE PT: Arg Value: {"user"}.
  1778. [07/10/12 04:02:08.829]:ADTRACE PT: Performing actions for local-variable(current-node) = "user".
  1779. [07/10/12 04:02:08.829]:ADTRACE PT: Action: do-if().
  1780. [07/10/12 04:02:08.829]:ADTRACE PT: Evaluating conditions.
  1781. [07/10/12 04:02:08.829]:ADTRACE PT: (if-class-name equal "$current-node$") = FALSE.
  1782. [07/10/12 04:02:08.829]:ADTRACE PT: Performing else actions.
  1783. [07/10/12 04:02:08.829]:ADTRACE PT: Action: do-if().
  1784. [07/10/12 04:02:08.829]:ADTRACE PT: Evaluating conditions.
  1785. [07/10/12 04:02:08.829]:ADTRACE PT: (if-local-variable 'pass' not-available) = TRUE.
  1786. [07/10/12 04:02:08.829]:ADTRACE PT: Performing if actions.
  1787. [07/10/12 04:02:08.845]:ADTRACE PT: Action: do-break().
  1788. [07/10/12 04:02:08.845]:ADTRACE PT:Policy returned:
  1789. [07/10/12 04:02:08.845]:ADTRACE PT:
  1790. <nds dtdversion="4.0" ndsversion="8.x">
  1791. <source>
  1792. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  1793. <contact>Novell, Inc.</contact>
  1794. </source>
  1795. <output>
  1796. <status event-id="0" level="success"></status>
  1797. </output>
  1798. </nds>
  1799. [07/10/12 04:02:08.845]:ADTRACE PT:
  1800. <nds dtdversion="4.0" ndsversion="8.x">
  1801. <source>
  1802. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  1803. <contact>Novell, Inc.</contact>
  1804. </source>
  1805. <output>
  1806. <status event-id="0" level="success"></status>
  1807. </output>
  1808. </nds>
  1809. [07/10/12 04:02:08.845]:ADTRACE PT:Remote Interface Driver: Sending...
  1810. [07/10/12 04:02:08.845]:ADTRACE PT:
  1811. <nds dtdversion="4.0" ndsversion="8.x">
  1812. <source>
  1813. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  1814. <contact>Novell, Inc.</contact>
  1815. </source>
  1816. <output>
  1817. <status event-id="0" level="success"></status>
  1818. </output>
  1819. </nds>
  1820. [07/10/12 04:02:08.845]:ADTRACE PT:Remote Interface Driver: Document sent.
  1821. [07/10/12 04:03:08.658]:ADTRACE :Remote Interface Driver: Received.
  1822. [07/10/12 04:03:08.658]:ADTRACE :
  1823. <nds dtdversion="2.2">
  1824. <source>
  1825. <product version="4.0.1.0">DirXML</product>
  1826. <contact>Novell, Inc.</contact>
  1827. </source>
  1828. <input>
  1829. <status level="success" type="heartbeat"/>
  1830. </input>
  1831. </nds>
  1832. [07/10/12 04:03:08.658]:ADTRACE :Remote Interface Driver: Received document for publisher channel
  1833. [07/10/12 04:03:08.658]:ADTRACE :Remote Interface Driver: Waiting for receive...
  1834. [07/10/12 04:03:08.658]:ADTRACE PT:Receiving DOM document from application.
  1835. [07/10/12 04:03:08.658]:ADTRACE PT:
  1836. <nds dtdversion="2.2">
  1837. <source>
  1838. <product version="4.0.1.0">DirXML</product>
  1839. <contact>Novell, Inc.</contact>
  1840. </source>
  1841. <input>
  1842. <status level="success" type="heartbeat"/>
  1843. </input>
  1844. </nds>
  1845. [07/10/12 04:03:08.658]:ADTRACE PT:Applying input transformation policies.
  1846. [07/10/12 04:03:08.658]:ADTRACE PT:Applying policy: %+C%14CNOVLAUDTENTC-itp-SendEntitlementsEvents%-C.
  1847. [07/10/12 04:03:08.658]:ADTRACE PT: Applying to status #1.
  1848. [07/10/12 04:03:08.658]:ADTRACE PT: Evaluating selection criteria for rule '00031200 - Account Create By Entitlement Grant'.
  1849. [07/10/12 04:03:08.658]:ADTRACE PT: (if-operation equal "status") = TRUE.
  1850. [07/10/12 04:03:08.658]:ADTRACE PT: (if-op-property 'accountAction' equal "accountCreateByEntitlementGrant") = FALSE.
  1851. [07/10/12 04:03:08.658]:ADTRACE PT: Rule rejected.
  1852. [07/10/12 04:03:08.658]:ADTRACE PT: Evaluating selection criteria for rule '00031201 - Account Delete By Entitlement Revoke'.
  1853. [07/10/12 04:03:08.658]:ADTRACE PT: (if-operation equal "status") = TRUE.
  1854. [07/10/12 04:03:08.658]:ADTRACE PT: (if-xpath true "./operation-data/entitlement-impl/@state = '0'") = FALSE.
  1855. [07/10/12 04:03:08.658]:ADTRACE PT: (if-operation equal "status") = TRUE.
  1856. [07/10/12 04:03:08.658]:ADTRACE PT: (if-op-property 'accountAction' equal "accountDeleteByEntitlementRevoke") = FALSE.
  1857. [07/10/12 04:03:08.658]:ADTRACE PT: Rule rejected.
  1858. [07/10/12 04:03:08.658]:ADTRACE PT: Evaluating selection criteria for rule '00031202 - Account Disable By Entitlement Revoke'.
  1859. [07/10/12 04:03:08.658]:ADTRACE PT: (if-operation equal "status") = TRUE.
  1860. [07/10/12 04:03:08.658]:ADTRACE PT: (if-op-property 'accountAction' equal "accountDisableByEntitlementRevoke") = FALSE.
  1861. [07/10/12 04:03:08.658]:ADTRACE PT: Rule rejected.
  1862. [07/10/12 04:03:08.658]:ADTRACE PT: Evaluating selection criteria for rule '00031203 - Account Enable By Entitlement Grant'.
  1863. [07/10/12 04:03:08.658]:ADTRACE PT: (if-operation equal "status") = TRUE.
  1864. [07/10/12 04:03:08.658]:ADTRACE PT: (if-op-property 'accountAction' equal "accountEnableByEntitlementGrant") = FALSE.
  1865. [07/10/12 04:03:08.673]:ADTRACE PT: Rule rejected.
  1866. [07/10/12 04:03:08.673]:ADTRACE PT: Evaluating selection criteria for rule 'Generate Audit Event'.
  1867. [07/10/12 04:03:08.673]:ADTRACE PT: (if-operation equal "status") = TRUE.
  1868. [07/10/12 04:03:08.673]:ADTRACE PT: (if-local-variable 'auditEventID' available) = FALSE.
  1869. [07/10/12 04:03:08.673]:ADTRACE PT: Rule rejected.
  1870. [07/10/12 04:03:08.673]:ADTRACE PT:Policy returned:
  1871. [07/10/12 04:03:08.673]:ADTRACE PT:
  1872. <nds dtdversion="2.2">
  1873. <source>
  1874. <product version="4.0.1.0">DirXML</product>
  1875. <contact>Novell, Inc.</contact>
  1876. </source>
  1877. <input>
  1878. <status level="success" type="heartbeat"/>
  1879. </input>
  1880. </nds>
  1881. [07/10/12 04:03:08.673]:ADTRACE PT:Applying policy: %+C%14CNOVLADENTEX-itp-InitEntitlementConfigurationResource%-C.
  1882. [07/10/12 04:03:08.673]:ADTRACE PT: Applying to status #1.
  1883. [07/10/12 04:03:08.673]:ADTRACE PT: Evaluating selection criteria for rule 'Make sure we only run once and when we're ready'.
  1884. [07/10/12 04:03:08.673]:ADTRACE PT: (if-local-variable 'objectClass' match ".+") = TRUE.
  1885. [07/10/12 04:03:08.673]:ADTRACE PT: (if-local-variable 'entConfigInitialized' equal "true") = TRUE.
  1886. [07/10/12 04:03:08.673]:ADTRACE PT: Rule selected.
  1887. [07/10/12 04:03:08.673]:ADTRACE PT: Applying rule 'Make sure we only run once and when we're ready'.
  1888. [07/10/12 04:03:08.673]:ADTRACE PT: Action: do-break().
  1889. [07/10/12 04:03:08.673]:ADTRACE PT:Policy returned:
  1890. [07/10/12 04:03:08.673]:ADTRACE PT:
  1891. <nds dtdversion="2.2">
  1892. <source>
  1893. <product version="4.0.1.0">DirXML</product>
  1894. <contact>Novell, Inc.</contact>
  1895. </source>
  1896. <input>
  1897. <status level="success" type="heartbeat"/>
  1898. </input>
  1899. </nds>
  1900. [07/10/12 04:03:08.673]:ADTRACE PT:Applying policy: %+C%14CNOVLADMSINFO-itp-InitManagedSystemInfo%-C.
  1901. [07/10/12 04:03:08.673]:ADTRACE PT: Applying to status #1.
  1902. [07/10/12 04:03:08.673]:ADTRACE PT: Evaluating selection criteria for rule 'Make sure we only run once and when we're ready'.
  1903. [07/10/12 04:03:08.673]:ADTRACE PT: (if-local-variable 'objectClass' match ".+") = TRUE.
  1904. [07/10/12 04:03:08.673]:ADTRACE PT: (if-local-variable 'mSysInfoInitialized' equal "true") = TRUE.
  1905. [07/10/12 04:03:08.673]:ADTRACE PT: Rule selected.
  1906. [07/10/12 04:03:08.673]:ADTRACE PT: Applying rule 'Make sure we only run once and when we're ready'.
  1907. [07/10/12 04:03:08.673]:ADTRACE PT: Action: do-break().
  1908. [07/10/12 04:03:08.673]:ADTRACE PT:Policy returned:
  1909. [07/10/12 04:03:08.673]:ADTRACE PT:
  1910. <nds dtdversion="2.2">
  1911. <source>
  1912. <product version="4.0.1.0">DirXML</product>
  1913. <contact>Novell, Inc.</contact>
  1914. </source>
  1915. <input>
  1916. <status level="success" type="heartbeat"/>
  1917. </input>
  1918. </nds>
  1919. [07/10/12 04:03:08.673]:ADTRACE PT:Applying policy: %+C%14CNOVLATRKBASE-itp-Publish%-C.
  1920. [07/10/12 04:03:08.673]:ADTRACE PT: Applying to status #1.
  1921. [07/10/12 04:03:08.673]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled or wrong object class'.
  1922. [07/10/12 04:03:08.673]:ADTRACE PT: Rule selected.
  1923. [07/10/12 04:03:08.673]:ADTRACE PT: Applying rule 'AccountTracking - disregard if disabled or wrong object class'.
  1924. [07/10/12 04:03:08.673]:ADTRACE PT: Action: do-if().
  1925. [07/10/12 04:03:08.673]:ADTRACE PT: Evaluating conditions.
  1926. [07/10/12 04:03:08.673]:ADTRACE PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  1927. [07/10/12 04:03:08.673]:ADTRACE PT: Performing else actions.
  1928. [07/10/12 04:03:08.673]:ADTRACE PT: Action: do-if().
  1929. [07/10/12 04:03:08.673]:ADTRACE PT: Evaluating conditions.
  1930. [07/10/12 04:03:08.673]:ADTRACE PT: (if-class-name available) = FALSE.
  1931. [07/10/12 04:03:08.673]:ADTRACE PT: Performing else actions.
  1932. [07/10/12 04:03:08.673]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - on add-association sync the operation-properties to status operations'.
  1933. [07/10/12 04:03:08.673]:ADTRACE PT: (if-operation equal "add-association") = FALSE.
  1934. [07/10/12 04:03:08.673]:ADTRACE PT: Rule rejected.
  1935. [07/10/12 04:03:08.673]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - Query for destination DN using Association'.
  1936. [07/10/12 04:03:08.673]:ADTRACE PT: (if-operation match "modify|delete|move|rename") = FALSE.
  1937. [07/10/12 04:03:08.673]:ADTRACE PT: Rule rejected.
  1938. [07/10/12 04:03:08.673]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - add interested properties to current doc for future use.'.
  1939. [07/10/12 04:03:08.673]:ADTRACE PT: (if-operation match "add|modify|delete|rename|move|status") = TRUE.
  1940. [07/10/12 04:03:08.689]:ADTRACE PT: Rule selected.
  1941. [07/10/12 04:03:08.689]:ADTRACE PT: Applying rule 'AccountTracking - add interested properties to current doc for future use.'.
  1942. [07/10/12 04:03:08.689]:ADTRACE PT: Action: do-for-each(arg-node-set(token-global-variable("drv.acctTrk.identifiers"))).
  1943. [07/10/12 04:03:08.689]:ADTRACE PT: arg-node-set(token-global-variable("drv.acctTrk.identifiers"))
  1944. [07/10/12 04:03:08.689]:ADTRACE PT: token-global-variable("drv.acctTrk.identifiers")
  1945. [07/10/12 04:03:08.689]:ADTRACE PT: Token Value: {"sAMAccountName","userPrincipalName","LDAPDN","association"}.
  1946. [07/10/12 04:03:08.689]:ADTRACE PT: Arg Value: {"sAMAccountName","userPrincipalName","LDAPDN","association"}.
  1947. [07/10/12 04:03:08.689]:ADTRACE PT: Performing actions for local-variable(current-node) = "sAMAccountName".
  1948. [07/10/12 04:03:08.689]:ADTRACE PT: Action: do-if().
  1949. [07/10/12 04:03:08.689]:ADTRACE PT: Evaluating conditions.
  1950. [07/10/12 04:03:08.689]:ADTRACE PT: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  1951. [07/10/12 04:03:08.689]:ADTRACE PT: Performing else actions.
  1952. [07/10/12 04:03:08.689]:ADTRACE PT: Action: do-if().
  1953. [07/10/12 04:03:08.689]:ADTRACE PT: Evaluating conditions.
  1954. [07/10/12 04:03:08.689]:ADTRACE PT: (if-local-variable 'current-node' equal "association") = FALSE.
  1955. [07/10/12 04:03:08.689]:ADTRACE PT: Performing else actions.
  1956. [07/10/12 04:03:08.689]:ADTRACE PT: Action: do-if().
  1957. [07/10/12 04:03:08.689]:ADTRACE PT: Evaluating conditions.
  1958. [07/10/12 04:03:08.689]:ADTRACE PT: Expanded variable reference '$current-node$' to 'sAMAccountName'.
  1959. [07/10/12 04:03:08.689]:ADTRACE PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  1960. [07/10/12 04:03:08.689]:ADTRACE PT: Expanded variable reference '$current-node$' to 'sAMAccountName'.
  1961. [07/10/12 04:03:08.689]:ADTRACE PT: (if-op-attr '$current-node$' available) = FALSE.
  1962. [07/10/12 04:03:08.689]:ADTRACE PT: Performing else actions.
  1963. [07/10/12 04:03:08.689]:ADTRACE PT: Performing actions for local-variable(current-node) = "userPrincipalName".
  1964. [07/10/12 04:03:08.689]:ADTRACE PT: Action: do-if().
  1965. [07/10/12 04:03:08.689]:ADTRACE PT: Evaluating conditions.
  1966. [07/10/12 04:03:08.689]:ADTRACE PT: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  1967. [07/10/12 04:03:08.689]:ADTRACE PT: Performing else actions.
  1968. [07/10/12 04:03:08.689]:ADTRACE PT: Action: do-if().
  1969. [07/10/12 04:03:08.689]:ADTRACE PT: Evaluating conditions.
  1970. [07/10/12 04:03:08.689]:ADTRACE PT: (if-local-variable 'current-node' equal "association") = FALSE.
  1971. [07/10/12 04:03:08.689]:ADTRACE PT: Performing else actions.
  1972. [07/10/12 04:03:08.689]:ADTRACE PT: Action: do-if().
  1973. [07/10/12 04:03:08.689]:ADTRACE PT: Evaluating conditions.
  1974. [07/10/12 04:03:08.689]:ADTRACE PT: Expanded variable reference '$current-node$' to 'userPrincipalName'.
  1975. [07/10/12 04:03:08.689]:ADTRACE PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  1976. [07/10/12 04:03:08.689]:ADTRACE PT: Expanded variable reference '$current-node$' to 'userPrincipalName'.
  1977. [07/10/12 04:03:08.689]:ADTRACE PT: (if-op-attr '$current-node$' available) = FALSE.
  1978. [07/10/12 04:03:08.689]:ADTRACE PT: Performing else actions.
  1979. [07/10/12 04:03:08.689]:ADTRACE PT: Performing actions for local-variable(current-node) = "LDAPDN".
  1980. [07/10/12 04:03:08.689]:ADTRACE PT: Action: do-if().
  1981. [07/10/12 04:03:08.689]:ADTRACE PT: Evaluating conditions.
  1982. [07/10/12 04:03:08.689]:ADTRACE PT: (if-local-variable 'current-node' equal "LDAPDN") = TRUE.
  1983. [07/10/12 04:03:08.689]:ADTRACE PT: Expanded variable reference '$current-node$' to 'LDAPDN'.
  1984. [07/10/12 04:03:08.689]:ADTRACE PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  1985. [07/10/12 04:03:08.689]:ADTRACE PT: (if-src-dn available) = FALSE.
  1986. [07/10/12 04:03:08.689]:ADTRACE PT: Performing else actions.
  1987. [07/10/12 04:03:08.689]:ADTRACE PT: Action: do-if().
  1988. [07/10/12 04:03:08.689]:ADTRACE PT: Evaluating conditions.
  1989. [07/10/12 04:03:08.689]:ADTRACE PT: (if-local-variable 'current-node' equal "association") = FALSE.
  1990. [07/10/12 04:03:08.704]:ADTRACE PT: Performing else actions.
  1991. [07/10/12 04:03:08.704]:ADTRACE PT: Action: do-if().
  1992. [07/10/12 04:03:08.704]:ADTRACE PT: Evaluating conditions.
  1993. [07/10/12 04:03:08.704]:ADTRACE PT: Expanded variable reference '$current-node$' to 'LDAPDN'.
  1994. [07/10/12 04:03:08.704]:ADTRACE PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  1995. [07/10/12 04:03:08.704]:ADTRACE PT: Expanded variable reference '$current-node$' to 'LDAPDN'.
  1996. [07/10/12 04:03:08.704]:ADTRACE PT: (if-op-attr '$current-node$' available) = FALSE.
  1997. [07/10/12 04:03:08.704]:ADTRACE PT: Performing else actions.
  1998. [07/10/12 04:03:08.704]:ADTRACE PT: Performing actions for local-variable(current-node) = "association".
  1999. [07/10/12 04:03:08.704]:ADTRACE PT: Action: do-if().
  2000. [07/10/12 04:03:08.704]:ADTRACE PT: Evaluating conditions.
  2001. [07/10/12 04:03:08.704]:ADTRACE PT: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  2002. [07/10/12 04:03:08.704]:ADTRACE PT: Performing else actions.
  2003. [07/10/12 04:03:08.704]:ADTRACE PT: Action: do-if().
  2004. [07/10/12 04:03:08.704]:ADTRACE PT: Evaluating conditions.
  2005. [07/10/12 04:03:08.704]:ADTRACE PT: (if-local-variable 'current-node' equal "association") = TRUE.
  2006. [07/10/12 04:03:08.704]:ADTRACE PT: Expanded variable reference '$current-node$' to 'association'.
  2007. [07/10/12 04:03:08.704]:ADTRACE PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  2008. [07/10/12 04:03:08.704]:ADTRACE PT: (if-association available) = FALSE.
  2009. [07/10/12 04:03:08.704]:ADTRACE PT: Performing else actions.
  2010. [07/10/12 04:03:08.704]:ADTRACE PT: Action: do-if().
  2011. [07/10/12 04:03:08.704]:ADTRACE PT: Evaluating conditions.
  2012. [07/10/12 04:03:08.704]:ADTRACE PT: Expanded variable reference '$current-node$' to 'association'.
  2013. [07/10/12 04:03:08.704]:ADTRACE PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  2014. [07/10/12 04:03:08.704]:ADTRACE PT: Expanded variable reference '$current-node$' to 'association'.
  2015. [07/10/12 04:03:08.704]:ADTRACE PT: (if-op-attr '$current-node$' available) = FALSE.
  2016. [07/10/12 04:03:08.704]:ADTRACE PT: Performing else actions.
  2017. [07/10/12 04:03:08.704]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - Initialize status properties on published events'.
  2018. [07/10/12 04:03:08.704]:ADTRACE PT: (if-operation match "add|modify|delete|rename|move") = FALSE.
  2019. [07/10/12 04:03:08.704]:ADTRACE PT: Rule rejected.
  2020. [07/10/12 04:03:08.704]:ADTRACE PT:Policy returned:
  2021. [07/10/12 04:03:08.704]:ADTRACE PT:
  2022. <nds dtdversion="2.2">
  2023. <source>
  2024. <product version="4.0.1.0">DirXML</product>
  2025. <contact>Novell, Inc.</contact>
  2026. </source>
  2027. <input>
  2028. <status level="success" type="heartbeat"/>
  2029. </input>
  2030. </nds>
  2031. [07/10/12 04:03:08.704]:ADTRACE PT:Applying policy: %+C%14CNOVLATRKBASE-itp-WriteAccounts%-C.
  2032. [07/10/12 04:03:08.704]:ADTRACE PT: Applying to status #1.
  2033. [07/10/12 04:03:08.704]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - Initialize Realm Mapping'.
  2034. [07/10/12 04:03:08.704]:ADTRACE PT: (if-global-variable 'drv.acctTrk.enable' equal "true") = TRUE.
  2035. [07/10/12 04:03:08.704]:ADTRACE PT: (if-global-variable 'drv.acctTrk.mode' equal "fanout") = FALSE.
  2036. [07/10/12 04:03:08.704]:ADTRACE PT: Rule rejected.
  2037. [07/10/12 04:03:08.704]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled'.
  2038. [07/10/12 04:03:08.704]:ADTRACE PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  2039. [07/10/12 04:03:08.704]:ADTRACE PT: Rule rejected.
  2040. [07/10/12 04:03:08.704]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - query DirXML-Accounts Attribute'.
  2041. [07/10/12 04:03:08.704]:ADTRACE PT: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  2042. [07/10/12 04:03:08.704]:ADTRACE PT: Rule rejected.
  2043. [07/10/12 04:03:08.704]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - remove Dirxml-Account values on regular delete operation'.
  2044. [07/10/12 04:03:08.704]:ADTRACE PT: (if-operation match "delete|remove-association") = FALSE.
  2045. [07/10/12 04:03:08.704]:ADTRACE PT: (if-operation equal "status") = TRUE.
  2046. [07/10/12 04:03:08.704]:ADTRACE PT: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  2047. [07/10/12 04:03:08.720]:ADTRACE PT: Rule rejected.
  2048. [07/10/12 04:03:08.720]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - update DirXMLAccounts attribute on regular operations'.
  2049. [07/10/12 04:03:08.720]:ADTRACE PT: (if-op-property 'AccountTracking-Operation' not-available) = TRUE.
  2050. [07/10/12 04:03:08.720]:ADTRACE PT: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  2051. [07/10/12 04:03:08.720]:ADTRACE PT: (if-operation equal "status") = TRUE.
  2052. [07/10/12 04:03:08.720]:ADTRACE PT: (if-xpath true "./@level='success' or ./@level='warning'") = TRUE.
  2053. [07/10/12 04:03:08.720]:ADTRACE PT: (if-op-property 'AccountTracking-Operation' available) = FALSE.
  2054. [07/10/12 04:03:08.720]:ADTRACE PT: Rule rejected.
  2055. [07/10/12 04:03:08.720]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - update DirXMLAccounts attribute on mapped operations'.
  2056. [07/10/12 04:03:08.720]:ADTRACE PT: (if-xpath true "operation-data/account-tracking-operation") = FALSE.
  2057. [07/10/12 04:03:08.720]:ADTRACE PT: (if-xpath true "operation-data/account-tracking-operation") = FALSE.
  2058. [07/10/12 04:03:08.720]:ADTRACE PT: Rule rejected.
  2059. [07/10/12 04:03:08.720]:ADTRACE PT:Policy returned:
  2060. [07/10/12 04:03:08.720]:ADTRACE PT:
  2061. <nds dtdversion="2.2">
  2062. <source>
  2063. <product version="4.0.1.0">DirXML</product>
  2064. <contact>Novell, Inc.</contact>
  2065. </source>
  2066. <input>
  2067. <status level="success" type="heartbeat"/>
  2068. </input>
  2069. </nds>
  2070. [07/10/12 04:03:08.720]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-itp-SubscriberUserAdd%-C.
  2071. [07/10/12 04:03:08.720]:ADTRACE PT: Applying to status #1.
  2072. [07/10/12 04:03:08.720]:ADTRACE PT: Evaluating selection criteria for rule 'Populate DirXML-ADContext on initial user add'.
  2073. [07/10/12 04:03:08.720]:ADTRACE PT: (if-operation equal "add-association") = FALSE.
  2074. [07/10/12 04:03:08.720]:ADTRACE PT: Rule rejected.
  2075. [07/10/12 04:03:08.720]:ADTRACE PT:Policy returned:
  2076. [07/10/12 04:03:08.720]:ADTRACE PT:
  2077. <nds dtdversion="2.2">
  2078. <source>
  2079. <product version="4.0.1.0">DirXML</product>
  2080. <contact>Novell, Inc.</contact>
  2081. </source>
  2082. <input>
  2083. <status level="success" type="heartbeat"/>
  2084. </input>
  2085. </nds>
  2086. [07/10/12 04:03:08.720]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-itp-FormatConversions%-C.
  2087. [07/10/12 04:03:08.720]:ADTRACE PT: Applying to status #1.
  2088. [07/10/12 04:03:08.720]:ADTRACE PT: Evaluating selection criteria for rule 'streetAddress: Convert CR-LF to LF'.
  2089. [07/10/12 04:03:08.720]:ADTRACE PT: Rule selected.
  2090. [07/10/12 04:03:08.720]:ADTRACE PT: Applying rule 'streetAddress: Convert CR-LF to LF'.
  2091. [07/10/12 04:03:08.720]:ADTRACE PT: Action: do-reformat-op-attr("streetAddress",token-replace-all("\r\n","\r",token-local-variable("current-value"))).
  2092. [07/10/12 04:03:08.720]:ADTRACE PT: Evaluating selection criteria for rule 'logonHours: Convert to Login Allowed Time Map form'.
  2093. [07/10/12 04:03:08.720]:ADTRACE PT: Rule selected.
  2094. [07/10/12 04:03:08.720]:ADTRACE PT: Applying rule 'logonHours: Convert to Login Allowed Time Map form'.
  2095. [07/10/12 04:03:08.720]:ADTRACE PT: Action: do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2eDir($current-value)")).
  2096. [07/10/12 04:03:08.720]:ADTRACE PT: Evaluating selection criteria for rule 'accountExpires: Convert to Identity Vault time format'.
  2097. [07/10/12 04:03:08.720]:ADTRACE PT: Rule selected.
  2098. [07/10/12 04:03:08.720]:ADTRACE PT: Applying rule 'accountExpires: Convert to Identity Vault time format'.
  2099. [07/10/12 04:03:08.720]:ADTRACE PT: Action: do-reformat-op-attr("accountExpires",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
  2100. [07/10/12 04:03:08.720]:ADTRACE PT: Evaluating selection criteria for rule 'lockoutTime: Convert to Identity Vault time format'.
  2101. [07/10/12 04:03:08.720]:ADTRACE PT: Rule selected.
  2102. [07/10/12 04:03:08.720]:ADTRACE PT: Applying rule 'lockoutTime: Convert to Identity Vault time format'.
  2103. [07/10/12 04:03:08.720]:ADTRACE PT: Action: do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
  2104. [07/10/12 04:03:08.720]:ADTRACE PT:Policy returned:
  2105. [07/10/12 04:03:08.720]:ADTRACE PT:
  2106. <nds dtdversion="2.2">
  2107. <source>
  2108. <product version="4.0.1.0">DirXML</product>
  2109. <contact>Novell, Inc.</contact>
  2110. </source>
  2111. <input>
  2112. <status level="success" type="heartbeat"/>
  2113. </input>
  2114. </nds>
  2115. [07/10/12 04:03:08.720]:ADTRACE PT:Applying policy: %+C%14CNOVLDATACOLL-itp-DataCollectionQuerySupport%-C.
  2116. [07/10/12 04:03:08.720]:ADTRACE PT: Applying to status #1.
  2117. [07/10/12 04:03:08.720]:ADTRACE PT: Evaluating selection criteria for rule 'Rename @association-ref to @association and change @type from "dn" to "{dn}"'.
  2118. [07/10/12 04:03:08.720]:ADTRACE PT: (if-operation equal "instance") = FALSE.
  2119. [07/10/12 04:03:08.720]:ADTRACE PT: Rule rejected.
  2120. [07/10/12 04:03:08.720]:ADTRACE PT:Policy returned:
  2121. [07/10/12 04:03:08.720]:ADTRACE PT:
  2122. <nds dtdversion="2.2">
  2123. <source>
  2124. <product version="4.0.1.0">DirXML</product>
  2125. <contact>Novell, Inc.</contact>
  2126. </source>
  2127. <input>
  2128. <status level="success" type="heartbeat"/>
  2129. </input>
  2130. </nds>
  2131. [07/10/12 04:03:08.720]:ADTRACE PT:Applying policy: %+C%14CNOVLADENTEX-itp-EntitlementsImpl%-C.
  2132. [07/10/12 04:03:08.720]:ADTRACE PT: Applying to status #1.
  2133. [07/10/12 04:03:08.720]:ADTRACE PT: Evaluating selection criteria for rule 'Intercept ADDomain (tagged identity query) query response'.
  2134. [07/10/12 04:03:08.736]:ADTRACE PT: (if-operation equal "instance") = FALSE.
  2135. [07/10/12 04:03:08.736]:ADTRACE PT: Rule rejected.
  2136. [07/10/12 04:03:08.736]:ADTRACE PT: Evaluating selection criteria for rule 'Intercept ADDomain (tagged identity query) query status'.
  2137. [07/10/12 04:03:08.736]:ADTRACE PT: (if-xpath true "../status[@event-id='query-driver-ident']/operation-data/@UserAccountEntitlementQuery") = FALSE.
  2138. [07/10/12 04:03:08.736]:ADTRACE PT: Rule rejected.
  2139. [07/10/12 04:03:08.736]:ADTRACE PT: Evaluating selection criteria for rule 'Check target of add-association for group membership entitlements'.
  2140. [07/10/12 04:03:08.736]:ADTRACE PT: (if-global-variable 'drv.entitlement.Group' equal "true") = TRUE.
  2141. [07/10/12 04:03:08.736]:ADTRACE PT: (if-operation equal "add-association") = FALSE.
  2142. [07/10/12 04:03:08.736]:ADTRACE PT: Rule rejected.
  2143. [07/10/12 04:03:08.736]:ADTRACE PT: Evaluating selection criteria for rule 'Check target of add-association for Exchange mailbox entitlements'.
  2144. [07/10/12 04:03:08.736]:ADTRACE PT: (if-global-variable 'drv.exchMailboxMethod' equal "entitlement") = FALSE.
  2145. [07/10/12 04:03:08.736]:ADTRACE PT: Rule rejected.
  2146. [07/10/12 04:03:08.736]:ADTRACE PT:Policy returned:
  2147. [07/10/12 04:03:08.736]:ADTRACE PT:
  2148. <nds dtdversion="2.2">
  2149. <source>
  2150. <product version="4.0.1.0">DirXML</product>
  2151. <contact>Novell, Inc.</contact>
  2152. </source>
  2153. <input>
  2154. <status level="success" type="heartbeat"/>
  2155. </input>
  2156. </nds>
  2157. [07/10/12 04:03:08.736]:ADTRACE PT:Applying policy: %+C%14CNOVLPWDSYNC-itp-EmailOnFailedPwdSub%-C.
  2158. [07/10/12 04:03:08.736]:ADTRACE PT: Applying to status #1.
  2159. [07/10/12 04:03:08.736]:ADTRACE PT: Evaluating selection criteria for rule 'Send e-mail on a failure when subscribing to passwords'.
  2160. [07/10/12 04:03:08.736]:ADTRACE PT: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  2161. [07/10/12 04:03:08.736]:ADTRACE PT: (if-operation equal "status") = TRUE.
  2162. [07/10/12 04:03:08.736]:ADTRACE PT: (if-xpath true "self::status[@level != 'success'][text() != '']/operation-data/password-subscribe-status/association[text() != '']") = FALSE.
  2163. [07/10/12 04:03:08.736]:ADTRACE PT: Rule rejected.
  2164. [07/10/12 04:03:08.736]:ADTRACE PT: Evaluating selection criteria for rule 'Send e-mail on failure to reset connected system password using the Identity Vault password'.
  2165. [07/10/12 04:03:08.736]:ADTRACE PT: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  2166. [07/10/12 04:03:08.736]:ADTRACE PT: (if-operation equal "status") = TRUE.
  2167. [07/10/12 04:03:08.736]:ADTRACE PT: (if-xpath true "self::status[@level != 'success']/operation-data/password-reset-status") = FALSE.
  2168. [07/10/12 04:03:08.736]:ADTRACE PT: Rule rejected.
  2169. [07/10/12 04:03:08.736]:ADTRACE PT:Policy returned:
  2170. [07/10/12 04:03:08.736]:ADTRACE PT:
  2171. <nds dtdversion="2.2">
  2172. <source>
  2173. <product version="4.0.1.0">DirXML</product>
  2174. <contact>Novell, Inc.</contact>
  2175. </source>
  2176. <input>
  2177. <status level="success" type="heartbeat"/>
  2178. </input>
  2179. </nds>
  2180. [07/10/12 04:03:08.736]:ADTRACE PT:Applying schema mapping policies to input.
  2181. [07/10/12 04:03:08.736]:ADTRACE PT:Applying policy: %+C%14CNOVLDATACOLL-smp-SkipSchemaMapping%-C.
  2182. [07/10/12 04:03:08.736]:ADTRACE PT: Applying to status #1.
  2183. [07/10/12 04:03:08.736]:ADTRACE PT: Evaluating selection criteria for rule 'skip'.
  2184. [07/10/12 04:03:08.736]:ADTRACE PT: (if-operation equal "instance") = FALSE.
  2185. [07/10/12 04:03:08.736]:ADTRACE PT: Rule rejected.
  2186. [07/10/12 04:03:08.736]:ADTRACE PT: Evaluating selection criteria for rule 'restore'.
  2187. [07/10/12 04:03:08.736]:ADTRACE PT: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  2188. [07/10/12 04:03:08.736]:ADTRACE PT: Rule rejected.
  2189. [07/10/12 04:03:08.736]:ADTRACE PT:Policy returned:
  2190. [07/10/12 04:03:08.736]:ADTRACE PT:
  2191. <nds dtdversion="2.2">
  2192. <source>
  2193. <product version="4.0.1.0">DirXML</product>
  2194. <contact>Novell, Inc.</contact>
  2195. </source>
  2196. <input>
  2197. <status level="success" type="heartbeat"/>
  2198. </input>
  2199. </nds>
  2200. [07/10/12 04:03:08.736]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-smp%-C.
  2201. [07/10/12 04:03:08.736]:ADTRACE PT:Applying policy: %+C%14CNOVLDATACOLL-smp-SkipSchemaMapping%-C.
  2202. [07/10/12 04:03:08.736]:ADTRACE PT: Applying to status #1.
  2203. [07/10/12 04:03:08.736]:ADTRACE PT: Evaluating selection criteria for rule 'skip'.
  2204. [07/10/12 04:03:08.736]:ADTRACE PT: (if-operation equal "instance") = FALSE.
  2205. [07/10/12 04:03:08.736]:ADTRACE PT: Rule rejected.
  2206. [07/10/12 04:03:08.736]:ADTRACE PT: Evaluating selection criteria for rule 'restore'.
  2207. [07/10/12 04:03:08.736]:ADTRACE PT: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  2208. [07/10/12 04:03:08.736]:ADTRACE PT: Rule rejected.
  2209. [07/10/12 04:03:08.736]:ADTRACE PT:Policy returned:
  2210. [07/10/12 04:03:08.736]:ADTRACE PT:
  2211. <nds dtdversion="2.2">
  2212. <source>
  2213. <product version="4.0.1.0">DirXML</product>
  2214. <contact>Novell, Inc.</contact>
  2215. </source>
  2216. <input>
  2217. <status level="success" type="heartbeat"/>
  2218. </input>
  2219. </nds>
  2220. [07/10/12 04:03:08.751]:ADTRACE PT:Resolving association references.
  2221. [07/10/12 04:03:08.751]:ADTRACE PT:Applying event transformation policies.
  2222. [07/10/12 04:03:08.751]:ADTRACE PT:Applying policy: %+C%14CNOVLADENTEX-pub-etp-EntitlementsImpl%-C.
  2223. [07/10/12 04:03:08.751]:ADTRACE PT: Applying to status #1.
  2224. [07/10/12 04:03:08.751]:ADTRACE PT: Evaluating selection criteria for rule 'Disallow user account delete when using entitlements'.
  2225. [07/10/12 04:03:08.751]:ADTRACE PT: (if-operation equal "delete") = FALSE.
  2226. [07/10/12 04:03:08.751]:ADTRACE PT: Rule rejected.
  2227. [07/10/12 04:03:08.751]:ADTRACE PT: Evaluating selection criteria for rule 'Strip Login Disabled from operation (Disable Option)'.
  2228. [07/10/12 04:03:08.751]:ADTRACE PT: (if-global-variable 'drv.entitlement.UserAccount' equal "true") = TRUE.
  2229. [07/10/12 04:03:08.751]:ADTRACE PT: (if-global-variable 'drv.entitlement.remove' equal "disable") = TRUE.
  2230. [07/10/12 04:03:08.751]:ADTRACE PT: (if-class-name equal "User") = FALSE.
  2231. [07/10/12 04:03:08.751]:ADTRACE PT: Rule rejected.
  2232. [07/10/12 04:03:08.751]:ADTRACE PT:Policy returned:
  2233. [07/10/12 04:03:08.751]:ADTRACE PT:
  2234. <nds dtdversion="2.2">
  2235. <source>
  2236. <product version="4.0.1.0">DirXML</product>
  2237. <contact>Novell, Inc.</contact>
  2238. </source>
  2239. <input>
  2240. <status level="success" type="heartbeat"/>
  2241. </input>
  2242. </nds>
  2243. [07/10/12 04:03:08.751]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-pub-etp-HandleMovesAndRenames%-C.
  2244. [07/10/12 04:03:08.751]:ADTRACE PT: Applying to status #1.
  2245. [07/10/12 04:03:08.751]:ADTRACE PT: Evaluating selection criteria for rule 'break if not a move or rename'.
  2246. [07/10/12 04:03:08.751]:ADTRACE PT: (if-operation not-match "move|rename") = TRUE.
  2247. [07/10/12 04:03:08.751]:ADTRACE PT: Rule selected.
  2248. [07/10/12 04:03:08.751]:ADTRACE PT: Applying rule 'break if not a move or rename'.
  2249. [07/10/12 04:03:08.751]:ADTRACE PT: Action: do-break().
  2250. [07/10/12 04:03:08.751]:ADTRACE PT:Policy returned:
  2251. [07/10/12 04:03:08.751]:ADTRACE PT:
  2252. <nds dtdversion="2.2">
  2253. <source>
  2254. <product version="4.0.1.0">DirXML</product>
  2255. <contact>Novell, Inc.</contact>
  2256. </source>
  2257. <input>
  2258. <status level="success" type="heartbeat"/>
  2259. </input>
  2260. </nds>
  2261. [07/10/12 04:03:08.751]:ADTRACE PT:Applying publisher filter.
  2262. [07/10/12 04:03:08.751]:ADTRACE PT:Publisher processing status for .
  2263. [07/10/12 04:03:08.751]:ADTRACE PT:Applying command transformation policies.
  2264. [07/10/12 04:03:08.751]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-pub-ctp-UserNameMap%-C.
  2265. [07/10/12 04:03:08.751]:ADTRACE PT: Applying to status #1.
  2266. [07/10/12 04:03:08.751]:ADTRACE PT: Evaluating selection criteria for rule 'consider user objects when name mapping is enabled'.
  2267. [07/10/12 04:03:08.751]:ADTRACE PT: (if-class-name not-equal "User") = TRUE.
  2268. [07/10/12 04:03:08.751]:ADTRACE PT: Rule selected.
  2269. [07/10/12 04:03:08.751]:ADTRACE PT: Applying rule 'consider user objects when name mapping is enabled'.
  2270. [07/10/12 04:03:08.751]:ADTRACE PT: Action: do-break().
  2271. [07/10/12 04:03:08.751]:ADTRACE PT:Policy returned:
  2272. [07/10/12 04:03:08.751]:ADTRACE PT:
  2273. <nds dtdversion="2.2">
  2274. <source>
  2275. <product version="4.0.1.0">DirXML</product>
  2276. <contact>Novell, Inc.</contact>
  2277. </source>
  2278. <input>
  2279. <status level="success" type="heartbeat"/>
  2280. </input>
  2281. </nds>
  2282. [07/10/12 04:03:08.751]:ADTRACE PT:Applying policy: %+C%14CNOVLPWDSYNC-pub-ctp-DefaultPwd%-C.
  2283. [07/10/12 04:03:08.751]:ADTRACE PT: Applying to status #1.
  2284. [07/10/12 04:03:08.751]:ADTRACE PT: Evaluating selection criteria for rule 'On User add, provide default password of @Dirxml1 if no password exists'.
  2285. [07/10/12 04:03:08.751]:ADTRACE PT: (if-operation equal "add") = FALSE.
  2286. [07/10/12 04:03:08.751]:ADTRACE PT: Rule rejected.
  2287. [07/10/12 04:03:08.751]:ADTRACE PT:Policy returned:
  2288. [07/10/12 04:03:08.751]:ADTRACE PT:
  2289. <nds dtdversion="2.2">
  2290. <source>
  2291. <product version="4.0.1.0">DirXML</product>
  2292. <contact>Novell, Inc.</contact>
  2293. </source>
  2294. <input>
  2295. <status level="success" type="heartbeat"/>
  2296. </input>
  2297. </nds>
  2298. [07/10/12 04:03:08.767]:ADTRACE PT:Applying policy: %+C%14CNOVLPWDSYNC-pub-ctp-CheckPwdGCV%-C.
  2299. [07/10/12 04:03:08.767]:ADTRACE PT: Applying to status #1.
  2300. [07/10/12 04:03:08.767]:ADTRACE PT: Evaluating selection criteria for rule 'Block publishing passwords to the Identity Vault when adding an object'.
  2301. [07/10/12 04:03:08.767]:ADTRACE PT: (if-global-variable 'enable-password-publish' equal "false") = FALSE.
  2302. [07/10/12 04:03:08.767]:ADTRACE PT: Rule rejected.
  2303. [07/10/12 04:03:08.767]:ADTRACE PT: Evaluating selection criteria for rule 'Block sending modify-password changes to the Identity Vault'.
  2304. [07/10/12 04:03:08.767]:ADTRACE PT: (if-global-variable 'enable-password-publish' equal "false") = FALSE.
  2305. [07/10/12 04:03:08.767]:ADTRACE PT: Rule rejected.
  2306. [07/10/12 04:03:08.767]:ADTRACE PT:Policy returned:
  2307. [07/10/12 04:03:08.767]:ADTRACE PT:
  2308. <nds dtdversion="2.2">
  2309. <source>
  2310. <product version="4.0.1.0">DirXML</product>
  2311. <contact>Novell, Inc.</contact>
  2312. </source>
  2313. <input>
  2314. <status level="success" type="heartbeat"/>
  2315. </input>
  2316. </nds>
  2317. [07/10/12 04:03:08.767]:ADTRACE PT:Applying policy: %+C%14CNOVLPWDSYNC-pub-ctp-PublishDistPwd%-C.
  2318. [07/10/12 04:03:08.767]:ADTRACE PT: Applying to status #1.
  2319. [07/10/12 04:03:08.767]:ADTRACE PT: Evaluating selection criteria for rule 'Add nspmDistributionAttribute attribute to add operation'.
  2320. [07/10/12 04:03:08.767]:ADTRACE PT: (if-global-variable 'publish-password-to-dp' equal "true") = FALSE.
  2321. [07/10/12 04:03:08.767]:ADTRACE PT: Rule rejected.
  2322. [07/10/12 04:03:08.767]:ADTRACE PT: Evaluating selection criteria for rule 'Change modify-password operations to a modify'.
  2323. [07/10/12 04:03:08.767]:ADTRACE PT: (if-global-variable 'publish-password-to-dp' equal "true") = FALSE.
  2324. [07/10/12 04:03:08.767]:ADTRACE PT: Rule rejected.
  2325. [07/10/12 04:03:08.767]:ADTRACE PT:Policy returned:
  2326. [07/10/12 04:03:08.767]:ADTRACE PT:
  2327. <nds dtdversion="2.2">
  2328. <source>
  2329. <product version="4.0.1.0">DirXML</product>
  2330. <contact>Novell, Inc.</contact>
  2331. </source>
  2332. <input>
  2333. <status level="success" type="heartbeat"/>
  2334. </input>
  2335. </nds>
  2336. [07/10/12 04:03:08.767]:ADTRACE PT:Applying policy: %+C%14CNOVLPWDSYNC-pub-ctp-PublishNDSPwd%-C.
  2337. [07/10/12 04:03:08.767]:ADTRACE PT: Applying to status #1.
  2338. [07/10/12 04:03:08.767]:ADTRACE PT: Evaluating selection criteria for rule 'Block publishing passwords to eDirectory password'.
  2339. [07/10/12 04:03:08.767]:ADTRACE PT: (if-global-variable 'publish-password-to-nds' equal "false") = FALSE.
  2340. [07/10/12 04:03:08.767]:ADTRACE PT: Rule rejected.
  2341. [07/10/12 04:03:08.767]:ADTRACE PT: Evaluating selection criteria for rule 'Block sending modify-password changes to the eDirectory password'.
  2342. [07/10/12 04:03:08.767]:ADTRACE PT: (if-global-variable 'publish-password-to-nds' equal "false") = FALSE.
  2343. [07/10/12 04:03:08.767]:ADTRACE PT: Rule rejected.
  2344. [07/10/12 04:03:08.767]:ADTRACE PT:Policy returned:
  2345. [07/10/12 04:03:08.767]:ADTRACE PT:
  2346. <nds dtdversion="2.2">
  2347. <source>
  2348. <product version="4.0.1.0">DirXML</product>
  2349. <contact>Novell, Inc.</contact>
  2350. </source>
  2351. <input>
  2352. <status level="success" type="heartbeat"/>
  2353. </input>
  2354. </nds>
  2355. [07/10/12 04:03:08.767]:ADTRACE PT:Applying policy: %+C%14CNOVLPWDSYNC-pub-ctp-AddPwdPayload%-C.
  2356. [07/10/12 04:03:08.767]:ADTRACE PT: Applying to status #1.
  2357. [07/10/12 04:03:08.767]:ADTRACE PT: Evaluating selection criteria for rule 'Add operation-data element to password operations'.
  2358. [07/10/12 04:03:08.767]:ADTRACE PT: (if-operation equal "add") = FALSE.
  2359. [07/10/12 04:03:08.767]:ADTRACE PT: (if-operation equal "add") = FALSE.
  2360. [07/10/12 04:03:08.767]:ADTRACE PT: (if-operation equal "modify-password") = FALSE.
  2361. [07/10/12 04:03:08.767]:ADTRACE PT: (if-operation equal "modify") = FALSE.
  2362. [07/10/12 04:03:08.767]:ADTRACE PT: Rule rejected.
  2363. [07/10/12 04:03:08.767]:ADTRACE PT: Evaluating selection criteria for rule 'Add payload data to password operations'.
  2364. [07/10/12 04:03:08.767]:ADTRACE PT: (if-operation equal "add") = FALSE.
  2365. [07/10/12 04:03:08.767]:ADTRACE PT: (if-operation equal "add") = FALSE.
  2366. [07/10/12 04:03:08.767]:ADTRACE PT: (if-operation equal "modify-password") = FALSE.
  2367. [07/10/12 04:03:08.767]:ADTRACE PT: (if-operation equal "modify") = FALSE.
  2368. [07/10/12 04:03:08.767]:ADTRACE PT: Rule rejected.
  2369. [07/10/12 04:03:08.767]:ADTRACE PT:Policy returned:
  2370. [07/10/12 04:03:08.767]:ADTRACE PT:
  2371. <nds dtdversion="2.2">
  2372. <source>
  2373. <product version="4.0.1.0">DirXML</product>
  2374. <contact>Novell, Inc.</contact>
  2375. </source>
  2376. <input>
  2377. <status level="success" type="heartbeat"/>
  2378. </input>
  2379. </nds>
  2380. [07/10/12 04:03:08.767]:ADTRACE PT:Applying policy: %+C%14CNOVLATRKBASE-pub-ctp-WriteAccountsOnAdds%-C.
  2381. [07/10/12 04:03:08.767]:ADTRACE PT: Applying to status #1.
  2382. [07/10/12 04:03:08.767]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - disregard policy if disabled'.
  2383. [07/10/12 04:03:08.767]:ADTRACE PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  2384. [07/10/12 04:03:08.767]:ADTRACE PT: Rule rejected.
  2385. [07/10/12 04:03:08.783]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - on add operation add Dirxml-Accounts'.
  2386. [07/10/12 04:03:08.783]:ADTRACE PT: (if-operation equal "add") = FALSE.
  2387. [07/10/12 04:03:08.783]:ADTRACE PT: Rule rejected.
  2388. [07/10/12 04:03:08.783]:ADTRACE PT:Policy returned:
  2389. [07/10/12 04:03:08.783]:ADTRACE PT:
  2390. <nds dtdversion="2.2">
  2391. <source>
  2392. <product version="4.0.1.0">DirXML</product>
  2393. <contact>Novell, Inc.</contact>
  2394. </source>
  2395. <input>
  2396. <status level="success" type="heartbeat"/>
  2397. </input>
  2398. </nds>
  2399. [07/10/12 04:03:08.783]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-pub-ctp%-C.
  2400. [07/10/12 04:03:08.783]:ADTRACE PT: Applying to status #1.
  2401. [07/10/12 04:03:08.783]:ADTRACE PT: Evaluating selection criteria for rule 'set cached context value on merge'.
  2402. [07/10/12 04:03:08.783]:ADTRACE PT: (if-operation equal "modify") = FALSE.
  2403. [07/10/12 04:03:08.783]:ADTRACE PT: Rule rejected.
  2404. [07/10/12 04:03:08.783]:ADTRACE PT: Evaluating selection criteria for rule 'remove managed attributes when object disassociated'.
  2405. [07/10/12 04:03:08.783]:ADTRACE PT: (if-operation equal "remove-association") = FALSE.
  2406. [07/10/12 04:03:08.783]:ADTRACE PT: Rule rejected.
  2407. [07/10/12 04:03:08.783]:ADTRACE PT: Evaluating selection criteria for rule 'Prevent unassociated users from being removed from groups'.
  2408. [07/10/12 04:03:08.783]:ADTRACE PT: (if-operation equal "modify") = FALSE.
  2409. [07/10/12 04:03:08.783]:ADTRACE PT: Rule rejected.
  2410. [07/10/12 04:03:08.783]:ADTRACE PT: Evaluating selection criteria for rule 'Set Equivalent To Me when group members change'.
  2411. [07/10/12 04:03:08.783]:ADTRACE PT: (if-class-name equal "Group") = FALSE.
  2412. [07/10/12 04:03:08.783]:ADTRACE PT: Rule rejected.
  2413. [07/10/12 04:03:08.783]:ADTRACE PT:Policy returned:
  2414. [07/10/12 04:03:08.783]:ADTRACE PT:
  2415. <nds dtdversion="2.2">
  2416. <source>
  2417. <product version="4.0.1.0">DirXML</product>
  2418. <contact>Novell, Inc.</contact>
  2419. </source>
  2420. <input>
  2421. <status level="success" type="heartbeat"/>
  2422. </input>
  2423. </nds>
  2424. [07/10/12 04:03:08.783]:ADTRACE PT:Applying XSLT policy: %+C%14CNOVLADDCFG-pub-cts%-C.
  2425. [07/10/12 04:03:08.783]:ADTRACE PT:Policy returned:
  2426. [07/10/12 04:03:08.783]:ADTRACE PT:
  2427. <nds dtdversion="2.2">
  2428. <source>
  2429. <product version="4.0.1.0">DirXML</product>
  2430. <contact>Novell, Inc.</contact>
  2431. </source>
  2432. <input>
  2433. <status level="success" type="heartbeat"/>
  2434. </input>
  2435. </nds>
  2436. [07/10/12 04:03:08.783]:ADTRACE PT:Filtering out notification-only attributes.
  2437. [07/10/12 04:03:08.783]:ADTRACE PT:Pumping XDS to eDirectory.
  2438. [07/10/12 04:03:08.783]:ADTRACE PT:Performing operation status for .
  2439. [07/10/12 04:03:08.783]:ADTRACE PT:
  2440. DirXML Log Event -------------------
  2441. Driver: \xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver
  2442. Channel: Publisher
  2443. Status: Success
  2444. [07/10/12 04:03:08.783]:ADTRACE PT:Fixing up association references.
  2445. [07/10/12 04:03:08.783]:ADTRACE PT:Applying schema mapping policies to output.
  2446. [07/10/12 04:03:08.783]:ADTRACE PT:Applying policy: %+C%14CNOVLDATACOLL-smp-SkipSchemaMapping%-C.
  2447. [07/10/12 04:03:08.783]:ADTRACE PT: Applying to status #1.
  2448. [07/10/12 04:03:08.783]:ADTRACE PT: Evaluating selection criteria for rule 'skip'.
  2449. [07/10/12 04:03:08.783]:ADTRACE PT: (if-operation equal "instance") = FALSE.
  2450. [07/10/12 04:03:08.783]:ADTRACE PT: Rule rejected.
  2451. [07/10/12 04:03:08.783]:ADTRACE PT: Evaluating selection criteria for rule 'restore'.
  2452. [07/10/12 04:03:08.783]:ADTRACE PT: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  2453. [07/10/12 04:03:08.783]:ADTRACE PT: Rule rejected.
  2454. [07/10/12 04:03:08.783]:ADTRACE PT:Policy returned:
  2455. [07/10/12 04:03:08.783]:ADTRACE PT:
  2456. <nds dtdversion="4.0" ndsversion="8.x">
  2457. <source>
  2458. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  2459. <contact>Novell, Inc.</contact>
  2460. </source>
  2461. <output>
  2462. <status event-id="0" level="success"></status>
  2463. </output>
  2464. </nds>
  2465. [07/10/12 04:03:08.783]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-smp%-C.
  2466. [07/10/12 04:03:08.783]:ADTRACE PT:Applying policy: %+C%14CNOVLDATACOLL-smp-SkipSchemaMapping%-C.
  2467. [07/10/12 04:03:08.783]:ADTRACE PT: Applying to status #1.
  2468. [07/10/12 04:03:08.783]:ADTRACE PT: Evaluating selection criteria for rule 'skip'.
  2469. [07/10/12 04:03:08.783]:ADTRACE PT: (if-operation equal "instance") = FALSE.
  2470. [07/10/12 04:03:08.783]:ADTRACE PT: Rule rejected.
  2471. [07/10/12 04:03:08.783]:ADTRACE PT: Evaluating selection criteria for rule 'restore'.
  2472. [07/10/12 04:03:08.783]:ADTRACE PT: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  2473. [07/10/12 04:03:08.783]:ADTRACE PT: Rule rejected.
  2474. [07/10/12 04:03:08.783]:ADTRACE PT:Policy returned:
  2475. [07/10/12 04:03:08.798]:ADTRACE PT:
  2476. <nds dtdversion="4.0" ndsversion="8.x">
  2477. <source>
  2478. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  2479. <contact>Novell, Inc.</contact>
  2480. </source>
  2481. <output>
  2482. <status event-id="0" level="success"></status>
  2483. </output>
  2484. </nds>
  2485. [07/10/12 04:03:08.798]:ADTRACE PT:Applying output transformation policies.
  2486. [07/10/12 04:03:08.798]:ADTRACE PT:Applying policy: %+C%14CNOVLADENTEX-otp-EntitlementsImpl%-C.
  2487. [07/10/12 04:03:08.798]:ADTRACE PT: Applying to status #1.
  2488. [07/10/12 04:03:08.798]:ADTRACE PT: Evaluating selection criteria for rule 'Intercept outbound queries for ADDomain'.
  2489. [07/10/12 04:03:08.798]:ADTRACE PT: (if-class-name equal "ADDomain") = FALSE.
  2490. [07/10/12 04:03:08.798]:ADTRACE PT: Rule rejected.
  2491. [07/10/12 04:03:08.798]:ADTRACE PT:Policy returned:
  2492. [07/10/12 04:03:08.798]:ADTRACE PT:
  2493. <nds dtdversion="4.0" ndsversion="8.x">
  2494. <source>
  2495. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  2496. <contact>Novell, Inc.</contact>
  2497. </source>
  2498. <output>
  2499. <status event-id="0" level="success"></status>
  2500. </output>
  2501. </nds>
  2502. [07/10/12 04:03:08.798]:ADTRACE PT:Applying policy: %+C%14CNOVLADENTEX-otp-ExchangeMailboxPolicy%-C.
  2503. [07/10/12 04:03:08.798]:ADTRACE PT: Applying to status #1.
  2504. [07/10/12 04:03:08.798]:ADTRACE PT: Evaluating selection criteria for rule 'Exchange: Remove HomeMDB when disabled'.
  2505. [07/10/12 04:03:08.798]:ADTRACE PT: (if-global-variable 'drv.exchMailboxMethod' equal "disabled") = TRUE.
  2506. [07/10/12 04:03:08.798]:ADTRACE PT: Rule selected.
  2507. [07/10/12 04:03:08.798]:ADTRACE PT: Applying rule 'Exchange: Remove HomeMDB when disabled'.
  2508. [07/10/12 04:03:08.798]:ADTRACE PT: Action: do-strip-op-attr("homeMDB").
  2509. [07/10/12 04:03:08.798]:ADTRACE PT:Policy returned:
  2510. [07/10/12 04:03:08.798]:ADTRACE PT:
  2511. <nds dtdversion="4.0" ndsversion="8.x">
  2512. <source>
  2513. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  2514. <contact>Novell, Inc.</contact>
  2515. </source>
  2516. <output>
  2517. <status event-id="0" level="success"></status>
  2518. </output>
  2519. </nds>
  2520. [07/10/12 04:03:08.798]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-otp-FormatConversions%-C.
  2521. [07/10/12 04:03:08.798]:ADTRACE PT: Applying to status #1.
  2522. [07/10/12 04:03:08.798]:ADTRACE PT: Evaluating selection criteria for rule 'Street Address: Convert LF to CR-LF'.
  2523. [07/10/12 04:03:08.798]:ADTRACE PT: Rule selected.
  2524. [07/10/12 04:03:08.798]:ADTRACE PT: Applying rule 'Street Address: Convert LF to CR-LF'.
  2525. [07/10/12 04:03:08.798]:ADTRACE PT: Action: do-reformat-op-attr("streetAddress",token-replace-all("[^\r]\n","\r\n",token-local-variable("current-value"))).
  2526. [07/10/12 04:03:08.798]:ADTRACE PT: Evaluating selection criteria for rule 'logonHours: Convert to Active Directory form'.
  2527. [07/10/12 04:03:08.798]:ADTRACE PT: Rule selected.
  2528. [07/10/12 04:03:08.798]:ADTRACE PT: Applying rule 'logonHours: Convert to Active Directory form'.
  2529. [07/10/12 04:03:08.798]:ADTRACE PT: Action: do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2ADLenient($current-value)")).
  2530. [07/10/12 04:03:08.798]:ADTRACE PT: Evaluating selection criteria for rule 'accountExpires: Convert to Active Directory form'.
  2531. [07/10/12 04:03:08.798]:ADTRACE PT: (if-op-attr 'accountExpires' changing) = FALSE.
  2532. [07/10/12 04:03:08.798]:ADTRACE PT: Rule rejected.
  2533. [07/10/12 04:03:08.798]:ADTRACE PT: Evaluating selection criteria for rule 'lockoutTime: Convert to Active Directory form'.
  2534. [07/10/12 04:03:08.798]:ADTRACE PT: Rule selected.
  2535. [07/10/12 04:03:08.798]:ADTRACE PT: Applying rule 'lockoutTime: Convert to Active Directory form'.
  2536. [07/10/12 04:03:08.798]:ADTRACE PT: Action: do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateEpoch2FileTime($current-value)")).
  2537. [07/10/12 04:03:08.798]:ADTRACE PT: Evaluating selection criteria for rule 'Add: User - convert multi-valued Telephone to single value'.
  2538. [07/10/12 04:03:08.798]:ADTRACE PT: (if-operation equal "add") = FALSE.
  2539. [07/10/12 04:03:08.798]:ADTRACE PT: Rule rejected.
  2540. [07/10/12 04:03:08.798]:ADTRACE PT: Evaluating selection criteria for rule 'update Active Directory logon name'.
  2541. [07/10/12 04:03:08.798]:ADTRACE PT: (if-xpath true "self::status[@level = 'success']/operation-data/windows-2000-logon-name") = FALSE.
  2542. [07/10/12 04:03:08.798]:ADTRACE PT: Rule rejected.
  2543. [07/10/12 04:03:08.798]:ADTRACE PT:Policy returned:
  2544. [07/10/12 04:03:08.798]:ADTRACE PT:
  2545. <nds dtdversion="4.0" ndsversion="8.x">
  2546. <source>
  2547. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  2548. <contact>Novell, Inc.</contact>
  2549. </source>
  2550. <output>
  2551. <status event-id="0" level="success"></status>
  2552. </output>
  2553. </nds>
  2554. [07/10/12 04:03:08.798]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-otp-ExchangeEntitlementQuery%-C.
  2555. [07/10/12 04:03:08.798]:ADTRACE PT: Applying to status #1.
  2556. [07/10/12 04:03:08.798]:ADTRACE PT: Evaluating selection criteria for rule 'Add dest-dn to the Exchange Entitlement Query'.
  2557. [07/10/12 04:03:08.798]:ADTRACE PT: (if-operation equal "query") = FALSE.
  2558. [07/10/12 04:03:08.798]:ADTRACE PT: Rule rejected.
  2559. [07/10/12 04:03:08.798]:ADTRACE PT:Policy returned:
  2560. [07/10/12 04:03:08.814]:ADTRACE PT:
  2561. <nds dtdversion="4.0" ndsversion="8.x">
  2562. <source>
  2563. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  2564. <contact>Novell, Inc.</contact>
  2565. </source>
  2566. <output>
  2567. <status event-id="0" level="success"></status>
  2568. </output>
  2569. </nds>
  2570. [07/10/12 04:03:08.814]:ADTRACE PT:Applying policy: %+C%14CNOVLPWDSYNC-otp-EmailOnFailedPwdPub%-C.
  2571. [07/10/12 04:03:08.814]:ADTRACE PT: Applying to status #1.
  2572. [07/10/12 04:03:08.814]:ADTRACE PT: Evaluating selection criteria for rule 'Send e-mail for a failed publish password operation'.
  2573. [07/10/12 04:03:08.814]:ADTRACE PT: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  2574. [07/10/12 04:03:08.814]:ADTRACE PT: (if-operation equal "status") = TRUE.
  2575. [07/10/12 04:03:08.814]:ADTRACE PT: (if-xpath true "self::status[@level != 'success']/operation-data/password-publish-status") = FALSE.
  2576. [07/10/12 04:03:08.814]:ADTRACE PT: Rule rejected.
  2577. [07/10/12 04:03:08.814]:ADTRACE PT:Policy returned:
  2578. [07/10/12 04:03:08.814]:ADTRACE PT:
  2579. <nds dtdversion="4.0" ndsversion="8.x">
  2580. <source>
  2581. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  2582. <contact>Novell, Inc.</contact>
  2583. </source>
  2584. <output>
  2585. <status event-id="0" level="success"></status>
  2586. </output>
  2587. </nds>
  2588. [07/10/12 04:03:08.814]:ADTRACE PT:Applying policy: %+C%14CNOVLATRKBASE-otp-Subscribe%-C.
  2589. [07/10/12 04:03:08.814]:ADTRACE PT: Applying to status #1.
  2590. [07/10/12 04:03:08.814]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - Initialize Realm Mapping'.
  2591. [07/10/12 04:03:08.814]:ADTRACE PT: (if-global-variable 'drv.acctTrk.enable' equal "true") = TRUE.
  2592. [07/10/12 04:03:08.814]:ADTRACE PT: (if-global-variable 'drv.acctTrk.mode' equal "fanout") = FALSE.
  2593. [07/10/12 04:03:08.814]:ADTRACE PT: Rule rejected.
  2594. [07/10/12 04:03:08.814]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled or wrong object class'.
  2595. [07/10/12 04:03:08.814]:ADTRACE PT: Rule selected.
  2596. [07/10/12 04:03:08.814]:ADTRACE PT: Applying rule 'AccountTracking - disregard if disabled or wrong object class'.
  2597. [07/10/12 04:03:08.814]:ADTRACE PT: Action: do-if().
  2598. [07/10/12 04:03:08.814]:ADTRACE PT: Evaluating conditions.
  2599. [07/10/12 04:03:08.814]:ADTRACE PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  2600. [07/10/12 04:03:08.814]:ADTRACE PT: Performing else actions.
  2601. [07/10/12 04:03:08.814]:ADTRACE PT: Action: do-for-each(arg-node-set(token-global-variable("drv.acctTrk.objectClass"))).
  2602. [07/10/12 04:03:08.814]:ADTRACE PT: arg-node-set(token-global-variable("drv.acctTrk.objectClass"))
  2603. [07/10/12 04:03:08.814]:ADTRACE PT: token-global-variable("drv.acctTrk.objectClass")
  2604. [07/10/12 04:03:08.814]:ADTRACE PT: Token Value: {"user"}.
  2605. [07/10/12 04:03:08.814]:ADTRACE PT: Arg Value: {"user"}.
  2606. [07/10/12 04:03:08.814]:ADTRACE PT: Performing actions for local-variable(current-node) = "user".
  2607. [07/10/12 04:03:08.814]:ADTRACE PT: Action: do-if().
  2608. [07/10/12 04:03:08.814]:ADTRACE PT: Evaluating conditions.
  2609. [07/10/12 04:03:08.814]:ADTRACE PT: (if-class-name equal "$current-node$") = FALSE.
  2610. [07/10/12 04:03:08.814]:ADTRACE PT: Performing else actions.
  2611. [07/10/12 04:03:08.814]:ADTRACE PT: Action: do-if().
  2612. [07/10/12 04:03:08.814]:ADTRACE PT: Evaluating conditions.
  2613. [07/10/12 04:03:08.814]:ADTRACE PT: (if-local-variable 'pass' not-available) = TRUE.
  2614. [07/10/12 04:03:08.814]:ADTRACE PT: Performing if actions.
  2615. [07/10/12 04:03:08.814]:ADTRACE PT: Action: do-break().
  2616. [07/10/12 04:03:08.814]:ADTRACE PT:Policy returned:
  2617. [07/10/12 04:03:08.814]:ADTRACE PT:
  2618. <nds dtdversion="4.0" ndsversion="8.x">
  2619. <source>
  2620. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  2621. <contact>Novell, Inc.</contact>
  2622. </source>
  2623. <output>
  2624. <status event-id="0" level="success"></status>
  2625. </output>
  2626. </nds>
  2627. [07/10/12 04:03:08.814]:ADTRACE PT:
  2628. <nds dtdversion="4.0" ndsversion="8.x">
  2629. <source>
  2630. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  2631. <contact>Novell, Inc.</contact>
  2632. </source>
  2633. <output>
  2634. <status event-id="0" level="success"></status>
  2635. </output>
  2636. </nds>
  2637. [07/10/12 04:03:08.814]:ADTRACE PT:Remote Interface Driver: Sending...
  2638. [07/10/12 04:03:08.814]:ADTRACE PT:
  2639. <nds dtdversion="4.0" ndsversion="8.x">
  2640. <source>
  2641. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  2642. <contact>Novell, Inc.</contact>
  2643. </source>
  2644. <output>
  2645. <status event-id="0" level="success"></status>
  2646. </output>
  2647. </nds>
  2648. [07/10/12 04:03:08.814]:ADTRACE PT:Remote Interface Driver: Document sent.
  2649. [07/10/12 04:03:12.017]:ADTRACE ST:Start transaction.
  2650. [07/10/12 04:03:12.017]:ADTRACE ST:type(resync-entry)entry-id(34037) dn(\T=xxxxxIDM\O=xxxxx\OU=data\OU=users\CN=testuser1) class-id(-1) class-name(null)
  2651. [07/10/12 04:03:12.017]:ADTRACE ST:Processing events for transaction.
  2652. [07/10/12 04:03:12.017]:ADTRACE ST:
  2653. <nds dtdversion="4.0" ndsversion="8.x">
  2654. <source>
  2655. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  2656. <contact>Novell, Inc.</contact>
  2657. </source>
  2658. <input>
  2659. <sync cached-time="20120710110311.986Z" class-name="User" event-id="WINIDM-NDS#20120710110311#1#1:a69cee9c-7d7b-47df-812e-39a59945b0d4" qualified-src-dn="O=xxxxx\OU=data\OU=users\CN=testuser1" src-dn="\xxxxxIDM\xxxxx\data\users\testuser1" src-entry-id="34037" timestamp="0#0">
  2660. <association state="manual"></association>
  2661. </sync>
  2662. </input>
  2663. </nds>
  2664. [07/10/12 04:03:12.017]:ADTRACE ST:Applying event transformation policies.
  2665. [07/10/12 04:03:12.017]:ADTRACE ST:Applying policy: %+C%14CAD USER Policy%-C.
  2666. [07/10/12 04:03:12.017]:ADTRACE ST: Applying to sync #1.
  2667. [07/10/12 04:03:12.017]:ADTRACE ST:Policy returned:
  2668. [07/10/12 04:03:12.017]:ADTRACE ST:
  2669. <nds dtdversion="4.0" ndsversion="8.x">
  2670. <source>
  2671. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  2672. <contact>Novell, Inc.</contact>
  2673. </source>
  2674. <input>
  2675. <sync cached-time="20120710110311.986Z" class-name="User" event-id="WINIDM-NDS#20120710110311#1#1:a69cee9c-7d7b-47df-812e-39a59945b0d4" qualified-src-dn="O=xxxxx\OU=data\OU=users\CN=testuser1" src-dn="\xxxxxIDM\xxxxx\data\users\testuser1" src-entry-id="34037" timestamp="0#0">
  2676. <association state="manual"></association>
  2677. </sync>
  2678. </input>
  2679. </nds>
  2680. [07/10/12 04:03:12.017]:ADTRACE ST:Applying policy: %+C%14CADD New user to AD%-C.
  2681. [07/10/12 04:03:12.017]:ADTRACE ST: Applying to sync #1.
  2682. [07/10/12 04:03:12.017]:ADTRACE ST: Evaluating selection criteria for rule 'Add users to AD'.
  2683. [07/10/12 04:03:12.033]:ADTRACE ST: (if-class-name available) = TRUE.
  2684. [07/10/12 04:03:12.033]:ADTRACE ST: Rule selected.
  2685. [07/10/12 04:03:12.033]:ADTRACE ST: Applying rule 'Add users to AD'.
  2686. [07/10/12 04:03:12.033]:ADTRACE ST: Action: do-add-src-object(class-name="User",arg-dn("OU=users,OU=NOVELLUSER,DC=idm,DC=com")).
  2687. [07/10/12 04:03:12.033]:ADTRACE ST: arg-dn("OU=users,OU=NOVELLUSER,DC=idm,DC=com")
  2688. [07/10/12 04:03:12.033]:ADTRACE ST: token-text("OU=users,OU=NOVELLUSER,DC=idm,DC=com")
  2689. [07/10/12 04:03:12.033]:ADTRACE ST: Arg Value: "OU=users,OU=NOVELLUSER,DC=idm,DC=com".
  2690. [07/10/12 04:03:12.033]:ADTRACE ST: Direct command from policy
  2691. [07/10/12 04:03:12.033]:ADTRACE ST:
  2692. <nds dtdversion="4.0" ndsversion="8.x">
  2693. <source>
  2694. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  2695. <contact>Novell, Inc.</contact>
  2696. </source>
  2697. <input>
  2698. <add class-name="User" dest-dn="OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="WINIDM-NDS#20120710110311#1#1:a69cee9c-7d7b-47df-812e-39a59945b0d4"/>
  2699. </input>
  2700. </nds>
  2701. [07/10/12 04:03:12.033]:ADTRACE ST: Pumping XDS to eDirectory.
  2702. [07/10/12 04:03:12.033]:ADTRACE ST: Performing operation add for OU=users,OU=NOVELLUSER,DC=idm,DC=com.
  2703. [07/10/12 04:03:12.033]:ADTRACE ST: --JCLNT-- \xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver : Duplicating : context = 979763278, tempContext = 979763296
  2704. [07/10/12 04:03:12.033]:ADTRACE ST: Adding entry OU=users,OU=NOVELLUSER,DC=idm,DC=com.
  2705. [07/10/12 04:03:12.033]:ADTRACE ST: Creating RDN in context ..
  2706. [07/10/12 04:03:12.033]:ADTRACE ST: --JCLNT-- \xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver : Calling free on tempContext = 979763296
  2707. [07/10/12 04:03:12.376]:ADTRACE ST: Processing returned document.
  2708. [07/10/12 04:03:12.376]:ADTRACE ST: Processing operation <status> for .
  2709. [07/10/12 04:03:12.376]:ADTRACE ST:
  2710. DirXML Log Event -------------------
  2711. Driver: \xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver
  2712. Channel: Subscriber
  2713. Status: Error
  2714. Message: Code(-9010) An exception occurred: novell.jclient.JCException: createEntry -672 ERR_NO_ACCESS
  2715. [07/10/12 04:03:12.767]:ADTRACE ST: Direct command from policy result
  2716. [07/10/12 04:03:12.767]:ADTRACE ST:
  2717. <nds dtdversion="4.0" ndsversion="8.x">
  2718. <source>
  2719. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  2720. <contact>Novell, Inc.</contact>
  2721. </source>
  2722. <output>
  2723. <status event-id="WINIDM-NDS#20120710110311#1#1:a69cee9c-7d7b-47df-812e-39a59945b0d4" level="error">Code(-9010) An exception occurred: novell.jclient.JCException: createEntry -672 ERR_NO_ACCESS<application>DirXML</application>
  2724. <module>Active Directory Driver</module>
  2725. <object-dn></object-dn>
  2726. <component>Subscriber</component>
  2727. </status>
  2728. </output>
  2729. </nds>
  2730. [07/10/12 04:03:12.767]:ADTRACE ST:Policy returned:
  2731. [07/10/12 04:03:12.767]:ADTRACE ST:
  2732. <nds dtdversion="4.0" ndsversion="8.x">
  2733. <source>
  2734. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  2735. <contact>Novell, Inc.</contact>
  2736. </source>
  2737. <input>
  2738. <sync cached-time="20120710110311.986Z" class-name="User" event-id="WINIDM-NDS#20120710110311#1#1:a69cee9c-7d7b-47df-812e-39a59945b0d4" qualified-src-dn="O=xxxxx\OU=data\OU=users\CN=testuser1" src-dn="\xxxxxIDM\xxxxx\data\users\testuser1" src-entry-id="34037" timestamp="0#0">
  2739. <association state="manual"></association>
  2740. </sync>
  2741. </input>
  2742. </nds>
  2743. [07/10/12 04:03:12.767]:ADTRACE ST:Subscriber processing sync for \xxxxxIDM\xxxxx\data\users\testuser1.
  2744. [07/10/12 04:03:12.767]:ADTRACE ST:Reading relevant attributes from \xxxxxIDM\xxxxx\data\users\testuser1.
  2745. [07/10/12 04:03:12.767]:ADTRACE ST:
  2746. <nds dtdversion="4.0" ndsversion="8.x">
  2747. <source>
  2748. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  2749. <contact>Novell, Inc.</contact>
  2750. </source>
  2751. <input>
  2752. <query class-name="User" dest-dn="\xxxxxIDM\xxxxx\data\users\testuser1" dest-entry-id="34037" scope="entry">
  2753. <read-attr attr-name="CN"/>
  2754. <read-attr attr-name="Description"/>
  2755. <read-attr attr-name="DirXML-ADAliasName"/>
  2756. <read-attr attr-name="DirXML-EntitlementRef"/>
  2757. <read-attr attr-name="Facsimile Telephone Number"/>
  2758. <read-attr attr-name="Full Name"/>
  2759. <read-attr attr-name="Given Name"/>
  2760. <read-attr attr-name="Initials"/>
  2761. <read-attr attr-name="Internet EMail Address"/>
  2762. <read-attr attr-name="L"/>
  2763. <read-attr attr-name="Login Allowed Time Map"/>
  2764. <read-attr attr-name="Login Disabled"/>
  2765. <read-attr attr-name="Login Expiration Time"/>
  2766. <read-attr attr-name="nspmDistributionPassword"/>
  2767. <read-attr attr-name="Physical Delivery Office Name"/>
  2768. <read-attr attr-name="Postal Code"/>
  2769. <read-attr attr-name="Postal Office Box"/>
  2770. <read-attr attr-name="S"/>
  2771. <read-attr attr-name="SA"/>
  2772. <read-attr attr-name="Surname"/>
  2773. <read-attr attr-name="Telephone Number"/>
  2774. <read-attr attr-name="Title"/>
  2775. </query>
  2776. </input>
  2777. </nds>
  2778. [07/10/12 04:03:12.767]:ADTRACE ST:Pumping XDS to eDirectory.
  2779. [07/10/12 04:03:12.767]:ADTRACE ST:Performing operation query for \xxxxxIDM\xxxxx\data\users\testuser1.
  2780. [07/10/12 04:03:12.767]:ADTRACE ST:--JCLNT-- \xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver : Duplicating : context = 979763259, tempContext = 979763296
  2781. [07/10/12 04:03:12.767]:ADTRACE ST:Driver object has insufficient rights to read \xxxxxIDM\xxxxx\data\users\testuser1#CN.
  2782. [07/10/12 04:03:12.767]:ADTRACE ST:Driver object has insufficient rights to read \xxxxxIDM\xxxxx\data\users\testuser1#Full Name.
  2783. [07/10/12 04:03:12.767]:ADTRACE ST:--JCLNT-- \xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver : Calling free on tempContext = 979763296
  2784. [07/10/12 04:03:12.783]:ADTRACE ST:Read result:
  2785. [07/10/12 04:03:12.783]:ADTRACE ST:
  2786. <nds dtdversion="4.0" ndsversion="8.x">
  2787. <source>
  2788. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  2789. <contact>Novell, Inc.</contact>
  2790. </source>
  2791. <output>
  2792. <instance class-name="User" qualified-src-dn="O=xxxxx\OU=data\OU=users\CN=testuser1" src-dn="\xxxxxIDM\xxxxx\data\users\testuser1" src-entry-id="34037">
  2793. <association state="manual"></association>
  2794. <attr attr-name="Given Name">
  2795. <value timestamp="1341840499#5" type="string">test</value>
  2796. </attr>
  2797. <attr attr-name="Surname">
  2798. <value timestamp="1341840499#4" type="string">user1</value>
  2799. </attr>
  2800. </instance>
  2801. <status level="success"></status>
  2802. </output>
  2803. </nds>
  2804. [07/10/12 04:03:12.783]:ADTRACE ST:Synthetic add:
  2805. [07/10/12 04:03:12.783]:ADTRACE ST:
  2806. <nds dtdversion="4.0" ndsversion="8.x">
  2807. <source>
  2808. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  2809. <contact>Novell, Inc.</contact>
  2810. </source>
  2811. <output>
  2812. <add cached-time="20120710110311.986Z" class-name="User" event-id="WINIDM-NDS#20120710110311#1#1:a69cee9c-7d7b-47df-812e-39a59945b0d4" qualified-src-dn="O=xxxxx\OU=data\OU=users\CN=testuser1" src-dn="\xxxxxIDM\xxxxx\data\users\testuser1" src-entry-id="34037" timestamp="0#0">
  2813. <association state="manual"></association>
  2814. <add-attr attr-name="Given Name">
  2815. <value timestamp="1341840499#5" type="string">test</value>
  2816. </add-attr>
  2817. <add-attr attr-name="Surname">
  2818. <value timestamp="1341840499#4" type="string">user1</value>
  2819. </add-attr>
  2820. </add>
  2821. <status level="success"></status>
  2822. </output>
  2823. </nds>
  2824. [07/10/12 04:03:12.783]:ADTRACE ST:Applying object matching policies.
  2825. [07/10/12 04:03:12.783]:ADTRACE ST:Applying policy: %+C%14CNOVLADDCFG-sub-mp-Scoping%-C.
  2826. [07/10/12 04:03:12.783]:ADTRACE ST: Applying to add #1.
  2827. [07/10/12 04:03:12.783]:ADTRACE ST: Evaluating selection criteria for rule 'remember relative position in hierarchy'.
  2828. [07/10/12 04:03:12.783]:ADTRACE ST: (if-src-dn in-subtree "xxxxx\data\users\") = TRUE.
  2829. [07/10/12 04:03:12.783]:ADTRACE ST: (if-op-property 'attempt-to-match' not-equal "false") = TRUE.
  2830. [07/10/12 04:03:12.783]:ADTRACE ST: Rule selected.
  2831. [07/10/12 04:03:12.783]:ADTRACE ST: Applying rule 'remember relative position in hierarchy'.
  2832. [07/10/12 04:03:12.783]:ADTRACE ST: Action: do-set-op-property("unmatched-src-dn",token-unmatched-src-dn(convert="true")).
  2833. [07/10/12 04:03:12.783]:ADTRACE ST: arg-string(token-unmatched-src-dn(convert="true"))
  2834. [07/10/12 04:03:12.783]:ADTRACE ST: token-unmatched-src-dn(convert="true")
  2835. [07/10/12 04:03:12.783]:ADTRACE ST: Token Value: "CN=testuser1".
  2836. [07/10/12 04:03:12.783]:ADTRACE ST: Arg Value: "CN=testuser1".
  2837. [07/10/12 04:03:12.783]:ADTRACE ST: Action: do-set-op-property("attempt-to-match","true").
  2838. [07/10/12 04:03:12.783]:ADTRACE ST: arg-string("true")
  2839. [07/10/12 04:03:12.783]:ADTRACE ST: token-text("true")
  2840. [07/10/12 04:03:12.783]:ADTRACE ST: Arg Value: "true".
  2841. [07/10/12 04:03:12.783]:ADTRACE ST:Policy returned:
  2842. [07/10/12 04:03:12.783]:ADTRACE ST:
  2843. <nds dtdversion="4.0" ndsversion="8.x">
  2844. <source>
  2845. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  2846. <contact>Novell, Inc.</contact>
  2847. </source>
  2848. <input>
  2849. <add cached-time="20120710110311.986Z" class-name="User" event-id="WINIDM-NDS#20120710110311#1#1:a69cee9c-7d7b-47df-812e-39a59945b0d4" qualified-src-dn="O=xxxxx\OU=data\OU=users\CN=testuser1" src-dn="\xxxxxIDM\xxxxx\data\users\testuser1" src-entry-id="34037" timestamp="0#0">
  2850. <add-attr attr-name="Given Name">
  2851. <value timestamp="1341840499#5" type="string">test</value>
  2852. </add-attr>
  2853. <add-attr attr-name="Surname">
  2854. <value timestamp="1341840499#4" type="string">user1</value>
  2855. </add-attr>
  2856. <operation-data attempt-to-match="true" unmatched-src-dn="CN=testuser1"/>
  2857. </add>
  2858. </input>
  2859. </nds>
  2860. [07/10/12 04:03:12.798]:ADTRACE ST:Applying policy: %+C%14CNOVLADENTEX-sub-mp-EntitlementsImpl%-C.
  2861. [07/10/12 04:03:12.798]:ADTRACE ST: Applying to add #1.
  2862. [07/10/12 04:03:12.798]:ADTRACE ST: Evaluating selection criteria for rule 'UserAccount entitlement: do not match existing accounts'.
  2863. [07/10/12 04:03:12.798]:ADTRACE ST: (if-class-name equal "User") = TRUE.
  2864. [07/10/12 04:03:12.798]:ADTRACE ST: (if-global-variable 'drv.entitlement.UserAccount' equal "true") = TRUE.
  2865. [07/10/12 04:03:12.798]:ADTRACE ST: Query from policy
  2866. [07/10/12 04:03:12.798]:ADTRACE ST:
  2867. <nds dtdversion="4.0" ndsversion="8.x">
  2868. <source>
  2869. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  2870. <contact>Novell, Inc.</contact>
  2871. </source>
  2872. <input>
  2873. <query class-name="User" dest-dn="\xxxxxIDM\xxxxx\data\users\testuser1" dest-entry-id="34037" scope="entry">
  2874. <read-attr attr-name="DirXML-EntitlementRef"/>
  2875. </query>
  2876. </input>
  2877. </nds>
  2878. [07/10/12 04:03:12.798]:ADTRACE ST: Pumping XDS to eDirectory.
  2879. [07/10/12 04:03:12.798]:ADTRACE ST: Performing operation query for \xxxxxIDM\xxxxx\data\users\testuser1.
  2880. [07/10/12 04:03:12.798]:ADTRACE ST: --JCLNT-- \xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver : Duplicating : context = 979763259, tempContext = 979763296
  2881. [07/10/12 04:03:12.798]:ADTRACE ST: --JCLNT-- \xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver : Calling free on tempContext = 979763296
  2882. [07/10/12 04:03:12.798]:ADTRACE ST: Query from policy result
  2883. [07/10/12 04:03:12.798]:ADTRACE ST:
  2884. <nds dtdversion="4.0" ndsversion="8.x">
  2885. <source>
  2886. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  2887. <contact>Novell, Inc.</contact>
  2888. </source>
  2889. <output>
  2890. <instance class-name="User" qualified-src-dn="O=xxxxx\OU=data\OU=users\CN=testuser1" src-dn="\xxxxxIDM\xxxxx\data\users\testuser1" src-entry-id="34037">
  2891. <association state="manual"></association>
  2892. </instance>
  2893. <status level="success"></status>
  2894. </output>
  2895. </nds>
  2896. [07/10/12 04:03:12.814]:ADTRACE ST: (if-entitlement 'UserAccount' not-available) = TRUE.
  2897. [07/10/12 04:03:12.814]:ADTRACE ST: Rule selected.
  2898. [07/10/12 04:03:12.814]:ADTRACE ST: Applying rule 'UserAccount entitlement: do not match existing accounts'.
  2899. [07/10/12 04:03:12.814]:ADTRACE ST: Action: do-set-op-property("attempt-to-match","false").
  2900. [07/10/12 04:03:12.814]:ADTRACE ST: arg-string("false")
  2901. [07/10/12 04:03:12.814]:ADTRACE ST: token-text("false")
  2902. [07/10/12 04:03:12.814]:ADTRACE ST: Arg Value: "false".
  2903. [07/10/12 04:03:12.814]:ADTRACE ST:Policy returned:
  2904. [07/10/12 04:03:12.814]:ADTRACE ST:
  2905. <nds dtdversion="4.0" ndsversion="8.x">
  2906. <source>
  2907. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  2908. <contact>Novell, Inc.</contact>
  2909. </source>
  2910. <input>
  2911. <add cached-time="20120710110311.986Z" class-name="User" event-id="WINIDM-NDS#20120710110311#1#1:a69cee9c-7d7b-47df-812e-39a59945b0d4" qualified-src-dn="O=xxxxx\OU=data\OU=users\CN=testuser1" src-dn="\xxxxxIDM\xxxxx\data\users\testuser1" src-entry-id="34037" timestamp="0#0">
  2912. <add-attr attr-name="Given Name">
  2913. <value timestamp="1341840499#5" type="string">test</value>
  2914. </add-attr>
  2915. <add-attr attr-name="Surname">
  2916. <value timestamp="1341840499#4" type="string">user1</value>
  2917. </add-attr>
  2918. <operation-data attempt-to-match="false" unmatched-src-dn="CN=testuser1"/>
  2919. </add>
  2920. </input>
  2921. </nds>
  2922. [07/10/12 04:03:12.814]:ADTRACE ST:Applying policy: %+C%14CNOVLADDCFG-sub-mp%-C.
  2923. [07/10/12 04:03:12.814]:ADTRACE ST: Applying to add #1.
  2924. [07/10/12 04:03:12.814]:ADTRACE ST: Evaluating selection criteria for rule 'generate full name if not in Identity Vault'.
  2925. [07/10/12 04:03:12.814]:ADTRACE ST: (if-class-name equal "User") = TRUE.
  2926. [07/10/12 04:03:12.814]:ADTRACE ST: (if-global-variable 'FullNameMap' equal "true") = TRUE.
  2927. [07/10/12 04:03:12.814]:ADTRACE ST: Query from policy
  2928. [07/10/12 04:03:12.814]:ADTRACE ST:
  2929. <nds dtdversion="4.0" ndsversion="8.x">
  2930. <source>
  2931. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  2932. <contact>Novell, Inc.</contact>
  2933. </source>
  2934. <input>
  2935. <query class-name="User" dest-dn="\xxxxxIDM\xxxxx\data\users\testuser1" dest-entry-id="34037" scope="entry">
  2936. <read-attr attr-name="Full Name"/>
  2937. </query>
  2938. </input>
  2939. </nds>
  2940. [07/10/12 04:03:12.814]:ADTRACE ST: Pumping XDS to eDirectory.
  2941. [07/10/12 04:03:12.814]:ADTRACE ST: Performing operation query for \xxxxxIDM\xxxxx\data\users\testuser1.
  2942. [07/10/12 04:03:12.814]:ADTRACE ST: --JCLNT-- \xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver : Duplicating : context = 979763259, tempContext = 979763296
  2943. [07/10/12 04:03:12.814]:ADTRACE ST: Driver object has insufficient rights to read \xxxxxIDM\xxxxx\data\users\testuser1#Full Name.
  2944. [07/10/12 04:03:12.814]:ADTRACE ST: --JCLNT-- \xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver : Calling free on tempContext = 979763296
  2945. [07/10/12 04:03:12.814]:ADTRACE ST: Query from policy result
  2946. [07/10/12 04:03:12.814]:ADTRACE ST:
  2947. <nds dtdversion="4.0" ndsversion="8.x">
  2948. <source>
  2949. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  2950. <contact>Novell, Inc.</contact>
  2951. </source>
  2952. <output>
  2953. <instance class-name="User" qualified-src-dn="O=xxxxx\OU=data\OU=users\CN=testuser1" src-dn="\xxxxxIDM\xxxxx\data\users\testuser1" src-entry-id="34037">
  2954. <association state="manual"></association>
  2955. </instance>
  2956. <status level="success"></status>
  2957. </output>
  2958. </nds>
  2959. [07/10/12 04:03:12.814]:ADTRACE ST: (if-attr 'Full Name' not-available) = TRUE.
  2960. [07/10/12 04:03:12.814]:ADTRACE ST: (if-attr 'Given Name' available) = TRUE.
  2961. [07/10/12 04:03:12.814]:ADTRACE ST: Rule selected.
  2962. [07/10/12 04:03:12.814]:ADTRACE ST: Applying rule 'generate full name if not in Identity Vault'.
  2963. [07/10/12 04:03:12.829]:ADTRACE ST: Action: do-set-local-variable("gen-full-name",token-attr("Given Name")+" "+token-attr("Surname")).
  2964. [07/10/12 04:03:12.829]:ADTRACE ST: arg-string(token-attr("Given Name")+" "+token-attr("Surname"))
  2965. [07/10/12 04:03:12.829]:ADTRACE ST: token-attr("Given Name")
  2966. [07/10/12 04:03:12.829]:ADTRACE ST: Token Value: "test".
  2967. [07/10/12 04:03:12.829]:ADTRACE ST: token-text(" ")
  2968. [07/10/12 04:03:12.829]:ADTRACE ST: token-attr("Surname")
  2969. [07/10/12 04:03:12.829]:ADTRACE ST: Token Value: "user1".
  2970. [07/10/12 04:03:12.829]:ADTRACE ST: Arg Value: "test user1".
  2971. [07/10/12 04:03:12.829]:ADTRACE ST: Action: do-set-src-attr-value("Full Name",token-xpath("normalize-space($gen-full-name)")).
  2972. [07/10/12 04:03:12.829]:ADTRACE ST: arg-string(token-xpath("normalize-space($gen-full-name)"))
  2973. [07/10/12 04:03:12.829]:ADTRACE ST: token-xpath("normalize-space($gen-full-name)")
  2974. [07/10/12 04:03:12.829]:ADTRACE ST: Token Value: "test user1".
  2975. [07/10/12 04:03:12.829]:ADTRACE ST: Arg Value: "test user1".
  2976. [07/10/12 04:03:12.829]:ADTRACE ST: Action: do-set-dest-attr-value("Full Name",token-xpath("normalize-space($gen-full-name)")).
  2977. [07/10/12 04:03:12.829]:ADTRACE ST: arg-string(token-xpath("normalize-space($gen-full-name)"))
  2978. [07/10/12 04:03:12.829]:ADTRACE ST: token-xpath("normalize-space($gen-full-name)")
  2979. [07/10/12 04:03:12.829]:ADTRACE ST: Token Value: "test user1".
  2980. [07/10/12 04:03:12.829]:ADTRACE ST: Arg Value: "test user1".
  2981. [07/10/12 04:03:12.829]:ADTRACE ST: Evaluating selection criteria for rule 'match users based on NT logon name'.
  2982. [07/10/12 04:03:12.829]:ADTRACE ST: (if-class-name equal "User") = TRUE.
  2983. [07/10/12 04:03:12.829]:ADTRACE ST: (if-global-variable 'LogonNameMap' equal "true") = TRUE.
  2984. [07/10/12 04:03:12.829]:ADTRACE ST: Rule selected.
  2985. [07/10/12 04:03:12.829]:ADTRACE ST: Applying rule 'match users based on NT logon name'.
  2986. [07/10/12 04:03:12.829]:ADTRACE ST: Action: do-find-matching-object(scope="subtree",arg-dn(token-global-variable("drv.user.container")),arg-match-attr("CN",token-replace-all("^a-zA-Z0-9\x21\x23-\x29\x2d\x2e\x40\x5e-\x60\x7b\x7d\x7e\xc0-\xf6\xf8-\xff\x410-\x44f","",token-src-name()))).
  2987. [07/10/12 04:03:12.829]:ADTRACE ST: arg-dn(token-global-variable("drv.user.container"))
  2988. [07/10/12 04:03:12.829]:ADTRACE ST: token-global-variable("drv.user.container")
  2989. [07/10/12 04:03:12.829]:ADTRACE ST: Token Value: "OU=users,OU=NOVELLUSER,DC=idm,DC=com".
  2990. [07/10/12 04:03:12.829]:ADTRACE ST: Arg Value: "OU=users,OU=NOVELLUSER,DC=idm,DC=com".
  2991. [07/10/12 04:03:12.829]:ADTRACE ST: arg-match-attr("CN",token-replace-all("^a-zA-Z0-9\x21\x23-\x29\x2d\x2e\x40\x5e-\x60\x7b\x7d\x7e\xc0-\xf6\xf8-\xff\x410-\x44f","",token-src-name()))
  2992. [07/10/12 04:03:12.829]:ADTRACE ST: arg-string(token-replace-all("^a-zA-Z0-9\x21\x23-\x29\x2d\x2e\x40\x5e-\x60\x7b\x7d\x7e\xc0-\xf6\xf8-\xff\x410-\x44f","",token-src-name()))
  2993. [07/10/12 04:03:12.829]:ADTRACE ST: token-replace-all("^a-zA-Z0-9\x21\x23-\x29\x2d\x2e\x40\x5e-\x60\x7b\x7d\x7e\xc0-\xf6\xf8-\xff\x410-\x44f","",token-src-name())
  2994. [07/10/12 04:03:12.829]:ADTRACE ST: token-replace-all("^a-zA-Z0-9\x21\x23-\x29\x2d\x2e\x40\x5e-\x60\x7b\x7d\x7e\xc0-\xf6\xf8-\xff\x410-\x44f","",token-src-name())
  2995. [07/10/12 04:03:12.829]:ADTRACE ST: token-src-name()
  2996. [07/10/12 04:03:12.829]:ADTRACE ST: Token Value: "testuser1".
  2997. [07/10/12 04:03:12.829]:ADTRACE ST: Arg Value: "testuser1".
  2998. [07/10/12 04:03:12.829]:ADTRACE ST: Token Value: "testuser1".
  2999. [07/10/12 04:03:12.829]:ADTRACE ST: Arg Value: "testuser1".
  3000. [07/10/12 04:03:12.829]:ADTRACE ST: Query from policy
  3001. [07/10/12 04:03:12.829]:ADTRACE ST:
  3002. <nds dtdversion="4.0" ndsversion="8.x">
  3003. <source>
  3004. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  3005. <contact>Novell, Inc.</contact>
  3006. </source>
  3007. <input>
  3008. <query class-name="User" dest-dn="OU=users,OU=NOVELLUSER,DC=idm,DC=com" scope="subtree">
  3009. <search-class class-name="User"/>
  3010. <search-attr attr-name="CN">
  3011. <value type="string">testuser1</value>
  3012. </search-attr>
  3013. <read-attr/>
  3014. </query>
  3015. </input>
  3016. </nds>
  3017. [07/10/12 04:03:12.829]:ADTRACE ST: Fixing up association references.
  3018. [07/10/12 04:03:12.829]:ADTRACE ST: Applying schema mapping policies to output.
  3019. [07/10/12 04:03:12.829]:ADTRACE ST: Applying policy: %+C%14CNOVLDATACOLL-smp-SkipSchemaMapping%-C.
  3020. [07/10/12 04:03:12.829]:ADTRACE ST: Applying to query #1.
  3021. [07/10/12 04:03:12.829]:ADTRACE ST: Evaluating selection criteria for rule 'skip'.
  3022. [07/10/12 04:03:12.829]:ADTRACE ST: (if-operation equal "instance") = FALSE.
  3023. [07/10/12 04:03:12.829]:ADTRACE ST: Rule rejected.
  3024. [07/10/12 04:03:12.845]:ADTRACE ST: Evaluating selection criteria for rule 'restore'.
  3025. [07/10/12 04:03:12.845]:ADTRACE ST: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  3026. [07/10/12 04:03:12.845]:ADTRACE ST: Rule rejected.
  3027. [07/10/12 04:03:12.845]:ADTRACE ST: Policy returned:
  3028. [07/10/12 04:03:12.845]:ADTRACE ST:
  3029. <nds dtdversion="4.0" ndsversion="8.x">
  3030. <source>
  3031. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  3032. <contact>Novell, Inc.</contact>
  3033. </source>
  3034. <input>
  3035. <query class-name="User" dest-dn="OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="subtree">
  3036. <search-class class-name="User"/>
  3037. <search-attr attr-name="CN">
  3038. <value type="string">testuser1</value>
  3039. </search-attr>
  3040. <read-attr/>
  3041. </query>
  3042. </input>
  3043. </nds>
  3044. [07/10/12 04:03:12.845]:ADTRACE ST: Applying policy: %+C%14CNOVLADDCFG-smp%-C.
  3045. [07/10/12 04:03:12.845]:ADTRACE ST: Mapping attr-name 'CN' to 'sAMAccountName'.
  3046. [07/10/12 04:03:12.845]:ADTRACE ST: Mapping class-name 'User' to 'user'.
  3047. [07/10/12 04:03:12.845]:ADTRACE ST: Mapping class-name 'User' to 'user'.
  3048. [07/10/12 04:03:12.845]:ADTRACE ST: Applying policy: %+C%14CNOVLDATACOLL-smp-SkipSchemaMapping%-C.
  3049. [07/10/12 04:03:12.845]:ADTRACE ST: Applying to query #1.
  3050. [07/10/12 04:03:12.845]:ADTRACE ST: Evaluating selection criteria for rule 'skip'.
  3051. [07/10/12 04:03:12.845]:ADTRACE ST: (if-operation equal "instance") = FALSE.
  3052. [07/10/12 04:03:12.845]:ADTRACE ST: Rule rejected.
  3053. [07/10/12 04:03:12.845]:ADTRACE ST: Evaluating selection criteria for rule 'restore'.
  3054. [07/10/12 04:03:12.845]:ADTRACE ST: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  3055. [07/10/12 04:03:12.845]:ADTRACE ST: Rule rejected.
  3056. [07/10/12 04:03:12.845]:ADTRACE ST: Policy returned:
  3057. [07/10/12 04:03:12.845]:ADTRACE ST:
  3058. <nds dtdversion="4.0" ndsversion="8.x">
  3059. <source>
  3060. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  3061. <contact>Novell, Inc.</contact>
  3062. </source>
  3063. <input>
  3064. <query class-name="user" dest-dn="OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="subtree">
  3065. <search-class class-name="user"/>
  3066. <search-attr attr-name="sAMAccountName">
  3067. <value type="string">testuser1</value>
  3068. </search-attr>
  3069. <read-attr/>
  3070. </query>
  3071. </input>
  3072. </nds>
  3073. [07/10/12 04:03:12.845]:ADTRACE ST: Applying output transformation policies.
  3074. [07/10/12 04:03:12.845]:ADTRACE ST: Applying policy: %+C%14CNOVLADENTEX-otp-EntitlementsImpl%-C.
  3075. [07/10/12 04:03:12.845]:ADTRACE ST: Applying to query #1.
  3076. [07/10/12 04:03:12.845]:ADTRACE ST: Evaluating selection criteria for rule 'Intercept outbound queries for ADDomain'.
  3077. [07/10/12 04:03:12.845]:ADTRACE ST: (if-class-name equal "ADDomain") = FALSE.
  3078. [07/10/12 04:03:12.845]:ADTRACE ST: Rule rejected.
  3079. [07/10/12 04:03:12.845]:ADTRACE ST: Policy returned:
  3080. [07/10/12 04:03:12.845]:ADTRACE ST:
  3081. <nds dtdversion="4.0" ndsversion="8.x">
  3082. <source>
  3083. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  3084. <contact>Novell, Inc.</contact>
  3085. </source>
  3086. <input>
  3087. <query class-name="user" dest-dn="OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="subtree">
  3088. <search-class class-name="user"/>
  3089. <search-attr attr-name="sAMAccountName">
  3090. <value type="string">testuser1</value>
  3091. </search-attr>
  3092. <read-attr/>
  3093. </query>
  3094. </input>
  3095. </nds>
  3096. [07/10/12 04:03:12.845]:ADTRACE ST: Applying policy: %+C%14CNOVLADENTEX-otp-ExchangeMailboxPolicy%-C.
  3097. [07/10/12 04:03:12.845]:ADTRACE ST: Applying to query #1.
  3098. [07/10/12 04:03:12.845]:ADTRACE ST: Evaluating selection criteria for rule 'Exchange: Remove HomeMDB when disabled'.
  3099. [07/10/12 04:03:12.845]:ADTRACE ST: (if-global-variable 'drv.exchMailboxMethod' equal "disabled") = TRUE.
  3100. [07/10/12 04:03:12.845]:ADTRACE ST: Rule selected.
  3101. [07/10/12 04:03:12.845]:ADTRACE ST: Applying rule 'Exchange: Remove HomeMDB when disabled'.
  3102. [07/10/12 04:03:12.845]:ADTRACE ST: Action: do-strip-op-attr("homeMDB").
  3103. [07/10/12 04:03:12.845]:ADTRACE ST: Policy returned:
  3104. [07/10/12 04:03:12.845]:ADTRACE ST:
  3105. <nds dtdversion="4.0" ndsversion="8.x">
  3106. <source>
  3107. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  3108. <contact>Novell, Inc.</contact>
  3109. </source>
  3110. <input>
  3111. <query class-name="user" dest-dn="OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="subtree">
  3112. <search-class class-name="user"/>
  3113. <search-attr attr-name="sAMAccountName">
  3114. <value type="string">testuser1</value>
  3115. </search-attr>
  3116. <read-attr/>
  3117. </query>
  3118. </input>
  3119. </nds>
  3120. [07/10/12 04:03:12.845]:ADTRACE ST: Applying policy: %+C%14CNOVLADDCFG-otp-FormatConversions%-C.
  3121. [07/10/12 04:03:12.861]:ADTRACE ST: Applying to query #1.
  3122. [07/10/12 04:03:12.861]:ADTRACE ST: Evaluating selection criteria for rule 'Street Address: Convert LF to CR-LF'.
  3123. [07/10/12 04:03:12.861]:ADTRACE ST: Rule selected.
  3124. [07/10/12 04:03:12.861]:ADTRACE ST: Applying rule 'Street Address: Convert LF to CR-LF'.
  3125. [07/10/12 04:03:12.861]:ADTRACE ST: Action: do-reformat-op-attr("streetAddress",token-replace-all("[^\r]\n","\r\n",token-local-variable("current-value"))).
  3126. [07/10/12 04:03:12.861]:ADTRACE ST: Evaluating selection criteria for rule 'logonHours: Convert to Active Directory form'.
  3127. [07/10/12 04:03:12.861]:ADTRACE ST: Rule selected.
  3128. [07/10/12 04:03:12.861]:ADTRACE ST: Applying rule 'logonHours: Convert to Active Directory form'.
  3129. [07/10/12 04:03:12.861]:ADTRACE ST: Action: do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2ADLenient($current-value)")).
  3130. [07/10/12 04:03:12.861]:ADTRACE ST: Evaluating selection criteria for rule 'accountExpires: Convert to Active Directory form'.
  3131. [07/10/12 04:03:12.861]:ADTRACE ST: (if-op-attr 'accountExpires' changing) = FALSE.
  3132. [07/10/12 04:03:12.861]:ADTRACE ST: Rule rejected.
  3133. [07/10/12 04:03:12.861]:ADTRACE ST: Evaluating selection criteria for rule 'lockoutTime: Convert to Active Directory form'.
  3134. [07/10/12 04:03:12.861]:ADTRACE ST: Rule selected.
  3135. [07/10/12 04:03:12.861]:ADTRACE ST: Applying rule 'lockoutTime: Convert to Active Directory form'.
  3136. [07/10/12 04:03:12.861]:ADTRACE ST: Action: do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateEpoch2FileTime($current-value)")).
  3137. [07/10/12 04:03:12.861]:ADTRACE ST: Evaluating selection criteria for rule 'Add: User - convert multi-valued Telephone to single value'.
  3138. [07/10/12 04:03:12.861]:ADTRACE ST: (if-operation equal "add") = FALSE.
  3139. [07/10/12 04:03:12.861]:ADTRACE ST: Rule rejected.
  3140. [07/10/12 04:03:12.861]:ADTRACE ST: Evaluating selection criteria for rule 'update Active Directory logon name'.
  3141. [07/10/12 04:03:12.861]:ADTRACE ST: (if-xpath true "self::status[@level = 'success']/operation-data/windows-2000-logon-name") = FALSE.
  3142. [07/10/12 04:03:12.861]:ADTRACE ST: Rule rejected.
  3143. [07/10/12 04:03:12.861]:ADTRACE ST: Policy returned:
  3144. [07/10/12 04:03:12.861]:ADTRACE ST:
  3145. <nds dtdversion="4.0" ndsversion="8.x">
  3146. <source>
  3147. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  3148. <contact>Novell, Inc.</contact>
  3149. </source>
  3150. <input>
  3151. <query class-name="user" dest-dn="OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="subtree">
  3152. <search-class class-name="user"/>
  3153. <search-attr attr-name="sAMAccountName">
  3154. <value type="string">testuser1</value>
  3155. </search-attr>
  3156. <read-attr/>
  3157. </query>
  3158. </input>
  3159. </nds>
  3160. [07/10/12 04:03:12.861]:ADTRACE ST: Applying policy: %+C%14CNOVLADDCFG-otp-ExchangeEntitlementQuery%-C.
  3161. [07/10/12 04:03:12.861]:ADTRACE ST: Applying to query #1.
  3162. [07/10/12 04:03:12.861]:ADTRACE ST: Evaluating selection criteria for rule 'Add dest-dn to the Exchange Entitlement Query'.
  3163. [07/10/12 04:03:12.861]:ADTRACE ST: (if-operation equal "query") = TRUE.
  3164. [07/10/12 04:03:12.861]:ADTRACE ST: (if-class-name equal "msExchPrivateMDB") = FALSE.
  3165. [07/10/12 04:03:12.861]:ADTRACE ST: Rule rejected.
  3166. [07/10/12 04:03:12.861]:ADTRACE ST: Policy returned:
  3167. [07/10/12 04:03:12.861]:ADTRACE ST:
  3168. <nds dtdversion="4.0" ndsversion="8.x">
  3169. <source>
  3170. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  3171. <contact>Novell, Inc.</contact>
  3172. </source>
  3173. <input>
  3174. <query class-name="user" dest-dn="OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="subtree">
  3175. <search-class class-name="user"/>
  3176. <search-attr attr-name="sAMAccountName">
  3177. <value type="string">testuser1</value>
  3178. </search-attr>
  3179. <read-attr/>
  3180. </query>
  3181. </input>
  3182. </nds>
  3183. [07/10/12 04:03:12.861]:ADTRACE ST: Applying policy: %+C%14CNOVLPWDSYNC-otp-EmailOnFailedPwdPub%-C.
  3184. [07/10/12 04:03:12.861]:ADTRACE ST: Applying to query #1.
  3185. [07/10/12 04:03:12.861]:ADTRACE ST: Evaluating selection criteria for rule 'Send e-mail for a failed publish password operation'.
  3186. [07/10/12 04:03:12.861]:ADTRACE ST: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  3187. [07/10/12 04:03:12.861]:ADTRACE ST: (if-operation equal "status") = FALSE.
  3188. [07/10/12 04:03:12.861]:ADTRACE ST: Rule rejected.
  3189. [07/10/12 04:03:12.861]:ADTRACE ST: Policy returned:
  3190. [07/10/12 04:03:12.861]:ADTRACE ST:
  3191. <nds dtdversion="4.0" ndsversion="8.x">
  3192. <source>
  3193. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  3194. <contact>Novell, Inc.</contact>
  3195. </source>
  3196. <input>
  3197. <query class-name="user" dest-dn="OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="subtree">
  3198. <search-class class-name="user"/>
  3199. <search-attr attr-name="sAMAccountName">
  3200. <value type="string">testuser1</value>
  3201. </search-attr>
  3202. <read-attr/>
  3203. </query>
  3204. </input>
  3205. </nds>
  3206. [07/10/12 04:03:12.876]:ADTRACE ST: Applying policy: %+C%14CNOVLATRKBASE-otp-Subscribe%-C.
  3207. [07/10/12 04:03:12.876]:ADTRACE ST: Applying to query #1.
  3208. [07/10/12 04:03:12.876]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - Initialize Realm Mapping'.
  3209. [07/10/12 04:03:12.876]:ADTRACE ST: (if-global-variable 'drv.acctTrk.enable' equal "true") = TRUE.
  3210. [07/10/12 04:03:12.876]:ADTRACE ST: (if-global-variable 'drv.acctTrk.mode' equal "fanout") = FALSE.
  3211. [07/10/12 04:03:12.876]:ADTRACE ST: Rule rejected.
  3212. [07/10/12 04:03:12.876]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled or wrong object class'.
  3213. [07/10/12 04:03:12.876]:ADTRACE ST: Rule selected.
  3214. [07/10/12 04:03:12.876]:ADTRACE ST: Applying rule 'AccountTracking - disregard if disabled or wrong object class'.
  3215. [07/10/12 04:03:12.876]:ADTRACE ST: Action: do-if().
  3216. [07/10/12 04:03:12.876]:ADTRACE ST: Evaluating conditions.
  3217. [07/10/12 04:03:12.876]:ADTRACE ST: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  3218. [07/10/12 04:03:12.876]:ADTRACE ST: Performing else actions.
  3219. [07/10/12 04:03:12.876]:ADTRACE ST: Action: do-for-each(arg-node-set(token-global-variable("drv.acctTrk.objectClass"))).
  3220. [07/10/12 04:03:12.876]:ADTRACE ST: arg-node-set(token-global-variable("drv.acctTrk.objectClass"))
  3221. [07/10/12 04:03:12.876]:ADTRACE ST: token-global-variable("drv.acctTrk.objectClass")
  3222. [07/10/12 04:03:12.876]:ADTRACE ST: Token Value: {"user"}.
  3223. [07/10/12 04:03:12.876]:ADTRACE ST: Arg Value: {"user"}.
  3224. [07/10/12 04:03:12.876]:ADTRACE ST: Performing actions for local-variable(current-node) = "user".
  3225. [07/10/12 04:03:12.876]:ADTRACE ST: Action: do-if().
  3226. [07/10/12 04:03:12.876]:ADTRACE ST: Evaluating conditions.
  3227. [07/10/12 04:03:12.876]:ADTRACE ST: Expanded variable reference '$current-node$' to 'user'.
  3228. [07/10/12 04:03:12.876]:ADTRACE ST: (if-class-name equal "$current-node$") = TRUE.
  3229. [07/10/12 04:03:12.876]:ADTRACE ST: Performing if actions.
  3230. [07/10/12 04:03:12.876]:ADTRACE ST: Action: do-set-local-variable("pass",scope="policy","true").
  3231. [07/10/12 04:03:12.876]:ADTRACE ST: arg-string("true")
  3232. [07/10/12 04:03:12.876]:ADTRACE ST: token-text("true")
  3233. [07/10/12 04:03:12.876]:ADTRACE ST: Arg Value: "true".
  3234. [07/10/12 04:03:12.876]:ADTRACE ST: Action: do-if().
  3235. [07/10/12 04:03:12.876]:ADTRACE ST: Evaluating conditions.
  3236. [07/10/12 04:03:12.876]:ADTRACE ST: (if-local-variable 'pass' not-available) = FALSE.
  3237. [07/10/12 04:03:12.876]:ADTRACE ST: Performing else actions.
  3238. [07/10/12 04:03:12.876]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - add operation-data for regular operations'.
  3239. [07/10/12 04:03:12.876]:ADTRACE ST: (if-operation match "add|modify|delete|rename|move") = FALSE.
  3240. [07/10/12 04:03:12.876]:ADTRACE ST: Rule rejected.
  3241. [07/10/12 04:03:12.876]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - add operation-data for mapped operations'.
  3242. [07/10/12 04:03:12.876]:ADTRACE ST: (if-global-variable 'drv.acctTrk.mode' equal "fanout") = FALSE.
  3243. [07/10/12 04:03:12.876]:ADTRACE ST: Rule rejected.
  3244. [07/10/12 04:03:12.876]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - strip AccountTrackingAccountStatus attribute'.
  3245. [07/10/12 04:03:12.876]:ADTRACE ST: (if-op-attr 'AccountTrackingAccountStatus' available) = FALSE.
  3246. [07/10/12 04:03:12.876]:ADTRACE ST: Rule rejected.
  3247. [07/10/12 04:03:12.876]:ADTRACE ST: Policy returned:
  3248. [07/10/12 04:03:12.876]:ADTRACE ST:
  3249. <nds dtdversion="4.0" ndsversion="8.x">
  3250. <source>
  3251. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  3252. <contact>Novell, Inc.</contact>
  3253. </source>
  3254. <input>
  3255. <query class-name="user" dest-dn="OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="subtree">
  3256. <search-class class-name="user"/>
  3257. <search-attr attr-name="sAMAccountName">
  3258. <value type="string">testuser1</value>
  3259. </search-attr>
  3260. <read-attr/>
  3261. </query>
  3262. </input>
  3263. </nds>
  3264. [07/10/12 04:03:12.892]:ADTRACE ST: Submitting document to subscriber shim:
  3265. [07/10/12 04:03:12.892]:ADTRACE ST:
  3266. <nds dtdversion="4.0" ndsversion="8.x">
  3267. <source>
  3268. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  3269. <contact>Novell, Inc.</contact>
  3270. </source>
  3271. <input>
  3272. <query class-name="user" dest-dn="OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="subtree">
  3273. <search-class class-name="user"/>
  3274. <search-attr attr-name="sAMAccountName">
  3275. <value type="string">testuser1</value>
  3276. </search-attr>
  3277. <read-attr/>
  3278. </query>
  3279. </input>
  3280. </nds>
  3281. [07/10/12 04:03:12.892]:ADTRACE ST: Remote Interface Driver: Sending...
  3282. [07/10/12 04:03:12.892]:ADTRACE ST:
  3283. <nds dtdversion="4.0" ndsversion="8.x">
  3284. <source>
  3285. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  3286. <contact>Novell, Inc.</contact>
  3287. </source>
  3288. <input>
  3289. <query class-name="user" dest-dn="OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="subtree">
  3290. <search-class class-name="user"/>
  3291. <search-attr attr-name="sAMAccountName">
  3292. <value type="string">testuser1</value>
  3293. </search-attr>
  3294. <read-attr/>
  3295. </query>
  3296. </input>
  3297. </nds>
  3298. [07/10/12 04:03:12.892]:ADTRACE ST: Remote Interface Driver: Document sent.
  3299. [07/10/12 04:03:13.079]:ADTRACE :Remote Interface Driver: Received.
  3300. [07/10/12 04:03:13.095]:ADTRACE :
  3301. <nds dtdversion="1.1" ndsversion="8.7">
  3302. <source>
  3303. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  3304. <contact>Novell, Inc.</contact>
  3305. </source>
  3306. <output>
  3307. <status event-id="0" level="success"/>
  3308. </output>
  3309. </nds>
  3310. [07/10/12 04:03:13.095]:ADTRACE :Remote Interface Driver: Received document for subscriber channel
  3311. [07/10/12 04:03:13.095]:ADTRACE :Remote Interface Driver: Waiting for receive...
  3312. [07/10/12 04:03:13.095]:ADTRACE ST: SubscriptionShim.execute() returned:
  3313. [07/10/12 04:03:13.095]:ADTRACE ST:
  3314. <nds dtdversion="1.1" ndsversion="8.7">
  3315. <source>
  3316. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  3317. <contact>Novell, Inc.</contact>
  3318. </source>
  3319. <output>
  3320. <status event-id="0" level="success"/>
  3321. </output>
  3322. </nds>
  3323. [07/10/12 04:03:13.095]:ADTRACE ST: Applying input transformation policies.
  3324. [07/10/12 04:03:13.095]:ADTRACE ST: Applying policy: %+C%14CNOVLAUDTENTC-itp-SendEntitlementsEvents%-C.
  3325. [07/10/12 04:03:13.111]:ADTRACE ST: Applying to status #1.
  3326. [07/10/12 04:03:13.111]:ADTRACE ST: Evaluating selection criteria for rule '00031200 - Account Create By Entitlement Grant'.
  3327. [07/10/12 04:03:13.111]:ADTRACE ST: (if-operation equal "status") = TRUE.
  3328. [07/10/12 04:03:13.111]:ADTRACE ST: (if-op-property 'accountAction' equal "accountCreateByEntitlementGrant") = FALSE.
  3329. [07/10/12 04:03:13.111]:ADTRACE ST: Rule rejected.
  3330. [07/10/12 04:03:13.111]:ADTRACE ST: Evaluating selection criteria for rule '00031201 - Account Delete By Entitlement Revoke'.
  3331. [07/10/12 04:03:13.111]:ADTRACE ST: (if-operation equal "status") = TRUE.
  3332. [07/10/12 04:03:13.111]:ADTRACE ST: (if-xpath true "./operation-data/entitlement-impl/@state = '0'") = FALSE.
  3333. [07/10/12 04:03:13.111]:ADTRACE ST: (if-operation equal "status") = TRUE.
  3334. [07/10/12 04:03:13.111]:ADTRACE ST: (if-op-property 'accountAction' equal "accountDeleteByEntitlementRevoke") = FALSE.
  3335. [07/10/12 04:03:13.111]:ADTRACE ST: Rule rejected.
  3336. [07/10/12 04:03:13.111]:ADTRACE ST: Evaluating selection criteria for rule '00031202 - Account Disable By Entitlement Revoke'.
  3337. [07/10/12 04:03:13.111]:ADTRACE ST: (if-operation equal "status") = TRUE.
  3338. [07/10/12 04:03:13.111]:ADTRACE ST: (if-op-property 'accountAction' equal "accountDisableByEntitlementRevoke") = FALSE.
  3339. [07/10/12 04:03:13.111]:ADTRACE ST: Rule rejected.
  3340. [07/10/12 04:03:13.111]:ADTRACE ST: Evaluating selection criteria for rule '00031203 - Account Enable By Entitlement Grant'.
  3341. [07/10/12 04:03:13.111]:ADTRACE ST: (if-operation equal "status") = TRUE.
  3342. [07/10/12 04:03:13.111]:ADTRACE ST: (if-op-property 'accountAction' equal "accountEnableByEntitlementGrant") = FALSE.
  3343. [07/10/12 04:03:13.111]:ADTRACE ST: Rule rejected.
  3344. [07/10/12 04:03:13.111]:ADTRACE ST: Evaluating selection criteria for rule 'Generate Audit Event'.
  3345. [07/10/12 04:03:13.111]:ADTRACE ST: (if-operation equal "status") = TRUE.
  3346. [07/10/12 04:03:13.111]:ADTRACE ST: (if-local-variable 'auditEventID' available) = FALSE.
  3347. [07/10/12 04:03:13.111]:ADTRACE ST: Rule rejected.
  3348. [07/10/12 04:03:13.111]:ADTRACE ST: Policy returned:
  3349. [07/10/12 04:03:13.126]:ADTRACE ST:
  3350. <nds dtdversion="1.1" ndsversion="8.7">
  3351. <source>
  3352. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  3353. <contact>Novell, Inc.</contact>
  3354. </source>
  3355. <output>
  3356. <status event-id="0" level="success"/>
  3357. </output>
  3358. </nds>
  3359. [07/10/12 04:03:13.126]:ADTRACE ST: Applying policy: %+C%14CNOVLADENTEX-itp-InitEntitlementConfigurationResource%-C.
  3360. [07/10/12 04:03:13.126]:ADTRACE ST: Applying to status #1.
  3361. [07/10/12 04:03:13.126]:ADTRACE ST: Evaluating selection criteria for rule 'Make sure we only run once and when we're ready'.
  3362. [07/10/12 04:03:13.126]:ADTRACE ST: (if-local-variable 'objectClass' match ".+") = TRUE.
  3363. [07/10/12 04:03:13.126]:ADTRACE ST: (if-local-variable 'entConfigInitialized' equal "true") = TRUE.
  3364. [07/10/12 04:03:13.126]:ADTRACE ST: Rule selected.
  3365. [07/10/12 04:03:13.126]:ADTRACE ST: Applying rule 'Make sure we only run once and when we're ready'.
  3366. [07/10/12 04:03:13.126]:ADTRACE ST: Action: do-break().
  3367. [07/10/12 04:03:13.126]:ADTRACE ST: Policy returned:
  3368. [07/10/12 04:03:13.126]:ADTRACE ST:
  3369. <nds dtdversion="1.1" ndsversion="8.7">
  3370. <source>
  3371. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  3372. <contact>Novell, Inc.</contact>
  3373. </source>
  3374. <output>
  3375. <status event-id="0" level="success"/>
  3376. </output>
  3377. </nds>
  3378. [07/10/12 04:03:13.126]:ADTRACE ST: Applying policy: %+C%14CNOVLADMSINFO-itp-InitManagedSystemInfo%-C.
  3379. [07/10/12 04:03:13.126]:ADTRACE ST: Applying to status #1.
  3380. [07/10/12 04:03:13.126]:ADTRACE ST: Evaluating selection criteria for rule 'Make sure we only run once and when we're ready'.
  3381. [07/10/12 04:03:13.126]:ADTRACE ST: (if-local-variable 'objectClass' match ".+") = TRUE.
  3382. [07/10/12 04:03:13.126]:ADTRACE ST: (if-local-variable 'mSysInfoInitialized' equal "true") = TRUE.
  3383. [07/10/12 04:03:13.126]:ADTRACE ST: Rule selected.
  3384. [07/10/12 04:03:13.126]:ADTRACE ST: Applying rule 'Make sure we only run once and when we're ready'.
  3385. [07/10/12 04:03:13.126]:ADTRACE ST: Action: do-break().
  3386. [07/10/12 04:03:13.126]:ADTRACE ST: Policy returned:
  3387. [07/10/12 04:03:13.126]:ADTRACE ST:
  3388. <nds dtdversion="1.1" ndsversion="8.7">
  3389. <source>
  3390. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  3391. <contact>Novell, Inc.</contact>
  3392. </source>
  3393. <output>
  3394. <status event-id="0" level="success"/>
  3395. </output>
  3396. </nds>
  3397. [07/10/12 04:03:13.126]:ADTRACE ST: Applying policy: %+C%14CNOVLATRKBASE-itp-Publish%-C.
  3398. [07/10/12 04:03:13.126]:ADTRACE ST: Applying to status #1.
  3399. [07/10/12 04:03:13.126]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled or wrong object class'.
  3400. [07/10/12 04:03:13.126]:ADTRACE ST: Rule selected.
  3401. [07/10/12 04:03:13.126]:ADTRACE ST: Applying rule 'AccountTracking - disregard if disabled or wrong object class'.
  3402. [07/10/12 04:03:13.126]:ADTRACE ST: Action: do-if().
  3403. [07/10/12 04:03:13.126]:ADTRACE ST: Evaluating conditions.
  3404. [07/10/12 04:03:13.126]:ADTRACE ST: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  3405. [07/10/12 04:03:13.126]:ADTRACE ST: Performing else actions.
  3406. [07/10/12 04:03:13.126]:ADTRACE ST: Action: do-if().
  3407. [07/10/12 04:03:13.126]:ADTRACE ST: Evaluating conditions.
  3408. [07/10/12 04:03:13.126]:ADTRACE ST: (if-class-name available) = FALSE.
  3409. [07/10/12 04:03:13.126]:ADTRACE ST: Performing else actions.
  3410. [07/10/12 04:03:13.126]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - on add-association sync the operation-properties to status operations'.
  3411. [07/10/12 04:03:13.126]:ADTRACE ST: (if-operation equal "add-association") = FALSE.
  3412. [07/10/12 04:03:13.126]:ADTRACE ST: Rule rejected.
  3413. [07/10/12 04:03:13.126]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - Query for destination DN using Association'.
  3414. [07/10/12 04:03:13.126]:ADTRACE ST: (if-operation match "modify|delete|move|rename") = FALSE.
  3415. [07/10/12 04:03:13.126]:ADTRACE ST: Rule rejected.
  3416. [07/10/12 04:03:13.126]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - add interested properties to current doc for future use.'.
  3417. [07/10/12 04:03:13.126]:ADTRACE ST: (if-operation match "add|modify|delete|rename|move|status") = TRUE.
  3418. [07/10/12 04:03:13.126]:ADTRACE ST: Rule selected.
  3419. [07/10/12 04:03:13.126]:ADTRACE ST: Applying rule 'AccountTracking - add interested properties to current doc for future use.'.
  3420. [07/10/12 04:03:13.126]:ADTRACE ST: Action: do-for-each(arg-node-set(token-global-variable("drv.acctTrk.identifiers"))).
  3421. [07/10/12 04:03:13.142]:ADTRACE ST: arg-node-set(token-global-variable("drv.acctTrk.identifiers"))
  3422. [07/10/12 04:03:13.142]:ADTRACE ST: token-global-variable("drv.acctTrk.identifiers")
  3423. [07/10/12 04:03:13.142]:ADTRACE ST: Token Value: {"sAMAccountName","userPrincipalName","LDAPDN","association"}.
  3424. [07/10/12 04:03:13.142]:ADTRACE ST: Arg Value: {"sAMAccountName","userPrincipalName","LDAPDN","association"}.
  3425. [07/10/12 04:03:13.142]:ADTRACE ST: Performing actions for local-variable(current-node) = "sAMAccountName".
  3426. [07/10/12 04:03:13.142]:ADTRACE ST: Action: do-if().
  3427. [07/10/12 04:03:13.142]:ADTRACE ST: Evaluating conditions.
  3428. [07/10/12 04:03:13.142]:ADTRACE ST: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  3429. [07/10/12 04:03:13.142]:ADTRACE ST: Performing else actions.
  3430. [07/10/12 04:03:13.142]:ADTRACE ST: Action: do-if().
  3431. [07/10/12 04:03:13.142]:ADTRACE ST: Evaluating conditions.
  3432. [07/10/12 04:03:13.142]:ADTRACE ST: (if-local-variable 'current-node' equal "association") = FALSE.
  3433. [07/10/12 04:03:13.142]:ADTRACE ST: Performing else actions.
  3434. [07/10/12 04:03:13.142]:ADTRACE ST: Action: do-if().
  3435. [07/10/12 04:03:13.142]:ADTRACE ST: Evaluating conditions.
  3436. [07/10/12 04:03:13.142]:ADTRACE ST: Expanded variable reference '$current-node$' to 'sAMAccountName'.
  3437. [07/10/12 04:03:13.142]:ADTRACE ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  3438. [07/10/12 04:03:13.142]:ADTRACE ST: Expanded variable reference '$current-node$' to 'sAMAccountName'.
  3439. [07/10/12 04:03:13.142]:ADTRACE ST: (if-op-attr '$current-node$' available) = FALSE.
  3440. [07/10/12 04:03:13.142]:ADTRACE ST: Performing else actions.
  3441. [07/10/12 04:03:13.142]:ADTRACE ST: Performing actions for local-variable(current-node) = "userPrincipalName".
  3442. [07/10/12 04:03:13.142]:ADTRACE ST: Action: do-if().
  3443. [07/10/12 04:03:13.142]:ADTRACE ST: Evaluating conditions.
  3444. [07/10/12 04:03:13.142]:ADTRACE ST: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  3445. [07/10/12 04:03:13.142]:ADTRACE ST: Performing else actions.
  3446. [07/10/12 04:03:13.142]:ADTRACE ST: Action: do-if().
  3447. [07/10/12 04:03:13.142]:ADTRACE ST: Evaluating conditions.
  3448. [07/10/12 04:03:13.142]:ADTRACE ST: (if-local-variable 'current-node' equal "association") = FALSE.
  3449. [07/10/12 04:03:13.142]:ADTRACE ST: Performing else actions.
  3450. [07/10/12 04:03:13.142]:ADTRACE ST: Action: do-if().
  3451. [07/10/12 04:03:13.142]:ADTRACE ST: Evaluating conditions.
  3452. [07/10/12 04:03:13.142]:ADTRACE ST: Expanded variable reference '$current-node$' to 'userPrincipalName'.
  3453. [07/10/12 04:03:13.142]:ADTRACE ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  3454. [07/10/12 04:03:13.142]:ADTRACE ST: Expanded variable reference '$current-node$' to 'userPrincipalName'.
  3455. [07/10/12 04:03:13.142]:ADTRACE ST: (if-op-attr '$current-node$' available) = FALSE.
  3456. [07/10/12 04:03:13.142]:ADTRACE ST: Performing else actions.
  3457. [07/10/12 04:03:13.142]:ADTRACE ST: Performing actions for local-variable(current-node) = "LDAPDN".
  3458. [07/10/12 04:03:13.142]:ADTRACE ST: Action: do-if().
  3459. [07/10/12 04:03:13.142]:ADTRACE ST: Evaluating conditions.
  3460. [07/10/12 04:03:13.142]:ADTRACE ST: (if-local-variable 'current-node' equal "LDAPDN") = TRUE.
  3461. [07/10/12 04:03:13.142]:ADTRACE ST: Expanded variable reference '$current-node$' to 'LDAPDN'.
  3462. [07/10/12 04:03:13.142]:ADTRACE ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  3463. [07/10/12 04:03:13.142]:ADTRACE ST: (if-src-dn available) = FALSE.
  3464. [07/10/12 04:03:13.142]:ADTRACE ST: Performing else actions.
  3465. [07/10/12 04:03:13.142]:ADTRACE ST: Action: do-if().
  3466. [07/10/12 04:03:13.142]:ADTRACE ST: Evaluating conditions.
  3467. [07/10/12 04:03:13.142]:ADTRACE ST: (if-local-variable 'current-node' equal "association") = FALSE.
  3468. [07/10/12 04:03:13.142]:ADTRACE ST: Performing else actions.
  3469. [07/10/12 04:03:13.142]:ADTRACE ST: Action: do-if().
  3470. [07/10/12 04:03:13.158]:ADTRACE ST: Evaluating conditions.
  3471. [07/10/12 04:03:13.158]:ADTRACE ST: Expanded variable reference '$current-node$' to 'LDAPDN'.
  3472. [07/10/12 04:03:13.158]:ADTRACE ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  3473. [07/10/12 04:03:13.158]:ADTRACE ST: Expanded variable reference '$current-node$' to 'LDAPDN'.
  3474. [07/10/12 04:03:13.158]:ADTRACE ST: (if-op-attr '$current-node$' available) = FALSE.
  3475. [07/10/12 04:03:13.158]:ADTRACE ST: Performing else actions.
  3476. [07/10/12 04:03:13.158]:ADTRACE ST: Performing actions for local-variable(current-node) = "association".
  3477. [07/10/12 04:03:13.158]:ADTRACE ST: Action: do-if().
  3478. [07/10/12 04:03:13.158]:ADTRACE ST: Evaluating conditions.
  3479. [07/10/12 04:03:13.158]:ADTRACE ST: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  3480. [07/10/12 04:03:13.158]:ADTRACE ST: Performing else actions.
  3481. [07/10/12 04:03:13.158]:ADTRACE ST: Action: do-if().
  3482. [07/10/12 04:03:13.158]:ADTRACE ST: Evaluating conditions.
  3483. [07/10/12 04:03:13.158]:ADTRACE ST: (if-local-variable 'current-node' equal "association") = TRUE.
  3484. [07/10/12 04:03:13.158]:ADTRACE ST: Expanded variable reference '$current-node$' to 'association'.
  3485. [07/10/12 04:03:13.158]:ADTRACE ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  3486. [07/10/12 04:03:13.158]:ADTRACE ST: (if-association available) = FALSE.
  3487. [07/10/12 04:03:13.158]:ADTRACE ST: Performing else actions.
  3488. [07/10/12 04:03:13.158]:ADTRACE ST: Action: do-if().
  3489. [07/10/12 04:03:13.158]:ADTRACE ST: Evaluating conditions.
  3490. [07/10/12 04:03:13.158]:ADTRACE ST: Expanded variable reference '$current-node$' to 'association'.
  3491. [07/10/12 04:03:13.158]:ADTRACE ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  3492. [07/10/12 04:03:13.158]:ADTRACE ST: Expanded variable reference '$current-node$' to 'association'.
  3493. [07/10/12 04:03:13.158]:ADTRACE ST: (if-op-attr '$current-node$' available) = FALSE.
  3494. [07/10/12 04:03:13.158]:ADTRACE ST: Performing else actions.
  3495. [07/10/12 04:03:13.158]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - Initialize status properties on published events'.
  3496. [07/10/12 04:03:13.158]:ADTRACE ST: (if-operation match "add|modify|delete|rename|move") = FALSE.
  3497. [07/10/12 04:03:13.158]:ADTRACE ST: Rule rejected.
  3498. [07/10/12 04:03:13.158]:ADTRACE ST: Policy returned:
  3499. [07/10/12 04:03:13.158]:ADTRACE ST:
  3500. <nds dtdversion="1.1" ndsversion="8.7">
  3501. <source>
  3502. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  3503. <contact>Novell, Inc.</contact>
  3504. </source>
  3505. <output>
  3506. <status event-id="0" level="success"/>
  3507. </output>
  3508. </nds>
  3509. [07/10/12 04:03:13.158]:ADTRACE ST: Applying policy: %+C%14CNOVLATRKBASE-itp-WriteAccounts%-C.
  3510. [07/10/12 04:03:13.158]:ADTRACE ST: Applying to status #1.
  3511. [07/10/12 04:03:13.158]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - Initialize Realm Mapping'.
  3512. [07/10/12 04:03:13.173]:ADTRACE ST: (if-global-variable 'drv.acctTrk.enable' equal "true") = TRUE.
  3513. [07/10/12 04:03:13.173]:ADTRACE ST: (if-global-variable 'drv.acctTrk.mode' equal "fanout") = FALSE.
  3514. [07/10/12 04:03:13.173]:ADTRACE ST: Rule rejected.
  3515. [07/10/12 04:03:13.173]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled'.
  3516. [07/10/12 04:03:13.173]:ADTRACE ST: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  3517. [07/10/12 04:03:13.173]:ADTRACE ST: Rule rejected.
  3518. [07/10/12 04:03:13.173]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - query DirXML-Accounts Attribute'.
  3519. [07/10/12 04:03:13.173]:ADTRACE ST: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  3520. [07/10/12 04:03:13.173]:ADTRACE ST: Rule rejected.
  3521. [07/10/12 04:03:13.173]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - remove Dirxml-Account values on regular delete operation'.
  3522. [07/10/12 04:03:13.173]:ADTRACE ST: (if-operation match "delete|remove-association") = FALSE.
  3523. [07/10/12 04:03:13.173]:ADTRACE ST: (if-operation equal "status") = TRUE.
  3524. [07/10/12 04:03:13.173]:ADTRACE ST: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  3525. [07/10/12 04:03:13.173]:ADTRACE ST: Rule rejected.
  3526. [07/10/12 04:03:13.173]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - update DirXMLAccounts attribute on regular operations'.
  3527. [07/10/12 04:03:13.173]:ADTRACE ST: (if-op-property 'AccountTracking-Operation' not-available) = TRUE.
  3528. [07/10/12 04:03:13.173]:ADTRACE ST: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  3529. [07/10/12 04:03:13.173]:ADTRACE ST: (if-operation equal "status") = TRUE.
  3530. [07/10/12 04:03:13.173]:ADTRACE ST: (if-xpath true "./@level='success' or ./@level='warning'") = TRUE.
  3531. [07/10/12 04:03:13.173]:ADTRACE ST: (if-op-property 'AccountTracking-Operation' available) = FALSE.
  3532. [07/10/12 04:03:13.173]:ADTRACE ST: Rule rejected.
  3533. [07/10/12 04:03:13.173]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - update DirXMLAccounts attribute on mapped operations'.
  3534. [07/10/12 04:03:13.173]:ADTRACE ST: (if-xpath true "operation-data/account-tracking-operation") = FALSE.
  3535. [07/10/12 04:03:13.173]:ADTRACE ST: (if-xpath true "operation-data/account-tracking-operation") = FALSE.
  3536. [07/10/12 04:03:13.173]:ADTRACE ST: Rule rejected.
  3537. [07/10/12 04:03:13.173]:ADTRACE ST: Policy returned:
  3538. [07/10/12 04:03:13.173]:ADTRACE ST:
  3539. <nds dtdversion="1.1" ndsversion="8.7">
  3540. <source>
  3541. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  3542. <contact>Novell, Inc.</contact>
  3543. </source>
  3544. <output>
  3545. <status event-id="0" level="success"/>
  3546. </output>
  3547. </nds>
  3548. [07/10/12 04:03:13.173]:ADTRACE ST: Applying policy: %+C%14CNOVLADDCFG-itp-SubscriberUserAdd%-C.
  3549. [07/10/12 04:03:13.173]:ADTRACE ST: Applying to status #1.
  3550. [07/10/12 04:03:13.173]:ADTRACE ST: Evaluating selection criteria for rule 'Populate DirXML-ADContext on initial user add'.
  3551. [07/10/12 04:03:13.173]:ADTRACE ST: (if-operation equal "add-association") = FALSE.
  3552. [07/10/12 04:03:13.173]:ADTRACE ST: Rule rejected.
  3553. [07/10/12 04:03:13.173]:ADTRACE ST: Policy returned:
  3554. [07/10/12 04:03:13.173]:ADTRACE ST:
  3555. <nds dtdversion="1.1" ndsversion="8.7">
  3556. <source>
  3557. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  3558. <contact>Novell, Inc.</contact>
  3559. </source>
  3560. <output>
  3561. <status event-id="0" level="success"/>
  3562. </output>
  3563. </nds>
  3564. [07/10/12 04:03:13.173]:ADTRACE ST: Applying policy: %+C%14CNOVLADDCFG-itp-FormatConversions%-C.
  3565. [07/10/12 04:03:13.173]:ADTRACE ST: Applying to status #1.
  3566. [07/10/12 04:03:13.173]:ADTRACE ST: Evaluating selection criteria for rule 'streetAddress: Convert CR-LF to LF'.
  3567. [07/10/12 04:03:13.173]:ADTRACE ST: Rule selected.
  3568. [07/10/12 04:03:13.173]:ADTRACE ST: Applying rule 'streetAddress: Convert CR-LF to LF'.
  3569. [07/10/12 04:03:13.173]:ADTRACE ST: Action: do-reformat-op-attr("streetAddress",token-replace-all("\r\n","\r",token-local-variable("current-value"))).
  3570. [07/10/12 04:03:13.173]:ADTRACE ST: Evaluating selection criteria for rule 'logonHours: Convert to Login Allowed Time Map form'.
  3571. [07/10/12 04:03:13.173]:ADTRACE ST: Rule selected.
  3572. [07/10/12 04:03:13.173]:ADTRACE ST: Applying rule 'logonHours: Convert to Login Allowed Time Map form'.
  3573. [07/10/12 04:03:13.173]:ADTRACE ST: Action: do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2eDir($current-value)")).
  3574. [07/10/12 04:03:13.173]:ADTRACE ST: Evaluating selection criteria for rule 'accountExpires: Convert to Identity Vault time format'.
  3575. [07/10/12 04:03:13.189]:ADTRACE ST: Rule selected.
  3576. [07/10/12 04:03:13.189]:ADTRACE ST: Applying rule 'accountExpires: Convert to Identity Vault time format'.
  3577. [07/10/12 04:03:13.189]:ADTRACE ST: Action: do-reformat-op-attr("accountExpires",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
  3578. [07/10/12 04:03:13.189]:ADTRACE ST: Evaluating selection criteria for rule 'lockoutTime: Convert to Identity Vault time format'.
  3579. [07/10/12 04:03:13.189]:ADTRACE ST: Rule selected.
  3580. [07/10/12 04:03:13.189]:ADTRACE ST: Applying rule 'lockoutTime: Convert to Identity Vault time format'.
  3581. [07/10/12 04:03:13.189]:ADTRACE ST: Action: do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
  3582. [07/10/12 04:03:13.189]:ADTRACE ST: Policy returned:
  3583. [07/10/12 04:03:13.189]:ADTRACE ST:
  3584. <nds dtdversion="1.1" ndsversion="8.7">
  3585. <source>
  3586. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  3587. <contact>Novell, Inc.</contact>
  3588. </source>
  3589. <output>
  3590. <status event-id="0" level="success"/>
  3591. </output>
  3592. </nds>
  3593. [07/10/12 04:03:13.189]:ADTRACE ST: Applying policy: %+C%14CNOVLDATACOLL-itp-DataCollectionQuerySupport%-C.
  3594. [07/10/12 04:03:13.189]:ADTRACE ST: Applying to status #1.
  3595. [07/10/12 04:03:13.189]:ADTRACE ST: Evaluating selection criteria for rule 'Rename @association-ref to @association and change @type from "dn" to "{dn}"'.
  3596. [07/10/12 04:03:13.189]:ADTRACE ST: (if-operation equal "instance") = FALSE.
  3597. [07/10/12 04:03:13.189]:ADTRACE ST: Rule rejected.
  3598. [07/10/12 04:03:13.189]:ADTRACE ST: Policy returned:
  3599. [07/10/12 04:03:13.189]:ADTRACE ST:
  3600. <nds dtdversion="1.1" ndsversion="8.7">
  3601. <source>
  3602. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  3603. <contact>Novell, Inc.</contact>
  3604. </source>
  3605. <output>
  3606. <status event-id="0" level="success"/>
  3607. </output>
  3608. </nds>
  3609. [07/10/12 04:03:13.189]:ADTRACE ST: Applying policy: %+C%14CNOVLADENTEX-itp-EntitlementsImpl%-C.
  3610. [07/10/12 04:03:13.189]:ADTRACE ST: Applying to status #1.
  3611. [07/10/12 04:03:13.189]:ADTRACE ST: Evaluating selection criteria for rule 'Intercept ADDomain (tagged identity query) query response'.
  3612. [07/10/12 04:03:13.189]:ADTRACE ST: (if-operation equal "instance") = FALSE.
  3613. [07/10/12 04:03:13.189]:ADTRACE ST: Rule rejected.
  3614. [07/10/12 04:03:13.189]:ADTRACE ST: Evaluating selection criteria for rule 'Intercept ADDomain (tagged identity query) query status'.
  3615. [07/10/12 04:03:13.189]:ADTRACE ST: (if-xpath true "../status[@event-id='query-driver-ident']/operation-data/@UserAccountEntitlementQuery") = FALSE.
  3616. [07/10/12 04:03:13.189]:ADTRACE ST: Rule rejected.
  3617. [07/10/12 04:03:13.189]:ADTRACE ST: Evaluating selection criteria for rule 'Check target of add-association for group membership entitlements'.
  3618. [07/10/12 04:03:13.189]:ADTRACE ST: (if-global-variable 'drv.entitlement.Group' equal "true") = TRUE.
  3619. [07/10/12 04:03:13.189]:ADTRACE ST: (if-operation equal "add-association") = FALSE.
  3620. [07/10/12 04:03:13.189]:ADTRACE ST: Rule rejected.
  3621. [07/10/12 04:03:13.189]:ADTRACE ST: Evaluating selection criteria for rule 'Check target of add-association for Exchange mailbox entitlements'.
  3622. [07/10/12 04:03:13.189]:ADTRACE ST: (if-global-variable 'drv.exchMailboxMethod' equal "entitlement") = FALSE.
  3623. [07/10/12 04:03:13.189]:ADTRACE ST: Rule rejected.
  3624. [07/10/12 04:03:13.189]:ADTRACE ST: Policy returned:
  3625. [07/10/12 04:03:13.189]:ADTRACE ST:
  3626. <nds dtdversion="1.1" ndsversion="8.7">
  3627. <source>
  3628. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  3629. <contact>Novell, Inc.</contact>
  3630. </source>
  3631. <output>
  3632. <status event-id="0" level="success"/>
  3633. </output>
  3634. </nds>
  3635. [07/10/12 04:03:13.189]:ADTRACE ST: Applying policy: %+C%14CNOVLPWDSYNC-itp-EmailOnFailedPwdSub%-C.
  3636. [07/10/12 04:03:13.189]:ADTRACE ST: Applying to status #1.
  3637. [07/10/12 04:03:13.189]:ADTRACE ST: Evaluating selection criteria for rule 'Send e-mail on a failure when subscribing to passwords'.
  3638. [07/10/12 04:03:13.189]:ADTRACE ST: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  3639. [07/10/12 04:03:13.189]:ADTRACE ST: (if-operation equal "status") = TRUE.
  3640. [07/10/12 04:03:13.189]:ADTRACE ST: (if-xpath true "self::status[@level != 'success'][text() != '']/operation-data/password-subscribe-status/association[text() != '']") = FALSE.
  3641. [07/10/12 04:03:13.189]:ADTRACE ST: Rule rejected.
  3642. [07/10/12 04:03:13.189]:ADTRACE ST: Evaluating selection criteria for rule 'Send e-mail on failure to reset connected system password using the Identity Vault password'.
  3643. [07/10/12 04:03:13.189]:ADTRACE ST: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  3644. [07/10/12 04:03:13.204]:ADTRACE ST: (if-operation equal "status") = TRUE.
  3645. [07/10/12 04:03:13.204]:ADTRACE ST: (if-xpath true "self::status[@level != 'success']/operation-data/password-reset-status") = FALSE.
  3646. [07/10/12 04:03:13.204]:ADTRACE ST: Rule rejected.
  3647. [07/10/12 04:03:13.204]:ADTRACE ST: Policy returned:
  3648. [07/10/12 04:03:13.204]:ADTRACE ST:
  3649. <nds dtdversion="1.1" ndsversion="8.7">
  3650. <source>
  3651. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  3652. <contact>Novell, Inc.</contact>
  3653. </source>
  3654. <output>
  3655. <status event-id="0" level="success"/>
  3656. </output>
  3657. </nds>
  3658. [07/10/12 04:03:13.204]:ADTRACE ST: Applying schema mapping policies to input.
  3659. [07/10/12 04:03:13.204]:ADTRACE ST: Applying policy: %+C%14CNOVLDATACOLL-smp-SkipSchemaMapping%-C.
  3660. [07/10/12 04:03:13.204]:ADTRACE ST: Applying to status #1.
  3661. [07/10/12 04:03:13.204]:ADTRACE ST: Evaluating selection criteria for rule 'skip'.
  3662. [07/10/12 04:03:13.204]:ADTRACE ST: (if-operation equal "instance") = FALSE.
  3663. [07/10/12 04:03:13.204]:ADTRACE ST: Rule rejected.
  3664. [07/10/12 04:03:13.204]:ADTRACE ST: Evaluating selection criteria for rule 'restore'.
  3665. [07/10/12 04:03:13.204]:ADTRACE ST: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  3666. [07/10/12 04:03:13.204]:ADTRACE ST: Rule rejected.
  3667. [07/10/12 04:03:13.204]:ADTRACE ST: Policy returned:
  3668. [07/10/12 04:03:13.204]:ADTRACE ST:
  3669. <nds dtdversion="1.1" ndsversion="8.7">
  3670. <source>
  3671. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  3672. <contact>Novell, Inc.</contact>
  3673. </source>
  3674. <output>
  3675. <status event-id="0" level="success"/>
  3676. </output>
  3677. </nds>
  3678. [07/10/12 04:03:13.204]:ADTRACE ST: Applying policy: %+C%14CNOVLADDCFG-smp%-C.
  3679. [07/10/12 04:03:13.204]:ADTRACE ST: Applying policy: %+C%14CNOVLDATACOLL-smp-SkipSchemaMapping%-C.
  3680. [07/10/12 04:03:13.204]:ADTRACE ST: Applying to status #1.
  3681. [07/10/12 04:03:13.204]:ADTRACE ST: Evaluating selection criteria for rule 'skip'.
  3682. [07/10/12 04:03:13.204]:ADTRACE ST: (if-operation equal "instance") = FALSE.
  3683. [07/10/12 04:03:13.204]:ADTRACE ST: Rule rejected.
  3684. [07/10/12 04:03:13.204]:ADTRACE ST: Evaluating selection criteria for rule 'restore'.
  3685. [07/10/12 04:03:13.204]:ADTRACE ST: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  3686. [07/10/12 04:03:13.204]:ADTRACE ST: Rule rejected.
  3687. [07/10/12 04:03:13.204]:ADTRACE ST: Policy returned:
  3688. [07/10/12 04:03:13.204]:ADTRACE ST:
  3689. <nds dtdversion="1.1" ndsversion="8.7">
  3690. <source>
  3691. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  3692. <contact>Novell, Inc.</contact>
  3693. </source>
  3694. <output>
  3695. <status event-id="0" level="success"/>
  3696. </output>
  3697. </nds>
  3698. [07/10/12 04:03:13.204]:ADTRACE ST: Resolving association references.
  3699. [07/10/12 04:03:13.204]:ADTRACE ST: Query from policy result
  3700. [07/10/12 04:03:13.204]:ADTRACE ST:
  3701. <nds dtdversion="1.1" ndsversion="8.7">
  3702. <source>
  3703. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  3704. <contact>Novell, Inc.</contact>
  3705. </source>
  3706. <output>
  3707. <status event-id="0" level="success"/>
  3708. </output>
  3709. </nds>
  3710. [07/10/12 04:03:13.204]:ADTRACE ST: No matches found.
  3711. [07/10/12 04:03:13.204]:ADTRACE ST: Evaluating selection criteria for rule 'match users based on full name'.
  3712. [07/10/12 04:03:13.204]:ADTRACE ST: (if-class-name equal "User") = TRUE.
  3713. [07/10/12 04:03:13.204]:ADTRACE ST: (if-global-variable 'FullNameMap' equal "true") = TRUE.
  3714. [07/10/12 04:03:13.204]:ADTRACE ST: (if-op-attr 'Full Name' available) = TRUE.
  3715. [07/10/12 04:03:13.204]:ADTRACE ST: Rule selected.
  3716. [07/10/12 04:03:13.204]:ADTRACE ST: Applying rule 'match users based on full name'.
  3717. [07/10/12 04:03:13.204]:ADTRACE ST: Action: do-if().
  3718. [07/10/12 04:03:13.204]:ADTRACE ST: Evaluating conditions.
  3719. [07/10/12 04:03:13.204]:ADTRACE ST: (if-global-variable 'drv.subPlacementType' equal "flat") = TRUE.
  3720. [07/10/12 04:03:13.204]:ADTRACE ST: Performing if actions.
  3721. [07/10/12 04:03:13.220]:ADTRACE ST: Action: do-find-matching-object(scope="entry",arg-dn("CN="+token-escape-for-dest-dn(token-attr("Full Name"))+","+token-global-variable("drv.user.container"))).
  3722. [07/10/12 04:03:13.220]:ADTRACE ST: arg-dn("CN="+token-escape-for-dest-dn(token-attr("Full Name"))+","+token-global-variable("drv.user.container"))
  3723. [07/10/12 04:03:13.220]:ADTRACE ST: token-text("CN=")
  3724. [07/10/12 04:03:13.220]:ADTRACE ST: token-escape-for-dest-dn(token-attr("Full Name"))
  3725. [07/10/12 04:03:13.220]:ADTRACE ST: token-escape-for-dest-dn(token-attr("Full Name"))
  3726. [07/10/12 04:03:13.220]:ADTRACE ST: token-attr("Full Name")
  3727. [07/10/12 04:03:13.220]:ADTRACE ST: Token Value: "test user1".
  3728. [07/10/12 04:03:13.220]:ADTRACE ST: Arg Value: "test user1".
  3729. [07/10/12 04:03:13.220]:ADTRACE ST: Token Value: "test user1".
  3730. [07/10/12 04:03:13.220]:ADTRACE ST: token-text(",")
  3731. [07/10/12 04:03:13.220]:ADTRACE ST: token-global-variable("drv.user.container")
  3732. [07/10/12 04:03:13.220]:ADTRACE ST: Token Value: "OU=users,OU=NOVELLUSER,DC=idm,DC=com".
  3733. [07/10/12 04:03:13.220]:ADTRACE ST: Arg Value: "CN=test user1,OU=users,OU=NOVELLUSER,DC=idm,DC=com".
  3734. [07/10/12 04:03:13.220]:ADTRACE ST: Query from policy
  3735. [07/10/12 04:03:13.220]:ADTRACE ST:
  3736. <nds dtdversion="4.0" ndsversion="8.x">
  3737. <source>
  3738. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  3739. <contact>Novell, Inc.</contact>
  3740. </source>
  3741. <input>
  3742. <query class-name="User" dest-dn="CN=test user1,OU=users,OU=NOVELLUSER,DC=idm,DC=com" scope="entry">
  3743. <search-class class-name="User"/>
  3744. <read-attr/>
  3745. </query>
  3746. </input>
  3747. </nds>
  3748. [07/10/12 04:03:13.220]:ADTRACE ST: Fixing up association references.
  3749. [07/10/12 04:03:13.220]:ADTRACE ST: Applying schema mapping policies to output.
  3750. [07/10/12 04:03:13.220]:ADTRACE ST: Applying policy: %+C%14CNOVLDATACOLL-smp-SkipSchemaMapping%-C.
  3751. [07/10/12 04:03:13.220]:ADTRACE ST: Applying to query #1.
  3752. [07/10/12 04:03:13.220]:ADTRACE ST: Evaluating selection criteria for rule 'skip'.
  3753. [07/10/12 04:03:13.220]:ADTRACE ST: (if-operation equal "instance") = FALSE.
  3754. [07/10/12 04:03:13.220]:ADTRACE ST: Rule rejected.
  3755. [07/10/12 04:03:13.220]:ADTRACE ST: Evaluating selection criteria for rule 'restore'.
  3756. [07/10/12 04:03:13.220]:ADTRACE ST: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  3757. [07/10/12 04:03:13.220]:ADTRACE ST: Rule rejected.
  3758. [07/10/12 04:03:13.220]:ADTRACE ST: Policy returned:
  3759. [07/10/12 04:03:13.220]:ADTRACE ST:
  3760. <nds dtdversion="4.0" ndsversion="8.x">
  3761. <source>
  3762. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  3763. <contact>Novell, Inc.</contact>
  3764. </source>
  3765. <input>
  3766. <query class-name="User" dest-dn="CN=test user1,OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="entry">
  3767. <search-class class-name="User"/>
  3768. <read-attr/>
  3769. </query>
  3770. </input>
  3771. </nds>
  3772. [07/10/12 04:03:13.220]:ADTRACE ST: Applying policy: %+C%14CNOVLADDCFG-smp%-C.
  3773. [07/10/12 04:03:13.220]:ADTRACE ST: Mapping class-name 'User' to 'user'.
  3774. [07/10/12 04:03:13.220]:ADTRACE ST: Mapping class-name 'User' to 'user'.
  3775. [07/10/12 04:03:13.220]:ADTRACE ST: Applying policy: %+C%14CNOVLDATACOLL-smp-SkipSchemaMapping%-C.
  3776. [07/10/12 04:03:13.220]:ADTRACE ST: Applying to query #1.
  3777. [07/10/12 04:03:13.220]:ADTRACE ST: Evaluating selection criteria for rule 'skip'.
  3778. [07/10/12 04:03:13.220]:ADTRACE ST: (if-operation equal "instance") = FALSE.
  3779. [07/10/12 04:03:13.220]:ADTRACE ST: Rule rejected.
  3780. [07/10/12 04:03:13.220]:ADTRACE ST: Evaluating selection criteria for rule 'restore'.
  3781. [07/10/12 04:03:13.220]:ADTRACE ST: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  3782. [07/10/12 04:03:13.220]:ADTRACE ST: Rule rejected.
  3783. [07/10/12 04:03:13.220]:ADTRACE ST: Policy returned:
  3784. [07/10/12 04:03:13.220]:ADTRACE ST:
  3785. <nds dtdversion="4.0" ndsversion="8.x">
  3786. <source>
  3787. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  3788. <contact>Novell, Inc.</contact>
  3789. </source>
  3790. <input>
  3791. <query class-name="user" dest-dn="CN=test user1,OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="entry">
  3792. <search-class class-name="user"/>
  3793. <read-attr/>
  3794. </query>
  3795. </input>
  3796. </nds>
  3797. [07/10/12 04:03:13.220]:ADTRACE ST: Applying output transformation policies.
  3798. [07/10/12 04:03:13.220]:ADTRACE ST: Applying policy: %+C%14CNOVLADENTEX-otp-EntitlementsImpl%-C.
  3799. [07/10/12 04:03:13.220]:ADTRACE ST: Applying to query #1.
  3800. [07/10/12 04:03:13.220]:ADTRACE ST: Evaluating selection criteria for rule 'Intercept outbound queries for ADDomain'.
  3801. [07/10/12 04:03:13.220]:ADTRACE ST: (if-class-name equal "ADDomain") = FALSE.
  3802. [07/10/12 04:03:13.236]:ADTRACE ST: Rule rejected.
  3803. [07/10/12 04:03:13.236]:ADTRACE ST: Policy returned:
  3804. [07/10/12 04:03:13.236]:ADTRACE ST:
  3805. <nds dtdversion="4.0" ndsversion="8.x">
  3806. <source>
  3807. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  3808. <contact>Novell, Inc.</contact>
  3809. </source>
  3810. <input>
  3811. <query class-name="user" dest-dn="CN=test user1,OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="entry">
  3812. <search-class class-name="user"/>
  3813. <read-attr/>
  3814. </query>
  3815. </input>
  3816. </nds>
  3817. [07/10/12 04:03:13.236]:ADTRACE ST: Applying policy: %+C%14CNOVLADENTEX-otp-ExchangeMailboxPolicy%-C.
  3818. [07/10/12 04:03:13.236]:ADTRACE ST: Applying to query #1.
  3819. [07/10/12 04:03:13.236]:ADTRACE ST: Evaluating selection criteria for rule 'Exchange: Remove HomeMDB when disabled'.
  3820. [07/10/12 04:03:13.236]:ADTRACE ST: (if-global-variable 'drv.exchMailboxMethod' equal "disabled") = TRUE.
  3821. [07/10/12 04:03:13.236]:ADTRACE ST: Rule selected.
  3822. [07/10/12 04:03:13.236]:ADTRACE ST: Applying rule 'Exchange: Remove HomeMDB when disabled'.
  3823. [07/10/12 04:03:13.236]:ADTRACE ST: Action: do-strip-op-attr("homeMDB").
  3824. [07/10/12 04:03:13.236]:ADTRACE ST: Policy returned:
  3825. [07/10/12 04:03:13.236]:ADTRACE ST:
  3826. <nds dtdversion="4.0" ndsversion="8.x">
  3827. <source>
  3828. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  3829. <contact>Novell, Inc.</contact>
  3830. </source>
  3831. <input>
  3832. <query class-name="user" dest-dn="CN=test user1,OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="entry">
  3833. <search-class class-name="user"/>
  3834. <read-attr/>
  3835. </query>
  3836. </input>
  3837. </nds>
  3838. [07/10/12 04:03:13.236]:ADTRACE ST: Applying policy: %+C%14CNOVLADDCFG-otp-FormatConversions%-C.
  3839. [07/10/12 04:03:13.236]:ADTRACE ST: Applying to query #1.
  3840. [07/10/12 04:03:13.236]:ADTRACE ST: Evaluating selection criteria for rule 'Street Address: Convert LF to CR-LF'.
  3841. [07/10/12 04:03:13.236]:ADTRACE ST: Rule selected.
  3842. [07/10/12 04:03:13.236]:ADTRACE ST: Applying rule 'Street Address: Convert LF to CR-LF'.
  3843. [07/10/12 04:03:13.236]:ADTRACE ST: Action: do-reformat-op-attr("streetAddress",token-replace-all("[^\r]\n","\r\n",token-local-variable("current-value"))).
  3844. [07/10/12 04:03:13.236]:ADTRACE ST: Evaluating selection criteria for rule 'logonHours: Convert to Active Directory form'.
  3845. [07/10/12 04:03:13.236]:ADTRACE ST: Rule selected.
  3846. [07/10/12 04:03:13.236]:ADTRACE ST: Applying rule 'logonHours: Convert to Active Directory form'.
  3847. [07/10/12 04:03:13.236]:ADTRACE ST: Action: do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2ADLenient($current-value)")).
  3848. [07/10/12 04:03:13.236]:ADTRACE ST: Evaluating selection criteria for rule 'accountExpires: Convert to Active Directory form'.
  3849. [07/10/12 04:03:13.236]:ADTRACE ST: (if-op-attr 'accountExpires' changing) = FALSE.
  3850. [07/10/12 04:03:13.236]:ADTRACE ST: Rule rejected.
  3851. [07/10/12 04:03:13.236]:ADTRACE ST: Evaluating selection criteria for rule 'lockoutTime: Convert to Active Directory form'.
  3852. [07/10/12 04:03:13.236]:ADTRACE ST: Rule selected.
  3853. [07/10/12 04:03:13.236]:ADTRACE ST: Applying rule 'lockoutTime: Convert to Active Directory form'.
  3854. [07/10/12 04:03:13.236]:ADTRACE ST: Action: do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateEpoch2FileTime($current-value)")).
  3855. [07/10/12 04:03:13.236]:ADTRACE ST: Evaluating selection criteria for rule 'Add: User - convert multi-valued Telephone to single value'.
  3856. [07/10/12 04:03:13.236]:ADTRACE ST: (if-operation equal "add") = FALSE.
  3857. [07/10/12 04:03:13.236]:ADTRACE ST: Rule rejected.
  3858. [07/10/12 04:03:13.236]:ADTRACE ST: Evaluating selection criteria for rule 'update Active Directory logon name'.
  3859. [07/10/12 04:03:13.236]:ADTRACE ST: (if-xpath true "self::status[@level = 'success']/operation-data/windows-2000-logon-name") = FALSE.
  3860. [07/10/12 04:03:13.236]:ADTRACE ST: Rule rejected.
  3861. [07/10/12 04:03:13.236]:ADTRACE ST: Policy returned:
  3862. [07/10/12 04:03:13.236]:ADTRACE ST:
  3863. <nds dtdversion="4.0" ndsversion="8.x">
  3864. <source>
  3865. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  3866. <contact>Novell, Inc.</contact>
  3867. </source>
  3868. <input>
  3869. <query class-name="user" dest-dn="CN=test user1,OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="entry">
  3870. <search-class class-name="user"/>
  3871. <read-attr/>
  3872. </query>
  3873. </input>
  3874. </nds>
  3875. [07/10/12 04:03:13.236]:ADTRACE ST: Applying policy: %+C%14CNOVLADDCFG-otp-ExchangeEntitlementQuery%-C.
  3876. [07/10/12 04:03:13.251]:ADTRACE ST: Applying to query #1.
  3877. [07/10/12 04:03:13.251]:ADTRACE ST: Evaluating selection criteria for rule 'Add dest-dn to the Exchange Entitlement Query'.
  3878. [07/10/12 04:03:13.251]:ADTRACE ST: (if-operation equal "query") = TRUE.
  3879. [07/10/12 04:03:13.251]:ADTRACE ST: (if-class-name equal "msExchPrivateMDB") = FALSE.
  3880. [07/10/12 04:03:13.251]:ADTRACE ST: Rule rejected.
  3881. [07/10/12 04:03:13.251]:ADTRACE ST: Policy returned:
  3882. [07/10/12 04:03:13.251]:ADTRACE ST:
  3883. <nds dtdversion="4.0" ndsversion="8.x">
  3884. <source>
  3885. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  3886. <contact>Novell, Inc.</contact>
  3887. </source>
  3888. <input>
  3889. <query class-name="user" dest-dn="CN=test user1,OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="entry">
  3890. <search-class class-name="user"/>
  3891. <read-attr/>
  3892. </query>
  3893. </input>
  3894. </nds>
  3895. [07/10/12 04:03:13.251]:ADTRACE ST: Applying policy: %+C%14CNOVLPWDSYNC-otp-EmailOnFailedPwdPub%-C.
  3896. [07/10/12 04:03:13.251]:ADTRACE ST: Applying to query #1.
  3897. [07/10/12 04:03:13.251]:ADTRACE ST: Evaluating selection criteria for rule 'Send e-mail for a failed publish password operation'.
  3898. [07/10/12 04:03:13.251]:ADTRACE ST: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  3899. [07/10/12 04:03:13.251]:ADTRACE ST: (if-operation equal "status") = FALSE.
  3900. [07/10/12 04:03:13.251]:ADTRACE ST: Rule rejected.
  3901. [07/10/12 04:03:13.251]:ADTRACE ST: Policy returned:
  3902. [07/10/12 04:03:13.251]:ADTRACE ST:
  3903. <nds dtdversion="4.0" ndsversion="8.x">
  3904. <source>
  3905. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  3906. <contact>Novell, Inc.</contact>
  3907. </source>
  3908. <input>
  3909. <query class-name="user" dest-dn="CN=test user1,OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="entry">
  3910. <search-class class-name="user"/>
  3911. <read-attr/>
  3912. </query>
  3913. </input>
  3914. </nds>
  3915. [07/10/12 04:03:13.251]:ADTRACE ST: Applying policy: %+C%14CNOVLATRKBASE-otp-Subscribe%-C.
  3916. [07/10/12 04:03:13.251]:ADTRACE ST: Applying to query #1.
  3917. [07/10/12 04:03:13.251]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - Initialize Realm Mapping'.
  3918. [07/10/12 04:03:13.251]:ADTRACE ST: (if-global-variable 'drv.acctTrk.enable' equal "true") = TRUE.
  3919. [07/10/12 04:03:13.251]:ADTRACE ST: (if-global-variable 'drv.acctTrk.mode' equal "fanout") = FALSE.
  3920. [07/10/12 04:03:13.251]:ADTRACE ST: Rule rejected.
  3921. [07/10/12 04:03:13.251]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled or wrong object class'.
  3922. [07/10/12 04:03:13.251]:ADTRACE ST: Rule selected.
  3923. [07/10/12 04:03:13.251]:ADTRACE ST: Applying rule 'AccountTracking - disregard if disabled or wrong object class'.
  3924. [07/10/12 04:03:13.251]:ADTRACE ST: Action: do-if().
  3925. [07/10/12 04:03:13.251]:ADTRACE ST: Evaluating conditions.
  3926. [07/10/12 04:03:13.251]:ADTRACE ST: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  3927. [07/10/12 04:03:13.251]:ADTRACE ST: Performing else actions.
  3928. [07/10/12 04:03:13.251]:ADTRACE ST: Action: do-for-each(arg-node-set(token-global-variable("drv.acctTrk.objectClass"))).
  3929. [07/10/12 04:03:13.251]:ADTRACE ST: arg-node-set(token-global-variable("drv.acctTrk.objectClass"))
  3930. [07/10/12 04:03:13.251]:ADTRACE ST: token-global-variable("drv.acctTrk.objectClass")
  3931. [07/10/12 04:03:13.251]:ADTRACE ST: Token Value: {"user"}.
  3932. [07/10/12 04:03:13.251]:ADTRACE ST: Arg Value: {"user"}.
  3933. [07/10/12 04:03:13.251]:ADTRACE ST: Performing actions for local-variable(current-node) = "user".
  3934. [07/10/12 04:03:13.251]:ADTRACE ST: Action: do-if().
  3935. [07/10/12 04:03:13.251]:ADTRACE ST: Evaluating conditions.
  3936. [07/10/12 04:03:13.251]:ADTRACE ST: Expanded variable reference '$current-node$' to 'user'.
  3937. [07/10/12 04:03:13.251]:ADTRACE ST: (if-class-name equal "$current-node$") = TRUE.
  3938. [07/10/12 04:03:13.251]:ADTRACE ST: Performing if actions.
  3939. [07/10/12 04:03:13.251]:ADTRACE ST: Action: do-set-local-variable("pass",scope="policy","true").
  3940. [07/10/12 04:03:13.251]:ADTRACE ST: arg-string("true")
  3941. [07/10/12 04:03:13.251]:ADTRACE ST: token-text("true")
  3942. [07/10/12 04:03:13.251]:ADTRACE ST: Arg Value: "true".
  3943. [07/10/12 04:03:13.267]:ADTRACE ST: Action: do-if().
  3944. [07/10/12 04:03:13.267]:ADTRACE ST: Evaluating conditions.
  3945. [07/10/12 04:03:13.267]:ADTRACE ST: (if-local-variable 'pass' not-available) = FALSE.
  3946. [07/10/12 04:03:13.267]:ADTRACE ST: Performing else actions.
  3947. [07/10/12 04:03:13.267]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - add operation-data for regular operations'.
  3948. [07/10/12 04:03:13.267]:ADTRACE ST: (if-operation match "add|modify|delete|rename|move") = FALSE.
  3949. [07/10/12 04:03:13.267]:ADTRACE ST: Rule rejected.
  3950. [07/10/12 04:03:13.267]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - add operation-data for mapped operations'.
  3951. [07/10/12 04:03:13.267]:ADTRACE ST: (if-global-variable 'drv.acctTrk.mode' equal "fanout") = FALSE.
  3952. [07/10/12 04:03:13.267]:ADTRACE ST: Rule rejected.
  3953. [07/10/12 04:03:13.267]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - strip AccountTrackingAccountStatus attribute'.
  3954. [07/10/12 04:03:13.267]:ADTRACE ST: (if-op-attr 'AccountTrackingAccountStatus' available) = FALSE.
  3955. [07/10/12 04:03:13.267]:ADTRACE ST: Rule rejected.
  3956. [07/10/12 04:03:13.267]:ADTRACE ST: Policy returned:
  3957. [07/10/12 04:03:13.267]:ADTRACE ST:
  3958. <nds dtdversion="4.0" ndsversion="8.x">
  3959. <source>
  3960. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  3961. <contact>Novell, Inc.</contact>
  3962. </source>
  3963. <input>
  3964. <query class-name="user" dest-dn="CN=test user1,OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="entry">
  3965. <search-class class-name="user"/>
  3966. <read-attr/>
  3967. </query>
  3968. </input>
  3969. </nds>
  3970. [07/10/12 04:03:13.267]:ADTRACE ST: Submitting document to subscriber shim:
  3971. [07/10/12 04:03:13.267]:ADTRACE ST:
  3972. <nds dtdversion="4.0" ndsversion="8.x">
  3973. <source>
  3974. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  3975. <contact>Novell, Inc.</contact>
  3976. </source>
  3977. <input>
  3978. <query class-name="user" dest-dn="CN=test user1,OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="entry">
  3979. <search-class class-name="user"/>
  3980. <read-attr/>
  3981. </query>
  3982. </input>
  3983. </nds>
  3984. [07/10/12 04:03:13.267]:ADTRACE ST: Remote Interface Driver: Sending...
  3985. [07/10/12 04:03:13.267]:ADTRACE ST:
  3986. <nds dtdversion="4.0" ndsversion="8.x">
  3987. <source>
  3988. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  3989. <contact>Novell, Inc.</contact>
  3990. </source>
  3991. <input>
  3992. <query class-name="user" dest-dn="CN=test user1,OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="entry">
  3993. <search-class class-name="user"/>
  3994. <read-attr/>
  3995. </query>
  3996. </input>
  3997. </nds>
  3998. [07/10/12 04:03:13.267]:ADTRACE ST: Remote Interface Driver: Document sent.
  3999. [07/10/12 04:03:13.361]:ADTRACE :Remote Interface Driver: Received.
  4000. [07/10/12 04:03:13.361]:ADTRACE :
  4001. <nds dtdversion="1.1" ndsversion="8.7">
  4002. <source>
  4003. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  4004. <contact>Novell, Inc.</contact>
  4005. </source>
  4006. <output>
  4007. <status event-id="0" level="success"/>
  4008. </output>
  4009. </nds>
  4010. [07/10/12 04:03:13.361]:ADTRACE :Remote Interface Driver: Received document for subscriber channel
  4011. [07/10/12 04:03:13.361]:ADTRACE :Remote Interface Driver: Waiting for receive...
  4012. [07/10/12 04:03:13.361]:ADTRACE ST: SubscriptionShim.execute() returned:
  4013. [07/10/12 04:03:13.361]:ADTRACE ST:
  4014. <nds dtdversion="1.1" ndsversion="8.7">
  4015. <source>
  4016. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  4017. <contact>Novell, Inc.</contact>
  4018. </source>
  4019. <output>
  4020. <status event-id="0" level="success"/>
  4021. </output>
  4022. </nds>
  4023. [07/10/12 04:03:13.361]:ADTRACE ST: Applying input transformation policies.
  4024. [07/10/12 04:03:13.361]:ADTRACE ST: Applying policy: %+C%14CNOVLAUDTENTC-itp-SendEntitlementsEvents%-C.
  4025. [07/10/12 04:03:13.361]:ADTRACE ST: Applying to status #1.
  4026. [07/10/12 04:03:13.361]:ADTRACE ST: Evaluating selection criteria for rule '00031200 - Account Create By Entitlement Grant'.
  4027. [07/10/12 04:03:13.361]:ADTRACE ST: (if-operation equal "status") = TRUE.
  4028. [07/10/12 04:03:13.361]:ADTRACE ST: (if-op-property 'accountAction' equal "accountCreateByEntitlementGrant") = FALSE.
  4029. [07/10/12 04:03:13.361]:ADTRACE ST: Rule rejected.
  4030. [07/10/12 04:03:13.361]:ADTRACE ST: Evaluating selection criteria for rule '00031201 - Account Delete By Entitlement Revoke'.
  4031. [07/10/12 04:03:13.361]:ADTRACE ST: (if-operation equal "status") = TRUE.
  4032. [07/10/12 04:03:13.361]:ADTRACE ST: (if-xpath true "./operation-data/entitlement-impl/@state = '0'") = FALSE.
  4033. [07/10/12 04:03:13.361]:ADTRACE ST: (if-operation equal "status") = TRUE.
  4034. [07/10/12 04:03:13.361]:ADTRACE ST: (if-op-property 'accountAction' equal "accountDeleteByEntitlementRevoke") = FALSE.
  4035. [07/10/12 04:03:13.361]:ADTRACE ST: Rule rejected.
  4036. [07/10/12 04:03:13.361]:ADTRACE ST: Evaluating selection criteria for rule '00031202 - Account Disable By Entitlement Revoke'.
  4037. [07/10/12 04:03:13.361]:ADTRACE ST: (if-operation equal "status") = TRUE.
  4038. [07/10/12 04:03:13.361]:ADTRACE ST: (if-op-property 'accountAction' equal "accountDisableByEntitlementRevoke") = FALSE.
  4039. [07/10/12 04:03:13.376]:ADTRACE ST: Rule rejected.
  4040. [07/10/12 04:03:13.376]:ADTRACE ST: Evaluating selection criteria for rule '00031203 - Account Enable By Entitlement Grant'.
  4041. [07/10/12 04:03:13.376]:ADTRACE ST: (if-operation equal "status") = TRUE.
  4042. [07/10/12 04:03:13.376]:ADTRACE ST: (if-op-property 'accountAction' equal "accountEnableByEntitlementGrant") = FALSE.
  4043. [07/10/12 04:03:13.376]:ADTRACE ST: Rule rejected.
  4044. [07/10/12 04:03:13.376]:ADTRACE ST: Evaluating selection criteria for rule 'Generate Audit Event'.
  4045. [07/10/12 04:03:13.376]:ADTRACE ST: (if-operation equal "status") = TRUE.
  4046. [07/10/12 04:03:13.376]:ADTRACE ST: (if-local-variable 'auditEventID' available) = FALSE.
  4047. [07/10/12 04:03:13.376]:ADTRACE ST: Rule rejected.
  4048. [07/10/12 04:03:13.376]:ADTRACE ST: Policy returned:
  4049. [07/10/12 04:03:13.376]:ADTRACE ST:
  4050. <nds dtdversion="1.1" ndsversion="8.7">
  4051. <source>
  4052. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  4053. <contact>Novell, Inc.</contact>
  4054. </source>
  4055. <output>
  4056. <status event-id="0" level="success"/>
  4057. </output>
  4058. </nds>
  4059. [07/10/12 04:03:13.376]:ADTRACE ST: Applying policy: %+C%14CNOVLADENTEX-itp-InitEntitlementConfigurationResource%-C.
  4060. [07/10/12 04:03:13.376]:ADTRACE ST: Applying to status #1.
  4061. [07/10/12 04:03:13.376]:ADTRACE ST: Evaluating selection criteria for rule 'Make sure we only run once and when we're ready'.
  4062. [07/10/12 04:03:13.376]:ADTRACE ST: (if-local-variable 'objectClass' match ".+") = TRUE.
  4063. [07/10/12 04:03:13.376]:ADTRACE ST: (if-local-variable 'entConfigInitialized' equal "true") = TRUE.
  4064. [07/10/12 04:03:13.376]:ADTRACE ST: Rule selected.
  4065. [07/10/12 04:03:13.376]:ADTRACE ST: Applying rule 'Make sure we only run once and when we're ready'.
  4066. [07/10/12 04:03:13.376]:ADTRACE ST: Action: do-break().
  4067. [07/10/12 04:03:13.376]:ADTRACE ST: Policy returned:
  4068. [07/10/12 04:03:13.376]:ADTRACE ST:
  4069. <nds dtdversion="1.1" ndsversion="8.7">
  4070. <source>
  4071. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  4072. <contact>Novell, Inc.</contact>
  4073. </source>
  4074. <output>
  4075. <status event-id="0" level="success"/>
  4076. </output>
  4077. </nds>
  4078. [07/10/12 04:03:13.376]:ADTRACE ST: Applying policy: %+C%14CNOVLADMSINFO-itp-InitManagedSystemInfo%-C.
  4079. [07/10/12 04:03:13.376]:ADTRACE ST: Applying to status #1.
  4080. [07/10/12 04:03:13.376]:ADTRACE ST: Evaluating selection criteria for rule 'Make sure we only run once and when we're ready'.
  4081. [07/10/12 04:03:13.376]:ADTRACE ST: (if-local-variable 'objectClass' match ".+") = TRUE.
  4082. [07/10/12 04:03:13.376]:ADTRACE ST: (if-local-variable 'mSysInfoInitialized' equal "true") = TRUE.
  4083. [07/10/12 04:03:13.376]:ADTRACE ST: Rule selected.
  4084. [07/10/12 04:03:13.376]:ADTRACE ST: Applying rule 'Make sure we only run once and when we're ready'.
  4085. [07/10/12 04:03:13.376]:ADTRACE ST: Action: do-break().
  4086. [07/10/12 04:03:13.376]:ADTRACE ST: Policy returned:
  4087. [07/10/12 04:03:13.376]:ADTRACE ST:
  4088. <nds dtdversion="1.1" ndsversion="8.7">
  4089. <source>
  4090. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  4091. <contact>Novell, Inc.</contact>
  4092. </source>
  4093. <output>
  4094. <status event-id="0" level="success"/>
  4095. </output>
  4096. </nds>
  4097. [07/10/12 04:03:13.376]:ADTRACE ST: Applying policy: %+C%14CNOVLATRKBASE-itp-Publish%-C.
  4098. [07/10/12 04:03:13.376]:ADTRACE ST: Applying to status #1.
  4099. [07/10/12 04:03:13.376]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled or wrong object class'.
  4100. [07/10/12 04:03:13.376]:ADTRACE ST: Rule selected.
  4101. [07/10/12 04:03:13.376]:ADTRACE ST: Applying rule 'AccountTracking - disregard if disabled or wrong object class'.
  4102. [07/10/12 04:03:13.376]:ADTRACE ST: Action: do-if().
  4103. [07/10/12 04:03:13.376]:ADTRACE ST: Evaluating conditions.
  4104. [07/10/12 04:03:13.376]:ADTRACE ST: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  4105. [07/10/12 04:03:13.376]:ADTRACE ST: Performing else actions.
  4106. [07/10/12 04:03:13.376]:ADTRACE ST: Action: do-if().
  4107. [07/10/12 04:03:13.376]:ADTRACE ST: Evaluating conditions.
  4108. [07/10/12 04:03:13.376]:ADTRACE ST: (if-class-name available) = FALSE.
  4109. [07/10/12 04:03:13.376]:ADTRACE ST: Performing else actions.
  4110. [07/10/12 04:03:13.376]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - on add-association sync the operation-properties to status operations'.
  4111. [07/10/12 04:03:13.376]:ADTRACE ST: (if-operation equal "add-association") = FALSE.
  4112. [07/10/12 04:03:13.392]:ADTRACE ST: Rule rejected.
  4113. [07/10/12 04:03:13.392]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - Query for destination DN using Association'.
  4114. [07/10/12 04:03:13.392]:ADTRACE ST: (if-operation match "modify|delete|move|rename") = FALSE.
  4115. [07/10/12 04:03:13.392]:ADTRACE ST: Rule rejected.
  4116. [07/10/12 04:03:13.392]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - add interested properties to current doc for future use.'.
  4117. [07/10/12 04:03:13.392]:ADTRACE ST: (if-operation match "add|modify|delete|rename|move|status") = TRUE.
  4118. [07/10/12 04:03:13.392]:ADTRACE ST: Rule selected.
  4119. [07/10/12 04:03:13.392]:ADTRACE ST: Applying rule 'AccountTracking - add interested properties to current doc for future use.'.
  4120. [07/10/12 04:03:13.392]:ADTRACE ST: Action: do-for-each(arg-node-set(token-global-variable("drv.acctTrk.identifiers"))).
  4121. [07/10/12 04:03:13.392]:ADTRACE ST: arg-node-set(token-global-variable("drv.acctTrk.identifiers"))
  4122. [07/10/12 04:03:13.392]:ADTRACE ST: token-global-variable("drv.acctTrk.identifiers")
  4123. [07/10/12 04:03:13.392]:ADTRACE ST: Token Value: {"sAMAccountName","userPrincipalName","LDAPDN","association"}.
  4124. [07/10/12 04:03:13.392]:ADTRACE ST: Arg Value: {"sAMAccountName","userPrincipalName","LDAPDN","association"}.
  4125. [07/10/12 04:03:13.392]:ADTRACE ST: Performing actions for local-variable(current-node) = "sAMAccountName".
  4126. [07/10/12 04:03:13.392]:ADTRACE ST: Action: do-if().
  4127. [07/10/12 04:03:13.392]:ADTRACE ST: Evaluating conditions.
  4128. [07/10/12 04:03:13.392]:ADTRACE ST: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  4129. [07/10/12 04:03:13.392]:ADTRACE ST: Performing else actions.
  4130. [07/10/12 04:03:13.392]:ADTRACE ST: Action: do-if().
  4131. [07/10/12 04:03:13.392]:ADTRACE ST: Evaluating conditions.
  4132. [07/10/12 04:03:13.392]:ADTRACE ST: (if-local-variable 'current-node' equal "association") = FALSE.
  4133. [07/10/12 04:03:13.392]:ADTRACE ST: Performing else actions.
  4134. [07/10/12 04:03:13.392]:ADTRACE ST: Action: do-if().
  4135. [07/10/12 04:03:13.392]:ADTRACE ST: Evaluating conditions.
  4136. [07/10/12 04:03:13.392]:ADTRACE ST: Expanded variable reference '$current-node$' to 'sAMAccountName'.
  4137. [07/10/12 04:03:13.408]:ADTRACE ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  4138. [07/10/12 04:03:13.408]:ADTRACE ST: Expanded variable reference '$current-node$' to 'sAMAccountName'.
  4139. [07/10/12 04:03:13.408]:ADTRACE ST: (if-op-attr '$current-node$' available) = FALSE.
  4140. [07/10/12 04:03:13.408]:ADTRACE ST: Performing else actions.
  4141. [07/10/12 04:03:13.408]:ADTRACE ST: Performing actions for local-variable(current-node) = "userPrincipalName".
  4142. [07/10/12 04:03:13.408]:ADTRACE ST: Action: do-if().
  4143. [07/10/12 04:03:13.408]:ADTRACE ST: Evaluating conditions.
  4144. [07/10/12 04:03:13.408]:ADTRACE ST: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  4145. [07/10/12 04:03:13.408]:ADTRACE ST: Performing else actions.
  4146. [07/10/12 04:03:13.408]:ADTRACE ST: Action: do-if().
  4147. [07/10/12 04:03:13.408]:ADTRACE ST: Evaluating conditions.
  4148. [07/10/12 04:03:13.408]:ADTRACE ST: (if-local-variable 'current-node' equal "association") = FALSE.
  4149. [07/10/12 04:03:13.408]:ADTRACE ST: Performing else actions.
  4150. [07/10/12 04:03:13.408]:ADTRACE ST: Action: do-if().
  4151. [07/10/12 04:03:13.408]:ADTRACE ST: Evaluating conditions.
  4152. [07/10/12 04:03:13.408]:ADTRACE ST: Expanded variable reference '$current-node$' to 'userPrincipalName'.
  4153. [07/10/12 04:03:13.408]:ADTRACE ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  4154. [07/10/12 04:03:13.408]:ADTRACE ST: Expanded variable reference '$current-node$' to 'userPrincipalName'.
  4155. [07/10/12 04:03:13.408]:ADTRACE ST: (if-op-attr '$current-node$' available) = FALSE.
  4156. [07/10/12 04:03:13.408]:ADTRACE ST: Performing else actions.
  4157. [07/10/12 04:03:13.408]:ADTRACE ST: Performing actions for local-variable(current-node) = "LDAPDN".
  4158. [07/10/12 04:03:13.408]:ADTRACE ST: Action: do-if().
  4159. [07/10/12 04:03:13.408]:ADTRACE ST: Evaluating conditions.
  4160. [07/10/12 04:03:13.408]:ADTRACE ST: (if-local-variable 'current-node' equal "LDAPDN") = TRUE.
  4161. [07/10/12 04:03:13.408]:ADTRACE ST: Expanded variable reference '$current-node$' to 'LDAPDN'.
  4162. [07/10/12 04:03:13.408]:ADTRACE ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  4163. [07/10/12 04:03:13.408]:ADTRACE ST: (if-src-dn available) = FALSE.
  4164. [07/10/12 04:03:13.408]:ADTRACE ST: Performing else actions.
  4165. [07/10/12 04:03:13.408]:ADTRACE ST: Action: do-if().
  4166. [07/10/12 04:03:13.408]:ADTRACE ST: Evaluating conditions.
  4167. [07/10/12 04:03:13.408]:ADTRACE ST: (if-local-variable 'current-node' equal "association") = FALSE.
  4168. [07/10/12 04:03:13.408]:ADTRACE ST: Performing else actions.
  4169. [07/10/12 04:03:13.408]:ADTRACE ST: Action: do-if().
  4170. [07/10/12 04:03:13.408]:ADTRACE ST: Evaluating conditions.
  4171. [07/10/12 04:03:13.408]:ADTRACE ST: Expanded variable reference '$current-node$' to 'LDAPDN'.
  4172. [07/10/12 04:03:13.408]:ADTRACE ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  4173. [07/10/12 04:03:13.408]:ADTRACE ST: Expanded variable reference '$current-node$' to 'LDAPDN'.
  4174. [07/10/12 04:03:13.408]:ADTRACE ST: (if-op-attr '$current-node$' available) = FALSE.
  4175. [07/10/12 04:03:13.408]:ADTRACE ST: Performing else actions.
  4176. [07/10/12 04:03:13.408]:ADTRACE ST: Performing actions for local-variable(current-node) = "association".
  4177. [07/10/12 04:03:13.408]:ADTRACE ST: Action: do-if().
  4178. [07/10/12 04:03:13.408]:ADTRACE ST: Evaluating conditions.
  4179. [07/10/12 04:03:13.408]:ADTRACE ST: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  4180. [07/10/12 04:03:13.423]:ADTRACE ST: Performing else actions.
  4181. [07/10/12 04:03:13.423]:ADTRACE ST: Action: do-if().
  4182. [07/10/12 04:03:13.423]:ADTRACE ST: Evaluating conditions.
  4183. [07/10/12 04:03:13.423]:ADTRACE ST: (if-local-variable 'current-node' equal "association") = TRUE.
  4184. [07/10/12 04:03:13.423]:ADTRACE ST: Expanded variable reference '$current-node$' to 'association'.
  4185. [07/10/12 04:03:13.423]:ADTRACE ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  4186. [07/10/12 04:03:13.423]:ADTRACE ST: (if-association available) = FALSE.
  4187. [07/10/12 04:03:13.423]:ADTRACE ST: Performing else actions.
  4188. [07/10/12 04:03:13.423]:ADTRACE ST: Action: do-if().
  4189. [07/10/12 04:03:13.423]:ADTRACE ST: Evaluating conditions.
  4190. [07/10/12 04:03:13.423]:ADTRACE ST: Expanded variable reference '$current-node$' to 'association'.
  4191. [07/10/12 04:03:13.423]:ADTRACE ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  4192. [07/10/12 04:03:13.423]:ADTRACE ST: Expanded variable reference '$current-node$' to 'association'.
  4193. [07/10/12 04:03:13.423]:ADTRACE ST: (if-op-attr '$current-node$' available) = FALSE.
  4194. [07/10/12 04:03:13.423]:ADTRACE ST: Performing else actions.
  4195. [07/10/12 04:03:13.423]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - Initialize status properties on published events'.
  4196. [07/10/12 04:03:13.423]:ADTRACE ST: (if-operation match "add|modify|delete|rename|move") = FALSE.
  4197. [07/10/12 04:03:13.423]:ADTRACE ST: Rule rejected.
  4198. [07/10/12 04:03:13.423]:ADTRACE ST: Policy returned:
  4199. [07/10/12 04:03:13.423]:ADTRACE ST:
  4200. <nds dtdversion="1.1" ndsversion="8.7">
  4201. <source>
  4202. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  4203. <contact>Novell, Inc.</contact>
  4204. </source>
  4205. <output>
  4206. <status event-id="0" level="success"/>
  4207. </output>
  4208. </nds>
  4209. [07/10/12 04:03:13.423]:ADTRACE ST: Applying policy: %+C%14CNOVLATRKBASE-itp-WriteAccounts%-C.
  4210. [07/10/12 04:03:13.423]:ADTRACE ST: Applying to status #1.
  4211. [07/10/12 04:03:13.423]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - Initialize Realm Mapping'.
  4212. [07/10/12 04:03:13.423]:ADTRACE ST: (if-global-variable 'drv.acctTrk.enable' equal "true") = TRUE.
  4213. [07/10/12 04:03:13.423]:ADTRACE ST: (if-global-variable 'drv.acctTrk.mode' equal "fanout") = FALSE.
  4214. [07/10/12 04:03:13.423]:ADTRACE ST: Rule rejected.
  4215. [07/10/12 04:03:13.423]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled'.
  4216. [07/10/12 04:03:13.423]:ADTRACE ST: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  4217. [07/10/12 04:03:13.423]:ADTRACE ST: Rule rejected.
  4218. [07/10/12 04:03:13.423]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - query DirXML-Accounts Attribute'.
  4219. [07/10/12 04:03:13.423]:ADTRACE ST: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  4220. [07/10/12 04:03:13.423]:ADTRACE ST: Rule rejected.
  4221. [07/10/12 04:03:13.423]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - remove Dirxml-Account values on regular delete operation'.
  4222. [07/10/12 04:03:13.423]:ADTRACE ST: (if-operation match "delete|remove-association") = FALSE.
  4223. [07/10/12 04:03:13.423]:ADTRACE ST: (if-operation equal "status") = TRUE.
  4224. [07/10/12 04:03:13.423]:ADTRACE ST: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  4225. [07/10/12 04:03:13.423]:ADTRACE ST: Rule rejected.
  4226. [07/10/12 04:03:13.423]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - update DirXMLAccounts attribute on regular operations'.
  4227. [07/10/12 04:03:13.423]:ADTRACE ST: (if-op-property 'AccountTracking-Operation' not-available) = TRUE.
  4228. [07/10/12 04:03:13.423]:ADTRACE ST: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  4229. [07/10/12 04:03:13.423]:ADTRACE ST: (if-operation equal "status") = TRUE.
  4230. [07/10/12 04:03:13.423]:ADTRACE ST: (if-xpath true "./@level='success' or ./@level='warning'") = TRUE.
  4231. [07/10/12 04:03:13.423]:ADTRACE ST: (if-op-property 'AccountTracking-Operation' available) = FALSE.
  4232. [07/10/12 04:03:13.439]:ADTRACE ST: Rule rejected.
  4233. [07/10/12 04:03:13.439]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - update DirXMLAccounts attribute on mapped operations'.
  4234. [07/10/12 04:03:13.439]:ADTRACE ST: (if-xpath true "operation-data/account-tracking-operation") = FALSE.
  4235. [07/10/12 04:03:13.439]:ADTRACE ST: (if-xpath true "operation-data/account-tracking-operation") = FALSE.
  4236. [07/10/12 04:03:13.439]:ADTRACE ST: Rule rejected.
  4237. [07/10/12 04:03:13.439]:ADTRACE ST: Policy returned:
  4238. [07/10/12 04:03:13.439]:ADTRACE ST:
  4239. <nds dtdversion="1.1" ndsversion="8.7">
  4240. <source>
  4241. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  4242. <contact>Novell, Inc.</contact>
  4243. </source>
  4244. <output>
  4245. <status event-id="0" level="success"/>
  4246. </output>
  4247. </nds>
  4248. [07/10/12 04:03:13.439]:ADTRACE ST: Applying policy: %+C%14CNOVLADDCFG-itp-SubscriberUserAdd%-C.
  4249. [07/10/12 04:03:13.439]:ADTRACE ST: Applying to status #1.
  4250. [07/10/12 04:03:13.439]:ADTRACE ST: Evaluating selection criteria for rule 'Populate DirXML-ADContext on initial user add'.
  4251. [07/10/12 04:03:13.439]:ADTRACE ST: (if-operation equal "add-association") = FALSE.
  4252. [07/10/12 04:03:13.439]:ADTRACE ST: Rule rejected.
  4253. [07/10/12 04:03:13.439]:ADTRACE ST: Policy returned:
  4254. [07/10/12 04:03:13.439]:ADTRACE ST:
  4255. <nds dtdversion="1.1" ndsversion="8.7">
  4256. <source>
  4257. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  4258. <contact>Novell, Inc.</contact>
  4259. </source>
  4260. <output>
  4261. <status event-id="0" level="success"/>
  4262. </output>
  4263. </nds>
  4264. [07/10/12 04:03:13.439]:ADTRACE ST: Applying policy: %+C%14CNOVLADDCFG-itp-FormatConversions%-C.
  4265. [07/10/12 04:03:13.439]:ADTRACE ST: Applying to status #1.
  4266. [07/10/12 04:03:13.439]:ADTRACE ST: Evaluating selection criteria for rule 'streetAddress: Convert CR-LF to LF'.
  4267. [07/10/12 04:03:13.439]:ADTRACE ST: Rule selected.
  4268. [07/10/12 04:03:13.439]:ADTRACE ST: Applying rule 'streetAddress: Convert CR-LF to LF'.
  4269. [07/10/12 04:03:13.439]:ADTRACE ST: Action: do-reformat-op-attr("streetAddress",token-replace-all("\r\n","\r",token-local-variable("current-value"))).
  4270. [07/10/12 04:03:13.439]:ADTRACE ST: Evaluating selection criteria for rule 'logonHours: Convert to Login Allowed Time Map form'.
  4271. [07/10/12 04:03:13.439]:ADTRACE ST: Rule selected.
  4272. [07/10/12 04:03:13.439]:ADTRACE ST: Applying rule 'logonHours: Convert to Login Allowed Time Map form'.
  4273. [07/10/12 04:03:13.439]:ADTRACE ST: Action: do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2eDir($current-value)")).
  4274. [07/10/12 04:03:13.439]:ADTRACE ST: Evaluating selection criteria for rule 'accountExpires: Convert to Identity Vault time format'.
  4275. [07/10/12 04:03:13.439]:ADTRACE ST: Rule selected.
  4276. [07/10/12 04:03:13.439]:ADTRACE ST: Applying rule 'accountExpires: Convert to Identity Vault time format'.
  4277. [07/10/12 04:03:13.439]:ADTRACE ST: Action: do-reformat-op-attr("accountExpires",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
  4278. [07/10/12 04:03:13.439]:ADTRACE ST: Evaluating selection criteria for rule 'lockoutTime: Convert to Identity Vault time format'.
  4279. [07/10/12 04:03:13.439]:ADTRACE ST: Rule selected.
  4280. [07/10/12 04:03:13.439]:ADTRACE ST: Applying rule 'lockoutTime: Convert to Identity Vault time format'.
  4281. [07/10/12 04:03:13.439]:ADTRACE ST: Action: do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
  4282. [07/10/12 04:03:13.439]:ADTRACE ST: Policy returned:
  4283. [07/10/12 04:03:13.439]:ADTRACE ST:
  4284. <nds dtdversion="1.1" ndsversion="8.7">
  4285. <source>
  4286. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  4287. <contact>Novell, Inc.</contact>
  4288. </source>
  4289. <output>
  4290. <status event-id="0" level="success"/>
  4291. </output>
  4292. </nds>
  4293. [07/10/12 04:03:13.439]:ADTRACE ST: Applying policy: %+C%14CNOVLDATACOLL-itp-DataCollectionQuerySupport%-C.
  4294. [07/10/12 04:03:13.454]:ADTRACE ST: Applying to status #1.
  4295. [07/10/12 04:03:13.454]:ADTRACE ST: Evaluating selection criteria for rule 'Rename @association-ref to @association and change @type from "dn" to "{dn}"'.
  4296. [07/10/12 04:03:13.454]:ADTRACE ST: (if-operation equal "instance") = FALSE.
  4297. [07/10/12 04:03:13.454]:ADTRACE ST: Rule rejected.
  4298. [07/10/12 04:03:13.454]:ADTRACE ST: Policy returned:
  4299. [07/10/12 04:03:13.454]:ADTRACE ST:
  4300. <nds dtdversion="1.1" ndsversion="8.7">
  4301. <source>
  4302. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  4303. <contact>Novell, Inc.</contact>
  4304. </source>
  4305. <output>
  4306. <status event-id="0" level="success"/>
  4307. </output>
  4308. </nds>
  4309. [07/10/12 04:03:13.454]:ADTRACE ST: Applying policy: %+C%14CNOVLADENTEX-itp-EntitlementsImpl%-C.
  4310. [07/10/12 04:03:13.454]:ADTRACE ST: Applying to status #1.
  4311. [07/10/12 04:03:13.454]:ADTRACE ST: Evaluating selection criteria for rule 'Intercept ADDomain (tagged identity query) query response'.
  4312. [07/10/12 04:03:13.454]:ADTRACE ST: (if-operation equal "instance") = FALSE.
  4313. [07/10/12 04:03:13.454]:ADTRACE ST: Rule rejected.
  4314. [07/10/12 04:03:13.454]:ADTRACE ST: Evaluating selection criteria for rule 'Intercept ADDomain (tagged identity query) query status'.
  4315. [07/10/12 04:03:13.454]:ADTRACE ST: (if-xpath true "../status[@event-id='query-driver-ident']/operation-data/@UserAccountEntitlementQuery") = FALSE.
  4316. [07/10/12 04:03:13.454]:ADTRACE ST: Rule rejected.
  4317. [07/10/12 04:03:13.454]:ADTRACE ST: Evaluating selection criteria for rule 'Check target of add-association for group membership entitlements'.
  4318. [07/10/12 04:03:13.454]:ADTRACE ST: (if-global-variable 'drv.entitlement.Group' equal "true") = TRUE.
  4319. [07/10/12 04:03:13.454]:ADTRACE ST: (if-operation equal "add-association") = FALSE.
  4320. [07/10/12 04:03:13.454]:ADTRACE ST: Rule rejected.
  4321. [07/10/12 04:03:13.454]:ADTRACE ST: Evaluating selection criteria for rule 'Check target of add-association for Exchange mailbox entitlements'.
  4322. [07/10/12 04:03:13.454]:ADTRACE ST: (if-global-variable 'drv.exchMailboxMethod' equal "entitlement") = FALSE.
  4323. [07/10/12 04:03:13.454]:ADTRACE ST: Rule rejected.
  4324. [07/10/12 04:03:13.454]:ADTRACE ST: Policy returned:
  4325. [07/10/12 04:03:13.454]:ADTRACE ST:
  4326. <nds dtdversion="1.1" ndsversion="8.7">
  4327. <source>
  4328. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  4329. <contact>Novell, Inc.</contact>
  4330. </source>
  4331. <output>
  4332. <status event-id="0" level="success"/>
  4333. </output>
  4334. </nds>
  4335. [07/10/12 04:03:13.454]:ADTRACE ST: Applying policy: %+C%14CNOVLPWDSYNC-itp-EmailOnFailedPwdSub%-C.
  4336. [07/10/12 04:03:13.454]:ADTRACE ST: Applying to status #1.
  4337. [07/10/12 04:03:13.454]:ADTRACE ST: Evaluating selection criteria for rule 'Send e-mail on a failure when subscribing to passwords'.
  4338. [07/10/12 04:03:13.454]:ADTRACE ST: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  4339. [07/10/12 04:03:13.454]:ADTRACE ST: (if-operation equal "status") = TRUE.
  4340. [07/10/12 04:03:13.454]:ADTRACE ST: (if-xpath true "self::status[@level != 'success'][text() != '']/operation-data/password-subscribe-status/association[text() != '']") = FALSE.
  4341. [07/10/12 04:03:13.454]:ADTRACE ST: Rule rejected.
  4342. [07/10/12 04:03:13.454]:ADTRACE ST: Evaluating selection criteria for rule 'Send e-mail on failure to reset connected system password using the Identity Vault password'.
  4343. [07/10/12 04:03:13.454]:ADTRACE ST: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  4344. [07/10/12 04:03:13.454]:ADTRACE ST: (if-operation equal "status") = TRUE.
  4345. [07/10/12 04:03:13.454]:ADTRACE ST: (if-xpath true "self::status[@level != 'success']/operation-data/password-reset-status") = FALSE.
  4346. [07/10/12 04:03:13.470]:ADTRACE ST: Rule rejected.
  4347. [07/10/12 04:03:13.470]:ADTRACE ST: Policy returned:
  4348. [07/10/12 04:03:13.470]:ADTRACE ST:
  4349. <nds dtdversion="1.1" ndsversion="8.7">
  4350. <source>
  4351. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  4352. <contact>Novell, Inc.</contact>
  4353. </source>
  4354. <output>
  4355. <status event-id="0" level="success"/>
  4356. </output>
  4357. </nds>
  4358. [07/10/12 04:03:13.470]:ADTRACE ST: Applying schema mapping policies to input.
  4359. [07/10/12 04:03:13.470]:ADTRACE ST: Applying policy: %+C%14CNOVLDATACOLL-smp-SkipSchemaMapping%-C.
  4360. [07/10/12 04:03:13.470]:ADTRACE ST: Applying to status #1.
  4361. [07/10/12 04:03:13.470]:ADTRACE ST: Evaluating selection criteria for rule 'skip'.
  4362. [07/10/12 04:03:13.470]:ADTRACE ST: (if-operation equal "instance") = FALSE.
  4363. [07/10/12 04:03:13.470]:ADTRACE ST: Rule rejected.
  4364. [07/10/12 04:03:13.470]:ADTRACE ST: Evaluating selection criteria for rule 'restore'.
  4365. [07/10/12 04:03:13.470]:ADTRACE ST: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  4366. [07/10/12 04:03:13.470]:ADTRACE ST: Rule rejected.
  4367. [07/10/12 04:03:13.470]:ADTRACE ST: Policy returned:
  4368. [07/10/12 04:03:13.470]:ADTRACE ST:
  4369. <nds dtdversion="1.1" ndsversion="8.7">
  4370. <source>
  4371. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  4372. <contact>Novell, Inc.</contact>
  4373. </source>
  4374. <output>
  4375. <status event-id="0" level="success"/>
  4376. </output>
  4377. </nds>
  4378. [07/10/12 04:03:13.470]:ADTRACE ST: Applying policy: %+C%14CNOVLADDCFG-smp%-C.
  4379. [07/10/12 04:03:13.470]:ADTRACE ST: Applying policy: %+C%14CNOVLDATACOLL-smp-SkipSchemaMapping%-C.
  4380. [07/10/12 04:03:13.470]:ADTRACE ST: Applying to status #1.
  4381. [07/10/12 04:03:13.470]:ADTRACE ST: Evaluating selection criteria for rule 'skip'.
  4382. [07/10/12 04:03:13.470]:ADTRACE ST: (if-operation equal "instance") = FALSE.
  4383. [07/10/12 04:03:13.470]:ADTRACE ST: Rule rejected.
  4384. [07/10/12 04:03:13.470]:ADTRACE ST: Evaluating selection criteria for rule 'restore'.
  4385. [07/10/12 04:03:13.470]:ADTRACE ST: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  4386. [07/10/12 04:03:13.470]:ADTRACE ST: Rule rejected.
  4387. [07/10/12 04:03:13.470]:ADTRACE ST: Policy returned:
  4388. [07/10/12 04:03:13.470]:ADTRACE ST:
  4389. <nds dtdversion="1.1" ndsversion="8.7">
  4390. <source>
  4391. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  4392. <contact>Novell, Inc.</contact>
  4393. </source>
  4394. <output>
  4395. <status event-id="0" level="success"/>
  4396. </output>
  4397. </nds>
  4398. [07/10/12 04:03:13.470]:ADTRACE ST: Resolving association references.
  4399. [07/10/12 04:03:13.470]:ADTRACE ST: Query from policy result
  4400. [07/10/12 04:03:13.470]:ADTRACE ST:
  4401. <nds dtdversion="1.1" ndsversion="8.7">
  4402. <source>
  4403. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  4404. <contact>Novell, Inc.</contact>
  4405. </source>
  4406. <output>
  4407. <status event-id="0" level="success"/>
  4408. </output>
  4409. </nds>
  4410. [07/10/12 04:03:13.470]:ADTRACE ST: No matches found.
  4411. [07/10/12 04:03:13.470]:ADTRACE ST: Evaluating selection criteria for rule 'match everything else'.
  4412. [07/10/12 04:03:13.470]:ADTRACE ST: Rule selected.
  4413. [07/10/12 04:03:13.486]:ADTRACE ST: Applying rule 'match everything else'.
  4414. [07/10/12 04:03:13.486]:ADTRACE ST: Action: do-if().
  4415. [07/10/12 04:03:13.486]:ADTRACE ST: Evaluating conditions.
  4416. [07/10/12 04:03:13.486]:ADTRACE ST: (if-global-variable 'drv.subPlacementType' equal "flat") = TRUE.
  4417. [07/10/12 04:03:13.486]:ADTRACE ST: Performing if actions.
  4418. [07/10/12 04:03:13.486]:ADTRACE ST: Action: do-find-matching-object(scope="entry",arg-dn(token-src-dn(convert="true",length="1",start="-1")+","+token-global-variable("drv.user.container"))).
  4419. [07/10/12 04:03:13.486]:ADTRACE ST: arg-dn(token-src-dn(convert="true",length="1",start="-1")+","+token-global-variable("drv.user.container"))
  4420. [07/10/12 04:03:13.486]:ADTRACE ST: token-src-dn(convert="true",length="1",start="-1")
  4421. [07/10/12 04:03:13.486]:ADTRACE ST: Token Value: "CN=testuser1".
  4422. [07/10/12 04:03:13.486]:ADTRACE ST: token-text(",")
  4423. [07/10/12 04:03:13.486]:ADTRACE ST: token-global-variable("drv.user.container")
  4424. [07/10/12 04:03:13.486]:ADTRACE ST: Token Value: "OU=users,OU=NOVELLUSER,DC=idm,DC=com".
  4425. [07/10/12 04:03:13.486]:ADTRACE ST: Arg Value: "CN=testuser1,OU=users,OU=NOVELLUSER,DC=idm,DC=com".
  4426. [07/10/12 04:03:13.486]:ADTRACE ST: Query from policy
  4427. [07/10/12 04:03:13.486]:ADTRACE ST:
  4428. <nds dtdversion="4.0" ndsversion="8.x">
  4429. <source>
  4430. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  4431. <contact>Novell, Inc.</contact>
  4432. </source>
  4433. <input>
  4434. <query class-name="User" dest-dn="CN=testuser1,OU=users,OU=NOVELLUSER,DC=idm,DC=com" scope="entry">
  4435. <search-class class-name="User"/>
  4436. <read-attr/>
  4437. </query>
  4438. </input>
  4439. </nds>
  4440. [07/10/12 04:03:13.486]:ADTRACE ST: Fixing up association references.
  4441. [07/10/12 04:03:13.486]:ADTRACE ST: Applying schema mapping policies to output.
  4442. [07/10/12 04:03:13.486]:ADTRACE ST: Applying policy: %+C%14CNOVLDATACOLL-smp-SkipSchemaMapping%-C.
  4443. [07/10/12 04:03:13.486]:ADTRACE ST: Applying to query #1.
  4444. [07/10/12 04:03:13.486]:ADTRACE ST: Evaluating selection criteria for rule 'skip'.
  4445. [07/10/12 04:03:13.486]:ADTRACE ST: (if-operation equal "instance") = FALSE.
  4446. [07/10/12 04:03:13.486]:ADTRACE ST: Rule rejected.
  4447. [07/10/12 04:03:13.486]:ADTRACE ST: Evaluating selection criteria for rule 'restore'.
  4448. [07/10/12 04:03:13.486]:ADTRACE ST: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  4449. [07/10/12 04:03:13.486]:ADTRACE ST: Rule rejected.
  4450. [07/10/12 04:03:13.486]:ADTRACE ST: Policy returned:
  4451. [07/10/12 04:03:13.486]:ADTRACE ST:
  4452. <nds dtdversion="4.0" ndsversion="8.x">
  4453. <source>
  4454. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  4455. <contact>Novell, Inc.</contact>
  4456. </source>
  4457. <input>
  4458. <query class-name="User" dest-dn="CN=testuser1,OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="entry">
  4459. <search-class class-name="User"/>
  4460. <read-attr/>
  4461. </query>
  4462. </input>
  4463. </nds>
  4464. [07/10/12 04:03:13.486]:ADTRACE ST: Applying policy: %+C%14CNOVLADDCFG-smp%-C.
  4465. [07/10/12 04:03:13.486]:ADTRACE ST: Mapping class-name 'User' to 'user'.
  4466. [07/10/12 04:03:13.486]:ADTRACE ST: Mapping class-name 'User' to 'user'.
  4467. [07/10/12 04:03:13.486]:ADTRACE ST: Applying policy: %+C%14CNOVLDATACOLL-smp-SkipSchemaMapping%-C.
  4468. [07/10/12 04:03:13.486]:ADTRACE ST: Applying to query #1.
  4469. [07/10/12 04:03:13.486]:ADTRACE ST: Evaluating selection criteria for rule 'skip'.
  4470. [07/10/12 04:03:13.486]:ADTRACE ST: (if-operation equal "instance") = FALSE.
  4471. [07/10/12 04:03:13.486]:ADTRACE ST: Rule rejected.
  4472. [07/10/12 04:03:13.486]:ADTRACE ST: Evaluating selection criteria for rule 'restore'.
  4473. [07/10/12 04:03:13.486]:ADTRACE ST: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  4474. [07/10/12 04:03:13.486]:ADTRACE ST: Rule rejected.
  4475. [07/10/12 04:03:13.486]:ADTRACE ST: Policy returned:
  4476. [07/10/12 04:03:13.486]:ADTRACE ST:
  4477. <nds dtdversion="4.0" ndsversion="8.x">
  4478. <source>
  4479. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  4480. <contact>Novell, Inc.</contact>
  4481. </source>
  4482. <input>
  4483. <query class-name="user" dest-dn="CN=testuser1,OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="entry">
  4484. <search-class class-name="user"/>
  4485. <read-attr/>
  4486. </query>
  4487. </input>
  4488. </nds>
  4489. [07/10/12 04:03:13.486]:ADTRACE ST: Applying output transformation policies.
  4490. [07/10/12 04:03:13.486]:ADTRACE ST: Applying policy: %+C%14CNOVLADENTEX-otp-EntitlementsImpl%-C.
  4491. [07/10/12 04:03:13.486]:ADTRACE ST: Applying to query #1.
  4492. [07/10/12 04:03:13.486]:ADTRACE ST: Evaluating selection criteria for rule 'Intercept outbound queries for ADDomain'.
  4493. [07/10/12 04:03:13.486]:ADTRACE ST: (if-class-name equal "ADDomain") = FALSE.
  4494. [07/10/12 04:03:13.486]:ADTRACE ST: Rule rejected.
  4495. [07/10/12 04:03:13.486]:ADTRACE ST: Policy returned:
  4496. [07/10/12 04:03:13.486]:ADTRACE ST:
  4497. <nds dtdversion="4.0" ndsversion="8.x">
  4498. <source>
  4499. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  4500. <contact>Novell, Inc.</contact>
  4501. </source>
  4502. <input>
  4503. <query class-name="user" dest-dn="CN=testuser1,OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="entry">
  4504. <search-class class-name="user"/>
  4505. <read-attr/>
  4506. </query>
  4507. </input>
  4508. </nds>
  4509. [07/10/12 04:03:13.501]:ADTRACE ST: Applying policy: %+C%14CNOVLADENTEX-otp-ExchangeMailboxPolicy%-C.
  4510. [07/10/12 04:03:13.501]:ADTRACE ST: Applying to query #1.
  4511. [07/10/12 04:03:13.501]:ADTRACE ST: Evaluating selection criteria for rule 'Exchange: Remove HomeMDB when disabled'.
  4512. [07/10/12 04:03:13.501]:ADTRACE ST: (if-global-variable 'drv.exchMailboxMethod' equal "disabled") = TRUE.
  4513. [07/10/12 04:03:13.501]:ADTRACE ST: Rule selected.
  4514. [07/10/12 04:03:13.501]:ADTRACE ST: Applying rule 'Exchange: Remove HomeMDB when disabled'.
  4515. [07/10/12 04:03:13.501]:ADTRACE ST: Action: do-strip-op-attr("homeMDB").
  4516. [07/10/12 04:03:13.501]:ADTRACE ST: Policy returned:
  4517. [07/10/12 04:03:13.501]:ADTRACE ST:
  4518. <nds dtdversion="4.0" ndsversion="8.x">
  4519. <source>
  4520. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  4521. <contact>Novell, Inc.</contact>
  4522. </source>
  4523. <input>
  4524. <query class-name="user" dest-dn="CN=testuser1,OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="entry">
  4525. <search-class class-name="user"/>
  4526. <read-attr/>
  4527. </query>
  4528. </input>
  4529. </nds>
  4530. [07/10/12 04:03:13.501]:ADTRACE ST: Applying policy: %+C%14CNOVLADDCFG-otp-FormatConversions%-C.
  4531. [07/10/12 04:03:13.501]:ADTRACE ST: Applying to query #1.
  4532. [07/10/12 04:03:13.501]:ADTRACE ST: Evaluating selection criteria for rule 'Street Address: Convert LF to CR-LF'.
  4533. [07/10/12 04:03:13.501]:ADTRACE ST: Rule selected.
  4534. [07/10/12 04:03:13.501]:ADTRACE ST: Applying rule 'Street Address: Convert LF to CR-LF'.
  4535. [07/10/12 04:03:13.501]:ADTRACE ST: Action: do-reformat-op-attr("streetAddress",token-replace-all("[^\r]\n","\r\n",token-local-variable("current-value"))).
  4536. [07/10/12 04:03:13.501]:ADTRACE ST: Evaluating selection criteria for rule 'logonHours: Convert to Active Directory form'.
  4537. [07/10/12 04:03:13.501]:ADTRACE ST: Rule selected.
  4538. [07/10/12 04:03:13.501]:ADTRACE ST: Applying rule 'logonHours: Convert to Active Directory form'.
  4539. [07/10/12 04:03:13.501]:ADTRACE ST: Action: do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2ADLenient($current-value)")).
  4540. [07/10/12 04:03:13.501]:ADTRACE ST: Evaluating selection criteria for rule 'accountExpires: Convert to Active Directory form'.
  4541. [07/10/12 04:03:13.501]:ADTRACE ST: (if-op-attr 'accountExpires' changing) = FALSE.
  4542. [07/10/12 04:03:13.501]:ADTRACE ST: Rule rejected.
  4543. [07/10/12 04:03:13.501]:ADTRACE ST: Evaluating selection criteria for rule 'lockoutTime: Convert to Active Directory form'.
  4544. [07/10/12 04:03:13.501]:ADTRACE ST: Rule selected.
  4545. [07/10/12 04:03:13.501]:ADTRACE ST: Applying rule 'lockoutTime: Convert to Active Directory form'.
  4546. [07/10/12 04:03:13.501]:ADTRACE ST: Action: do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateEpoch2FileTime($current-value)")).
  4547. [07/10/12 04:03:13.501]:ADTRACE ST: Evaluating selection criteria for rule 'Add: User - convert multi-valued Telephone to single value'.
  4548. [07/10/12 04:03:13.501]:ADTRACE ST: (if-operation equal "add") = FALSE.
  4549. [07/10/12 04:03:13.501]:ADTRACE ST: Rule rejected.
  4550. [07/10/12 04:03:13.501]:ADTRACE ST: Evaluating selection criteria for rule 'update Active Directory logon name'.
  4551. [07/10/12 04:03:13.501]:ADTRACE ST: (if-xpath true "self::status[@level = 'success']/operation-data/windows-2000-logon-name") = FALSE.
  4552. [07/10/12 04:03:13.501]:ADTRACE ST: Rule rejected.
  4553. [07/10/12 04:03:13.501]:ADTRACE ST: Policy returned:
  4554. [07/10/12 04:03:13.501]:ADTRACE ST:
  4555. <nds dtdversion="4.0" ndsversion="8.x">
  4556. <source>
  4557. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  4558. <contact>Novell, Inc.</contact>
  4559. </source>
  4560. <input>
  4561. <query class-name="user" dest-dn="CN=testuser1,OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="entry">
  4562. <search-class class-name="user"/>
  4563. <read-attr/>
  4564. </query>
  4565. </input>
  4566. </nds>
  4567. [07/10/12 04:03:13.517]:ADTRACE ST: Applying policy: %+C%14CNOVLADDCFG-otp-ExchangeEntitlementQuery%-C.
  4568. [07/10/12 04:03:13.517]:ADTRACE ST: Applying to query #1.
  4569. [07/10/12 04:03:13.517]:ADTRACE ST: Evaluating selection criteria for rule 'Add dest-dn to the Exchange Entitlement Query'.
  4570. [07/10/12 04:03:13.517]:ADTRACE ST: (if-operation equal "query") = TRUE.
  4571. [07/10/12 04:03:13.517]:ADTRACE ST: (if-class-name equal "msExchPrivateMDB") = FALSE.
  4572. [07/10/12 04:03:13.517]:ADTRACE ST: Rule rejected.
  4573. [07/10/12 04:03:13.517]:ADTRACE ST: Policy returned:
  4574. [07/10/12 04:03:13.517]:ADTRACE ST:
  4575. <nds dtdversion="4.0" ndsversion="8.x">
  4576. <source>
  4577. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  4578. <contact>Novell, Inc.</contact>
  4579. </source>
  4580. <input>
  4581. <query class-name="user" dest-dn="CN=testuser1,OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="entry">
  4582. <search-class class-name="user"/>
  4583. <read-attr/>
  4584. </query>
  4585. </input>
  4586. </nds>
  4587. [07/10/12 04:03:13.517]:ADTRACE ST: Applying policy: %+C%14CNOVLPWDSYNC-otp-EmailOnFailedPwdPub%-C.
  4588. [07/10/12 04:03:13.517]:ADTRACE ST: Applying to query #1.
  4589. [07/10/12 04:03:13.517]:ADTRACE ST: Evaluating selection criteria for rule 'Send e-mail for a failed publish password operation'.
  4590. [07/10/12 04:03:13.517]:ADTRACE ST: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  4591. [07/10/12 04:03:13.517]:ADTRACE ST: (if-operation equal "status") = FALSE.
  4592. [07/10/12 04:03:13.517]:ADTRACE ST: Rule rejected.
  4593. [07/10/12 04:03:13.517]:ADTRACE ST: Policy returned:
  4594. [07/10/12 04:03:13.517]:ADTRACE ST:
  4595. <nds dtdversion="4.0" ndsversion="8.x">
  4596. <source>
  4597. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  4598. <contact>Novell, Inc.</contact>
  4599. </source>
  4600. <input>
  4601. <query class-name="user" dest-dn="CN=testuser1,OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="entry">
  4602. <search-class class-name="user"/>
  4603. <read-attr/>
  4604. </query>
  4605. </input>
  4606. </nds>
  4607. [07/10/12 04:03:13.517]:ADTRACE ST: Applying policy: %+C%14CNOVLATRKBASE-otp-Subscribe%-C.
  4608. [07/10/12 04:03:13.517]:ADTRACE ST: Applying to query #1.
  4609. [07/10/12 04:03:13.517]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - Initialize Realm Mapping'.
  4610. [07/10/12 04:03:13.517]:ADTRACE ST: (if-global-variable 'drv.acctTrk.enable' equal "true") = TRUE.
  4611. [07/10/12 04:03:13.517]:ADTRACE ST: (if-global-variable 'drv.acctTrk.mode' equal "fanout") = FALSE.
  4612. [07/10/12 04:03:13.517]:ADTRACE ST: Rule rejected.
  4613. [07/10/12 04:03:13.517]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled or wrong object class'.
  4614. [07/10/12 04:03:13.517]:ADTRACE ST: Rule selected.
  4615. [07/10/12 04:03:13.517]:ADTRACE ST: Applying rule 'AccountTracking - disregard if disabled or wrong object class'.
  4616. [07/10/12 04:03:13.517]:ADTRACE ST: Action: do-if().
  4617. [07/10/12 04:03:13.517]:ADTRACE ST: Evaluating conditions.
  4618. [07/10/12 04:03:13.517]:ADTRACE ST: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  4619. [07/10/12 04:03:13.517]:ADTRACE ST: Performing else actions.
  4620. [07/10/12 04:03:13.517]:ADTRACE ST: Action: do-for-each(arg-node-set(token-global-variable("drv.acctTrk.objectClass"))).
  4621. [07/10/12 04:03:13.517]:ADTRACE ST: arg-node-set(token-global-variable("drv.acctTrk.objectClass"))
  4622. [07/10/12 04:03:13.517]:ADTRACE ST: token-global-variable("drv.acctTrk.objectClass")
  4623. [07/10/12 04:03:13.517]:ADTRACE ST: Token Value: {"user"}.
  4624. [07/10/12 04:03:13.517]:ADTRACE ST: Arg Value: {"user"}.
  4625. [07/10/12 04:03:13.517]:ADTRACE ST: Performing actions for local-variable(current-node) = "user".
  4626. [07/10/12 04:03:13.517]:ADTRACE ST: Action: do-if().
  4627. [07/10/12 04:03:13.517]:ADTRACE ST: Evaluating conditions.
  4628. [07/10/12 04:03:13.517]:ADTRACE ST: Expanded variable reference '$current-node$' to 'user'.
  4629. [07/10/12 04:03:13.517]:ADTRACE ST: (if-class-name equal "$current-node$") = TRUE.
  4630. [07/10/12 04:03:13.517]:ADTRACE ST: Performing if actions.
  4631. [07/10/12 04:03:13.517]:ADTRACE ST: Action: do-set-local-variable("pass",scope="policy","true").
  4632. [07/10/12 04:03:13.517]:ADTRACE ST: arg-string("true")
  4633. [07/10/12 04:03:13.517]:ADTRACE ST: token-text("true")
  4634. [07/10/12 04:03:13.517]:ADTRACE ST: Arg Value: "true".
  4635. [07/10/12 04:03:13.517]:ADTRACE ST: Action: do-if().
  4636. [07/10/12 04:03:13.517]:ADTRACE ST: Evaluating conditions.
  4637. [07/10/12 04:03:13.533]:ADTRACE ST: (if-local-variable 'pass' not-available) = FALSE.
  4638. [07/10/12 04:03:13.533]:ADTRACE ST: Performing else actions.
  4639. [07/10/12 04:03:13.533]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - add operation-data for regular operations'.
  4640. [07/10/12 04:03:13.533]:ADTRACE ST: (if-operation match "add|modify|delete|rename|move") = FALSE.
  4641. [07/10/12 04:03:13.533]:ADTRACE ST: Rule rejected.
  4642. [07/10/12 04:03:13.533]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - add operation-data for mapped operations'.
  4643. [07/10/12 04:03:13.533]:ADTRACE ST: (if-global-variable 'drv.acctTrk.mode' equal "fanout") = FALSE.
  4644. [07/10/12 04:03:13.533]:ADTRACE ST: Rule rejected.
  4645. [07/10/12 04:03:13.533]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - strip AccountTrackingAccountStatus attribute'.
  4646. [07/10/12 04:03:13.533]:ADTRACE ST: (if-op-attr 'AccountTrackingAccountStatus' available) = FALSE.
  4647. [07/10/12 04:03:13.533]:ADTRACE ST: Rule rejected.
  4648. [07/10/12 04:03:13.533]:ADTRACE ST: Policy returned:
  4649. [07/10/12 04:03:13.533]:ADTRACE ST:
  4650. <nds dtdversion="4.0" ndsversion="8.x">
  4651. <source>
  4652. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  4653. <contact>Novell, Inc.</contact>
  4654. </source>
  4655. <input>
  4656. <query class-name="user" dest-dn="CN=testuser1,OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="entry">
  4657. <search-class class-name="user"/>
  4658. <read-attr/>
  4659. </query>
  4660. </input>
  4661. </nds>
  4662. [07/10/12 04:03:13.533]:ADTRACE ST: Submitting document to subscriber shim:
  4663. [07/10/12 04:03:13.533]:ADTRACE ST:
  4664. <nds dtdversion="4.0" ndsversion="8.x">
  4665. <source>
  4666. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  4667. <contact>Novell, Inc.</contact>
  4668. </source>
  4669. <input>
  4670. <query class-name="user" dest-dn="CN=testuser1,OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="entry">
  4671. <search-class class-name="user"/>
  4672. <read-attr/>
  4673. </query>
  4674. </input>
  4675. </nds>
  4676. [07/10/12 04:03:13.533]:ADTRACE ST: Remote Interface Driver: Sending...
  4677. [07/10/12 04:03:13.533]:ADTRACE ST:
  4678. <nds dtdversion="4.0" ndsversion="8.x">
  4679. <source>
  4680. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  4681. <contact>Novell, Inc.</contact>
  4682. </source>
  4683. <input>
  4684. <query class-name="user" dest-dn="CN=testuser1,OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="entry">
  4685. <search-class class-name="user"/>
  4686. <read-attr/>
  4687. </query>
  4688. </input>
  4689. </nds>
  4690. [07/10/12 04:03:13.533]:ADTRACE ST: Remote Interface Driver: Document sent.
  4691. [07/10/12 04:03:13.626]:ADTRACE :Remote Interface Driver: Received.
  4692. [07/10/12 04:03:13.626]:ADTRACE :
  4693. <nds dtdversion="1.1" ndsversion="8.7">
  4694. <source>
  4695. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  4696. <contact>Novell, Inc.</contact>
  4697. </source>
  4698. <output>
  4699. <status event-id="0" level="success"/>
  4700. </output>
  4701. </nds>
  4702. [07/10/12 04:03:13.626]:ADTRACE :Remote Interface Driver: Received document for subscriber channel
  4703. [07/10/12 04:03:13.642]:ADTRACE :Remote Interface Driver: Waiting for receive...
  4704. [07/10/12 04:03:13.642]:ADTRACE ST: SubscriptionShim.execute() returned:
  4705. [07/10/12 04:03:13.642]:ADTRACE ST:
  4706. <nds dtdversion="1.1" ndsversion="8.7">
  4707. <source>
  4708. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  4709. <contact>Novell, Inc.</contact>
  4710. </source>
  4711. <output>
  4712. <status event-id="0" level="success"/>
  4713. </output>
  4714. </nds>
  4715. [07/10/12 04:03:13.642]:ADTRACE ST: Applying input transformation policies.
  4716. [07/10/12 04:03:13.642]:ADTRACE ST: Applying policy: %+C%14CNOVLAUDTENTC-itp-SendEntitlementsEvents%-C.
  4717. [07/10/12 04:03:13.642]:ADTRACE ST: Applying to status #1.
  4718. [07/10/12 04:03:13.642]:ADTRACE ST: Evaluating selection criteria for rule '00031200 - Account Create By Entitlement Grant'.
  4719. [07/10/12 04:03:13.642]:ADTRACE ST: (if-operation equal "status") = TRUE.
  4720. [07/10/12 04:03:13.642]:ADTRACE ST: (if-op-property 'accountAction' equal "accountCreateByEntitlementGrant") = FALSE.
  4721. [07/10/12 04:03:13.642]:ADTRACE ST: Rule rejected.
  4722. [07/10/12 04:03:13.642]:ADTRACE ST: Evaluating selection criteria for rule '00031201 - Account Delete By Entitlement Revoke'.
  4723. [07/10/12 04:03:13.642]:ADTRACE ST: (if-operation equal "status") = TRUE.
  4724. [07/10/12 04:03:13.642]:ADTRACE ST: (if-xpath true "./operation-data/entitlement-impl/@state = '0'") = FALSE.
  4725. [07/10/12 04:03:13.642]:ADTRACE ST: (if-operation equal "status") = TRUE.
  4726. [07/10/12 04:03:13.642]:ADTRACE ST: (if-op-property 'accountAction' equal "accountDeleteByEntitlementRevoke") = FALSE.
  4727. [07/10/12 04:03:13.642]:ADTRACE ST: Rule rejected.
  4728. [07/10/12 04:03:13.642]:ADTRACE ST: Evaluating selection criteria for rule '00031202 - Account Disable By Entitlement Revoke'.
  4729. [07/10/12 04:03:13.642]:ADTRACE ST: (if-operation equal "status") = TRUE.
  4730. [07/10/12 04:03:13.642]:ADTRACE ST: (if-op-property 'accountAction' equal "accountDisableByEntitlementRevoke") = FALSE.
  4731. [07/10/12 04:03:13.642]:ADTRACE ST: Rule rejected.
  4732. [07/10/12 04:03:13.642]:ADTRACE ST: Evaluating selection criteria for rule '00031203 - Account Enable By Entitlement Grant'.
  4733. [07/10/12 04:03:13.642]:ADTRACE ST: (if-operation equal "status") = TRUE.
  4734. [07/10/12 04:03:13.642]:ADTRACE ST: (if-op-property 'accountAction' equal "accountEnableByEntitlementGrant") = FALSE.
  4735. [07/10/12 04:03:13.642]:ADTRACE ST: Rule rejected.
  4736. [07/10/12 04:03:13.642]:ADTRACE ST: Evaluating selection criteria for rule 'Generate Audit Event'.
  4737. [07/10/12 04:03:13.642]:ADTRACE ST: (if-operation equal "status") = TRUE.
  4738. [07/10/12 04:03:13.642]:ADTRACE ST: (if-local-variable 'auditEventID' available) = FALSE.
  4739. [07/10/12 04:03:13.642]:ADTRACE ST: Rule rejected.
  4740. [07/10/12 04:03:13.642]:ADTRACE ST: Policy returned:
  4741. [07/10/12 04:03:13.642]:ADTRACE ST:
  4742. <nds dtdversion="1.1" ndsversion="8.7">
  4743. <source>
  4744. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  4745. <contact>Novell, Inc.</contact>
  4746. </source>
  4747. <output>
  4748. <status event-id="0" level="success"/>
  4749. </output>
  4750. </nds>
  4751. [07/10/12 04:03:13.642]:ADTRACE ST: Applying policy: %+C%14CNOVLADENTEX-itp-InitEntitlementConfigurationResource%-C.
  4752. [07/10/12 04:03:13.642]:ADTRACE ST: Applying to status #1.
  4753. [07/10/12 04:03:13.642]:ADTRACE ST: Evaluating selection criteria for rule 'Make sure we only run once and when we're ready'.
  4754. [07/10/12 04:03:13.642]:ADTRACE ST: (if-local-variable 'objectClass' match ".+") = TRUE.
  4755. [07/10/12 04:03:13.642]:ADTRACE ST: (if-local-variable 'entConfigInitialized' equal "true") = TRUE.
  4756. [07/10/12 04:03:13.642]:ADTRACE ST: Rule selected.
  4757. [07/10/12 04:03:13.642]:ADTRACE ST: Applying rule 'Make sure we only run once and when we're ready'.
  4758. [07/10/12 04:03:13.642]:ADTRACE ST: Action: do-break().
  4759. [07/10/12 04:03:13.642]:ADTRACE ST: Policy returned:
  4760. [07/10/12 04:03:13.642]:ADTRACE ST:
  4761. <nds dtdversion="1.1" ndsversion="8.7">
  4762. <source>
  4763. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  4764. <contact>Novell, Inc.</contact>
  4765. </source>
  4766. <output>
  4767. <status event-id="0" level="success"/>
  4768. </output>
  4769. </nds>
  4770. [07/10/12 04:03:13.642]:ADTRACE ST: Applying policy: %+C%14CNOVLADMSINFO-itp-InitManagedSystemInfo%-C.
  4771. [07/10/12 04:03:13.642]:ADTRACE ST: Applying to status #1.
  4772. [07/10/12 04:03:13.658]:ADTRACE ST: Evaluating selection criteria for rule 'Make sure we only run once and when we're ready'.
  4773. [07/10/12 04:03:13.658]:ADTRACE ST: (if-local-variable 'objectClass' match ".+") = TRUE.
  4774. [07/10/12 04:03:13.658]:ADTRACE ST: (if-local-variable 'mSysInfoInitialized' equal "true") = TRUE.
  4775. [07/10/12 04:03:13.658]:ADTRACE ST: Rule selected.
  4776. [07/10/12 04:03:13.658]:ADTRACE ST: Applying rule 'Make sure we only run once and when we're ready'.
  4777. [07/10/12 04:03:13.658]:ADTRACE ST: Action: do-break().
  4778. [07/10/12 04:03:13.658]:ADTRACE ST: Policy returned:
  4779. [07/10/12 04:03:13.658]:ADTRACE ST:
  4780. <nds dtdversion="1.1" ndsversion="8.7">
  4781. <source>
  4782. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  4783. <contact>Novell, Inc.</contact>
  4784. </source>
  4785. <output>
  4786. <status event-id="0" level="success"/>
  4787. </output>
  4788. </nds>
  4789. [07/10/12 04:03:13.658]:ADTRACE ST: Applying policy: %+C%14CNOVLATRKBASE-itp-Publish%-C.
  4790. [07/10/12 04:03:13.658]:ADTRACE ST: Applying to status #1.
  4791. [07/10/12 04:03:13.658]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled or wrong object class'.
  4792. [07/10/12 04:03:13.658]:ADTRACE ST: Rule selected.
  4793. [07/10/12 04:03:13.658]:ADTRACE ST: Applying rule 'AccountTracking - disregard if disabled or wrong object class'.
  4794. [07/10/12 04:03:13.658]:ADTRACE ST: Action: do-if().
  4795. [07/10/12 04:03:13.658]:ADTRACE ST: Evaluating conditions.
  4796. [07/10/12 04:03:13.658]:ADTRACE ST: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  4797. [07/10/12 04:03:13.658]:ADTRACE ST: Performing else actions.
  4798. [07/10/12 04:03:13.658]:ADTRACE ST: Action: do-if().
  4799. [07/10/12 04:03:13.658]:ADTRACE ST: Evaluating conditions.
  4800. [07/10/12 04:03:13.658]:ADTRACE ST: (if-class-name available) = FALSE.
  4801. [07/10/12 04:03:13.658]:ADTRACE ST: Performing else actions.
  4802. [07/10/12 04:03:13.658]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - on add-association sync the operation-properties to status operations'.
  4803. [07/10/12 04:03:13.658]:ADTRACE ST: (if-operation equal "add-association") = FALSE.
  4804. [07/10/12 04:03:13.658]:ADTRACE ST: Rule rejected.
  4805. [07/10/12 04:03:13.658]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - Query for destination DN using Association'.
  4806. [07/10/12 04:03:13.658]:ADTRACE ST: (if-operation match "modify|delete|move|rename") = FALSE.
  4807. [07/10/12 04:03:13.658]:ADTRACE ST: Rule rejected.
  4808. [07/10/12 04:03:13.658]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - add interested properties to current doc for future use.'.
  4809. [07/10/12 04:03:13.658]:ADTRACE ST: (if-operation match "add|modify|delete|rename|move|status") = TRUE.
  4810. [07/10/12 04:03:13.658]:ADTRACE ST: Rule selected.
  4811. [07/10/12 04:03:13.658]:ADTRACE ST: Applying rule 'AccountTracking - add interested properties to current doc for future use.'.
  4812. [07/10/12 04:03:13.658]:ADTRACE ST: Action: do-for-each(arg-node-set(token-global-variable("drv.acctTrk.identifiers"))).
  4813. [07/10/12 04:03:13.658]:ADTRACE ST: arg-node-set(token-global-variable("drv.acctTrk.identifiers"))
  4814. [07/10/12 04:03:13.658]:ADTRACE ST: token-global-variable("drv.acctTrk.identifiers")
  4815. [07/10/12 04:03:13.658]:ADTRACE ST: Token Value: {"sAMAccountName","userPrincipalName","LDAPDN","association"}.
  4816. [07/10/12 04:03:13.658]:ADTRACE ST: Arg Value: {"sAMAccountName","userPrincipalName","LDAPDN","association"}.
  4817. [07/10/12 04:03:13.658]:ADTRACE ST: Performing actions for local-variable(current-node) = "sAMAccountName".
  4818. [07/10/12 04:03:13.658]:ADTRACE ST: Action: do-if().
  4819. [07/10/12 04:03:13.658]:ADTRACE ST: Evaluating conditions.
  4820. [07/10/12 04:03:13.658]:ADTRACE ST: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  4821. [07/10/12 04:03:13.658]:ADTRACE ST: Performing else actions.
  4822. [07/10/12 04:03:13.673]:ADTRACE ST: Action: do-if().
  4823. [07/10/12 04:03:13.673]:ADTRACE ST: Evaluating conditions.
  4824. [07/10/12 04:03:13.673]:ADTRACE ST: (if-local-variable 'current-node' equal "association") = FALSE.
  4825. [07/10/12 04:03:13.673]:ADTRACE ST: Performing else actions.
  4826. [07/10/12 04:03:13.673]:ADTRACE ST: Action: do-if().
  4827. [07/10/12 04:03:13.673]:ADTRACE ST: Evaluating conditions.
  4828. [07/10/12 04:03:13.673]:ADTRACE ST: Expanded variable reference '$current-node$' to 'sAMAccountName'.
  4829. [07/10/12 04:03:13.673]:ADTRACE ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  4830. [07/10/12 04:03:13.673]:ADTRACE ST: Expanded variable reference '$current-node$' to 'sAMAccountName'.
  4831. [07/10/12 04:03:13.673]:ADTRACE ST: (if-op-attr '$current-node$' available) = FALSE.
  4832. [07/10/12 04:03:13.673]:ADTRACE ST: Performing else actions.
  4833. [07/10/12 04:03:13.673]:ADTRACE ST: Performing actions for local-variable(current-node) = "userPrincipalName".
  4834. [07/10/12 04:03:13.673]:ADTRACE ST: Action: do-if().
  4835. [07/10/12 04:03:13.673]:ADTRACE ST: Evaluating conditions.
  4836. [07/10/12 04:03:13.673]:ADTRACE ST: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  4837. [07/10/12 04:03:13.673]:ADTRACE ST: Performing else actions.
  4838. [07/10/12 04:03:13.673]:ADTRACE ST: Action: do-if().
  4839. [07/10/12 04:03:13.673]:ADTRACE ST: Evaluating conditions.
  4840. [07/10/12 04:03:13.673]:ADTRACE ST: (if-local-variable 'current-node' equal "association") = FALSE.
  4841. [07/10/12 04:03:13.673]:ADTRACE ST: Performing else actions.
  4842. [07/10/12 04:03:13.673]:ADTRACE ST: Action: do-if().
  4843. [07/10/12 04:03:13.673]:ADTRACE ST: Evaluating conditions.
  4844. [07/10/12 04:03:13.673]:ADTRACE ST: Expanded variable reference '$current-node$' to 'userPrincipalName'.
  4845. [07/10/12 04:03:13.673]:ADTRACE ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  4846. [07/10/12 04:03:13.673]:ADTRACE ST: Expanded variable reference '$current-node$' to 'userPrincipalName'.
  4847. [07/10/12 04:03:13.673]:ADTRACE ST: (if-op-attr '$current-node$' available) = FALSE.
  4848. [07/10/12 04:03:13.673]:ADTRACE ST: Performing else actions.
  4849. [07/10/12 04:03:13.673]:ADTRACE ST: Performing actions for local-variable(current-node) = "LDAPDN".
  4850. [07/10/12 04:03:13.673]:ADTRACE ST: Action: do-if().
  4851. [07/10/12 04:03:13.673]:ADTRACE ST: Evaluating conditions.
  4852. [07/10/12 04:03:13.673]:ADTRACE ST: (if-local-variable 'current-node' equal "LDAPDN") = TRUE.
  4853. [07/10/12 04:03:13.673]:ADTRACE ST: Expanded variable reference '$current-node$' to 'LDAPDN'.
  4854. [07/10/12 04:03:13.673]:ADTRACE ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  4855. [07/10/12 04:03:13.673]:ADTRACE ST: (if-src-dn available) = FALSE.
  4856. [07/10/12 04:03:13.673]:ADTRACE ST: Performing else actions.
  4857. [07/10/12 04:03:13.673]:ADTRACE ST: Action: do-if().
  4858. [07/10/12 04:03:13.673]:ADTRACE ST: Evaluating conditions.
  4859. [07/10/12 04:03:13.673]:ADTRACE ST: (if-local-variable 'current-node' equal "association") = FALSE.
  4860. [07/10/12 04:03:13.673]:ADTRACE ST: Performing else actions.
  4861. [07/10/12 04:03:13.673]:ADTRACE ST: Action: do-if().
  4862. [07/10/12 04:03:13.673]:ADTRACE ST: Evaluating conditions.
  4863. [07/10/12 04:03:13.673]:ADTRACE ST: Expanded variable reference '$current-node$' to 'LDAPDN'.
  4864. [07/10/12 04:03:13.673]:ADTRACE ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  4865. [07/10/12 04:03:13.673]:ADTRACE ST: Expanded variable reference '$current-node$' to 'LDAPDN'.
  4866. [07/10/12 04:03:13.689]:ADTRACE ST: (if-op-attr '$current-node$' available) = FALSE.
  4867. [07/10/12 04:03:13.689]:ADTRACE ST: Performing else actions.
  4868. [07/10/12 04:03:13.689]:ADTRACE ST: Performing actions for local-variable(current-node) = "association".
  4869. [07/10/12 04:03:13.689]:ADTRACE ST: Action: do-if().
  4870. [07/10/12 04:03:13.689]:ADTRACE ST: Evaluating conditions.
  4871. [07/10/12 04:03:13.689]:ADTRACE ST: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  4872. [07/10/12 04:03:13.689]:ADTRACE ST: Performing else actions.
  4873. [07/10/12 04:03:13.689]:ADTRACE ST: Action: do-if().
  4874. [07/10/12 04:03:13.689]:ADTRACE ST: Evaluating conditions.
  4875. [07/10/12 04:03:13.689]:ADTRACE ST: (if-local-variable 'current-node' equal "association") = TRUE.
  4876. [07/10/12 04:03:13.689]:ADTRACE ST: Expanded variable reference '$current-node$' to 'association'.
  4877. [07/10/12 04:03:13.689]:ADTRACE ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  4878. [07/10/12 04:03:13.689]:ADTRACE ST: (if-association available) = FALSE.
  4879. [07/10/12 04:03:13.689]:ADTRACE ST: Performing else actions.
  4880. [07/10/12 04:03:13.689]:ADTRACE ST: Action: do-if().
  4881. [07/10/12 04:03:13.689]:ADTRACE ST: Evaluating conditions.
  4882. [07/10/12 04:03:13.689]:ADTRACE ST: Expanded variable reference '$current-node$' to 'association'.
  4883. [07/10/12 04:03:13.689]:ADTRACE ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  4884. [07/10/12 04:03:13.689]:ADTRACE ST: Expanded variable reference '$current-node$' to 'association'.
  4885. [07/10/12 04:03:13.689]:ADTRACE ST: (if-op-attr '$current-node$' available) = FALSE.
  4886. [07/10/12 04:03:13.689]:ADTRACE ST: Performing else actions.
  4887. [07/10/12 04:03:13.689]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - Initialize status properties on published events'.
  4888. [07/10/12 04:03:13.689]:ADTRACE ST: (if-operation match "add|modify|delete|rename|move") = FALSE.
  4889. [07/10/12 04:03:13.689]:ADTRACE ST: Rule rejected.
  4890. [07/10/12 04:03:13.689]:ADTRACE ST: Policy returned:
  4891. [07/10/12 04:03:13.689]:ADTRACE ST:
  4892. <nds dtdversion="1.1" ndsversion="8.7">
  4893. <source>
  4894. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  4895. <contact>Novell, Inc.</contact>
  4896. </source>
  4897. <output>
  4898. <status event-id="0" level="success"/>
  4899. </output>
  4900. </nds>
  4901. [07/10/12 04:03:13.689]:ADTRACE ST: Applying policy: %+C%14CNOVLATRKBASE-itp-WriteAccounts%-C.
  4902. [07/10/12 04:03:13.689]:ADTRACE ST: Applying to status #1.
  4903. [07/10/12 04:03:13.689]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - Initialize Realm Mapping'.
  4904. [07/10/12 04:03:13.689]:ADTRACE ST: (if-global-variable 'drv.acctTrk.enable' equal "true") = TRUE.
  4905. [07/10/12 04:03:13.689]:ADTRACE ST: (if-global-variable 'drv.acctTrk.mode' equal "fanout") = FALSE.
  4906. [07/10/12 04:03:13.689]:ADTRACE ST: Rule rejected.
  4907. [07/10/12 04:03:13.689]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled'.
  4908. [07/10/12 04:03:13.689]:ADTRACE ST: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  4909. [07/10/12 04:03:13.689]:ADTRACE ST: Rule rejected.
  4910. [07/10/12 04:03:13.689]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - query DirXML-Accounts Attribute'.
  4911. [07/10/12 04:03:13.689]:ADTRACE ST: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  4912. [07/10/12 04:03:13.689]:ADTRACE ST: Rule rejected.
  4913. [07/10/12 04:03:13.689]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - remove Dirxml-Account values on regular delete operation'.
  4914. [07/10/12 04:03:13.689]:ADTRACE ST: (if-operation match "delete|remove-association") = FALSE.
  4915. [07/10/12 04:03:13.689]:ADTRACE ST: (if-operation equal "status") = TRUE.
  4916. [07/10/12 04:03:13.689]:ADTRACE ST: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  4917. [07/10/12 04:03:13.689]:ADTRACE ST: Rule rejected.
  4918. [07/10/12 04:03:13.689]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - update DirXMLAccounts attribute on regular operations'.
  4919. [07/10/12 04:03:13.704]:ADTRACE ST: (if-op-property 'AccountTracking-Operation' not-available) = TRUE.
  4920. [07/10/12 04:03:13.704]:ADTRACE ST: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  4921. [07/10/12 04:03:13.704]:ADTRACE ST: (if-operation equal "status") = TRUE.
  4922. [07/10/12 04:03:13.704]:ADTRACE ST: (if-xpath true "./@level='success' or ./@level='warning'") = TRUE.
  4923. [07/10/12 04:03:13.704]:ADTRACE ST: (if-op-property 'AccountTracking-Operation' available) = FALSE.
  4924. [07/10/12 04:03:13.704]:ADTRACE ST: Rule rejected.
  4925. [07/10/12 04:03:13.704]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - update DirXMLAccounts attribute on mapped operations'.
  4926. [07/10/12 04:03:13.704]:ADTRACE ST: (if-xpath true "operation-data/account-tracking-operation") = FALSE.
  4927. [07/10/12 04:03:13.704]:ADTRACE ST: (if-xpath true "operation-data/account-tracking-operation") = FALSE.
  4928. [07/10/12 04:03:13.704]:ADTRACE ST: Rule rejected.
  4929. [07/10/12 04:03:13.704]:ADTRACE ST: Policy returned:
  4930. [07/10/12 04:03:13.704]:ADTRACE ST:
  4931. <nds dtdversion="1.1" ndsversion="8.7">
  4932. <source>
  4933. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  4934. <contact>Novell, Inc.</contact>
  4935. </source>
  4936. <output>
  4937. <status event-id="0" level="success"/>
  4938. </output>
  4939. </nds>
  4940. [07/10/12 04:03:13.704]:ADTRACE ST: Applying policy: %+C%14CNOVLADDCFG-itp-SubscriberUserAdd%-C.
  4941. [07/10/12 04:03:13.704]:ADTRACE ST: Applying to status #1.
  4942. [07/10/12 04:03:13.704]:ADTRACE ST: Evaluating selection criteria for rule 'Populate DirXML-ADContext on initial user add'.
  4943. [07/10/12 04:03:13.704]:ADTRACE ST: (if-operation equal "add-association") = FALSE.
  4944. [07/10/12 04:03:13.704]:ADTRACE ST: Rule rejected.
  4945. [07/10/12 04:03:13.704]:ADTRACE ST: Policy returned:
  4946. [07/10/12 04:03:13.704]:ADTRACE ST:
  4947. <nds dtdversion="1.1" ndsversion="8.7">
  4948. <source>
  4949. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  4950. <contact>Novell, Inc.</contact>
  4951. </source>
  4952. <output>
  4953. <status event-id="0" level="success"/>
  4954. </output>
  4955. </nds>
  4956. [07/10/12 04:03:13.704]:ADTRACE ST: Applying policy: %+C%14CNOVLADDCFG-itp-FormatConversions%-C.
  4957. [07/10/12 04:03:13.704]:ADTRACE ST: Applying to status #1.
  4958. [07/10/12 04:03:13.704]:ADTRACE ST: Evaluating selection criteria for rule 'streetAddress: Convert CR-LF to LF'.
  4959. [07/10/12 04:03:13.704]:ADTRACE ST: Rule selected.
  4960. [07/10/12 04:03:13.704]:ADTRACE ST: Applying rule 'streetAddress: Convert CR-LF to LF'.
  4961. [07/10/12 04:03:13.704]:ADTRACE ST: Action: do-reformat-op-attr("streetAddress",token-replace-all("\r\n","\r",token-local-variable("current-value"))).
  4962. [07/10/12 04:03:13.704]:ADTRACE ST: Evaluating selection criteria for rule 'logonHours: Convert to Login Allowed Time Map form'.
  4963. [07/10/12 04:03:13.704]:ADTRACE ST: Rule selected.
  4964. [07/10/12 04:03:13.704]:ADTRACE ST: Applying rule 'logonHours: Convert to Login Allowed Time Map form'.
  4965. [07/10/12 04:03:13.704]:ADTRACE ST: Action: do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2eDir($current-value)")).
  4966. [07/10/12 04:03:13.704]:ADTRACE ST: Evaluating selection criteria for rule 'accountExpires: Convert to Identity Vault time format'.
  4967. [07/10/12 04:03:13.704]:ADTRACE ST: Rule selected.
  4968. [07/10/12 04:03:13.704]:ADTRACE ST: Applying rule 'accountExpires: Convert to Identity Vault time format'.
  4969. [07/10/12 04:03:13.704]:ADTRACE ST: Action: do-reformat-op-attr("accountExpires",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
  4970. [07/10/12 04:03:13.704]:ADTRACE ST: Evaluating selection criteria for rule 'lockoutTime: Convert to Identity Vault time format'.
  4971. [07/10/12 04:03:13.704]:ADTRACE ST: Rule selected.
  4972. [07/10/12 04:03:13.704]:ADTRACE ST: Applying rule 'lockoutTime: Convert to Identity Vault time format'.
  4973. [07/10/12 04:03:13.704]:ADTRACE ST: Action: do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
  4974. [07/10/12 04:03:13.704]:ADTRACE ST: Policy returned:
  4975. [07/10/12 04:03:13.720]:ADTRACE ST:
  4976. <nds dtdversion="1.1" ndsversion="8.7">
  4977. <source>
  4978. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  4979. <contact>Novell, Inc.</contact>
  4980. </source>
  4981. <output>
  4982. <status event-id="0" level="success"/>
  4983. </output>
  4984. </nds>
  4985. [07/10/12 04:03:13.720]:ADTRACE ST: Applying policy: %+C%14CNOVLDATACOLL-itp-DataCollectionQuerySupport%-C.
  4986. [07/10/12 04:03:13.720]:ADTRACE ST: Applying to status #1.
  4987. [07/10/12 04:03:13.720]:ADTRACE ST: Evaluating selection criteria for rule 'Rename @association-ref to @association and change @type from "dn" to "{dn}"'.
  4988. [07/10/12 04:03:13.720]:ADTRACE ST: (if-operation equal "instance") = FALSE.
  4989. [07/10/12 04:03:13.720]:ADTRACE ST: Rule rejected.
  4990. [07/10/12 04:03:13.720]:ADTRACE ST: Policy returned:
  4991. [07/10/12 04:03:13.720]:ADTRACE ST:
  4992. <nds dtdversion="1.1" ndsversion="8.7">
  4993. <source>
  4994. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  4995. <contact>Novell, Inc.</contact>
  4996. </source>
  4997. <output>
  4998. <status event-id="0" level="success"/>
  4999. </output>
  5000. </nds>
  5001. [07/10/12 04:03:13.720]:ADTRACE ST: Applying policy: %+C%14CNOVLADENTEX-itp-EntitlementsImpl%-C.
  5002. [07/10/12 04:03:13.720]:ADTRACE ST: Applying to status #1.
  5003. [07/10/12 04:03:13.720]:ADTRACE ST: Evaluating selection criteria for rule 'Intercept ADDomain (tagged identity query) query response'.
  5004. [07/10/12 04:03:13.720]:ADTRACE ST: (if-operation equal "instance") = FALSE.
  5005. [07/10/12 04:03:13.720]:ADTRACE ST: Rule rejected.
  5006. [07/10/12 04:03:13.720]:ADTRACE ST: Evaluating selection criteria for rule 'Intercept ADDomain (tagged identity query) query status'.
  5007. [07/10/12 04:03:13.720]:ADTRACE ST: (if-xpath true "../status[@event-id='query-driver-ident']/operation-data/@UserAccountEntitlementQuery") = FALSE.
  5008. [07/10/12 04:03:13.720]:ADTRACE ST: Rule rejected.
  5009. [07/10/12 04:03:13.720]:ADTRACE ST: Evaluating selection criteria for rule 'Check target of add-association for group membership entitlements'.
  5010. [07/10/12 04:03:13.720]:ADTRACE ST: (if-global-variable 'drv.entitlement.Group' equal "true") = TRUE.
  5011. [07/10/12 04:03:13.720]:ADTRACE ST: (if-operation equal "add-association") = FALSE.
  5012. [07/10/12 04:03:13.720]:ADTRACE ST: Rule rejected.
  5013. [07/10/12 04:03:13.720]:ADTRACE ST: Evaluating selection criteria for rule 'Check target of add-association for Exchange mailbox entitlements'.
  5014. [07/10/12 04:03:13.720]:ADTRACE ST: (if-global-variable 'drv.exchMailboxMethod' equal "entitlement") = FALSE.
  5015. [07/10/12 04:03:13.720]:ADTRACE ST: Rule rejected.
  5016. [07/10/12 04:03:13.720]:ADTRACE ST: Policy returned:
  5017. [07/10/12 04:03:13.720]:ADTRACE ST:
  5018. <nds dtdversion="1.1" ndsversion="8.7">
  5019. <source>
  5020. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  5021. <contact>Novell, Inc.</contact>
  5022. </source>
  5023. <output>
  5024. <status event-id="0" level="success"/>
  5025. </output>
  5026. </nds>
  5027. [07/10/12 04:03:13.720]:ADTRACE ST: Applying policy: %+C%14CNOVLPWDSYNC-itp-EmailOnFailedPwdSub%-C.
  5028. [07/10/12 04:03:13.720]:ADTRACE ST: Applying to status #1.
  5029. [07/10/12 04:03:13.720]:ADTRACE ST: Evaluating selection criteria for rule 'Send e-mail on a failure when subscribing to passwords'.
  5030. [07/10/12 04:03:13.720]:ADTRACE ST: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  5031. [07/10/12 04:03:13.720]:ADTRACE ST: (if-operation equal "status") = TRUE.
  5032. [07/10/12 04:03:13.720]:ADTRACE ST: (if-xpath true "self::status[@level != 'success'][text() != '']/operation-data/password-subscribe-status/association[text() != '']") = FALSE.
  5033. [07/10/12 04:03:13.720]:ADTRACE ST: Rule rejected.
  5034. [07/10/12 04:03:13.720]:ADTRACE ST: Evaluating selection criteria for rule 'Send e-mail on failure to reset connected system password using the Identity Vault password'.
  5035. [07/10/12 04:03:13.720]:ADTRACE ST: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  5036. [07/10/12 04:03:13.720]:ADTRACE ST: (if-operation equal "status") = TRUE.
  5037. [07/10/12 04:03:13.720]:ADTRACE ST: (if-xpath true "self::status[@level != 'success']/operation-data/password-reset-status") = FALSE.
  5038. [07/10/12 04:03:13.720]:ADTRACE ST: Rule rejected.
  5039. [07/10/12 04:03:13.720]:ADTRACE ST: Policy returned:
  5040. [07/10/12 04:03:13.720]:ADTRACE ST:
  5041. <nds dtdversion="1.1" ndsversion="8.7">
  5042. <source>
  5043. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  5044. <contact>Novell, Inc.</contact>
  5045. </source>
  5046. <output>
  5047. <status event-id="0" level="success"/>
  5048. </output>
  5049. </nds>
  5050. [07/10/12 04:03:13.736]:ADTRACE ST: Applying schema mapping policies to input.
  5051. [07/10/12 04:03:13.736]:ADTRACE ST: Applying policy: %+C%14CNOVLDATACOLL-smp-SkipSchemaMapping%-C.
  5052. [07/10/12 04:03:13.736]:ADTRACE ST: Applying to status #1.
  5053. [07/10/12 04:03:13.736]:ADTRACE ST: Evaluating selection criteria for rule 'skip'.
  5054. [07/10/12 04:03:13.736]:ADTRACE ST: (if-operation equal "instance") = FALSE.
  5055. [07/10/12 04:03:13.736]:ADTRACE ST: Rule rejected.
  5056. [07/10/12 04:03:13.736]:ADTRACE ST: Evaluating selection criteria for rule 'restore'.
  5057. [07/10/12 04:03:13.736]:ADTRACE ST: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  5058. [07/10/12 04:03:13.736]:ADTRACE ST: Rule rejected.
  5059. [07/10/12 04:03:13.736]:ADTRACE ST: Policy returned:
  5060. [07/10/12 04:03:13.736]:ADTRACE ST:
  5061. <nds dtdversion="1.1" ndsversion="8.7">
  5062. <source>
  5063. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  5064. <contact>Novell, Inc.</contact>
  5065. </source>
  5066. <output>
  5067. <status event-id="0" level="success"/>
  5068. </output>
  5069. </nds>
  5070. [07/10/12 04:03:13.736]:ADTRACE ST: Applying policy: %+C%14CNOVLADDCFG-smp%-C.
  5071. [07/10/12 04:03:13.736]:ADTRACE ST: Applying policy: %+C%14CNOVLDATACOLL-smp-SkipSchemaMapping%-C.
  5072. [07/10/12 04:03:13.736]:ADTRACE ST: Applying to status #1.
  5073. [07/10/12 04:03:13.736]:ADTRACE ST: Evaluating selection criteria for rule 'skip'.
  5074. [07/10/12 04:03:13.736]:ADTRACE ST: (if-operation equal "instance") = FALSE.
  5075. [07/10/12 04:03:13.736]:ADTRACE ST: Rule rejected.
  5076. [07/10/12 04:03:13.736]:ADTRACE ST: Evaluating selection criteria for rule 'restore'.
  5077. [07/10/12 04:03:13.736]:ADTRACE ST: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  5078. [07/10/12 04:03:13.736]:ADTRACE ST: Rule rejected.
  5079. [07/10/12 04:03:13.736]:ADTRACE ST: Policy returned:
  5080. [07/10/12 04:03:13.736]:ADTRACE ST:
  5081. <nds dtdversion="1.1" ndsversion="8.7">
  5082. <source>
  5083. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  5084. <contact>Novell, Inc.</contact>
  5085. </source>
  5086. <output>
  5087. <status event-id="0" level="success"/>
  5088. </output>
  5089. </nds>
  5090. [07/10/12 04:03:13.736]:ADTRACE ST: Resolving association references.
  5091. [07/10/12 04:03:13.736]:ADTRACE ST: Query from policy result
  5092. [07/10/12 04:03:13.736]:ADTRACE ST:
  5093. <nds dtdversion="1.1" ndsversion="8.7">
  5094. <source>
  5095. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  5096. <contact>Novell, Inc.</contact>
  5097. </source>
  5098. <output>
  5099. <status event-id="0" level="success"/>
  5100. </output>
  5101. </nds>
  5102. [07/10/12 04:03:13.736]:ADTRACE ST: No matches found.
  5103. [07/10/12 04:03:13.736]:ADTRACE ST: Direct command from policy
  5104. [07/10/12 04:03:13.736]:ADTRACE ST:
  5105. <nds dtdversion="4.0" ndsversion="8.x">
  5106. <source>
  5107. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  5108. <contact>Novell, Inc.</contact>
  5109. </source>
  5110. <input>
  5111. <modify class-name="User" dest-dn="\xxxxxIDM\xxxxx\data\users\testuser1" dest-entry-id="34037" event-id="WINIDM-NDS#20120710110311#1#1:a69cee9c-7d7b-47df-812e-39a59945b0d4">
  5112. <modify-attr attr-name="Full Name">
  5113. <remove-all-values/>
  5114. <add-value>
  5115. <value>test user1</value>
  5116. </add-value>
  5117. </modify-attr>
  5118. </modify>
  5119. </input>
  5120. </nds>
  5121. [07/10/12 04:03:13.736]:ADTRACE ST: Pumping XDS to eDirectory.
  5122. [07/10/12 04:03:13.736]:ADTRACE ST: Performing operation modify for \xxxxxIDM\xxxxx\data\users\testuser1.
  5123. [07/10/12 04:03:13.736]:ADTRACE ST: --JCLNT-- \xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver : Duplicating : context = 979763278, tempContext = 979763296
  5124. [07/10/12 04:03:13.751]:ADTRACE ST: --JCLNT-- \xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver : Calling free on tempContext = 979763296
  5125. [07/10/12 04:03:13.970]:ADTRACE ST: Processing returned document.
  5126. [07/10/12 04:03:13.970]:ADTRACE ST: Processing operation <status> for .
  5127. [07/10/12 04:03:13.970]:ADTRACE ST:
  5128. DirXML Log Event -------------------
  5129. Driver: \xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver
  5130. Channel: Subscriber
  5131. Object: \xxxxxIDM\xxxxx\data\users\testuser1
  5132. Status: Error
  5133. Message: Code(-9010) An exception occurred: novell.jclient.JCException: modifyEntry -672 ERR_NO_ACCESS
  5134. [07/10/12 04:03:14.189]:ADTRACE ST: Direct command from policy result
  5135. [07/10/12 04:03:14.189]:ADTRACE ST:
  5136. <nds dtdversion="4.0" ndsversion="8.x">
  5137. <source>
  5138. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  5139. <contact>Novell, Inc.</contact>
  5140. </source>
  5141. <output>
  5142. <status event-id="WINIDM-NDS#20120710110311#1#1:a69cee9c-7d7b-47df-812e-39a59945b0d4" level="error">Code(-9010) An exception occurred: novell.jclient.JCException: modifyEntry -672 ERR_NO_ACCESS<application>DirXML</application>
  5143. <module>Active Directory Driver</module>
  5144. <object-dn>\xxxxxIDM\xxxxx\data\users\testuser1</object-dn>
  5145. <component>Subscriber</component>
  5146. </status>
  5147. </output>
  5148. </nds>
  5149. [07/10/12 04:03:14.189]:ADTRACE ST:Policy returned:
  5150. [07/10/12 04:03:14.189]:ADTRACE ST:
  5151. <nds dtdversion="4.0" ndsversion="8.x">
  5152. <source>
  5153. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  5154. <contact>Novell, Inc.</contact>
  5155. </source>
  5156. <input>
  5157. <add cached-time="20120710110311.986Z" class-name="User" event-id="WINIDM-NDS#20120710110311#1#1:a69cee9c-7d7b-47df-812e-39a59945b0d4" qualified-src-dn="O=xxxxx\OU=data\OU=users\CN=testuser1" src-dn="\xxxxxIDM\xxxxx\data\users\testuser1" src-entry-id="34037" timestamp="0#0">
  5158. <add-attr attr-name="Given Name">
  5159. <value timestamp="1341840499#5" type="string">test</value>
  5160. </add-attr>
  5161. <add-attr attr-name="Surname">
  5162. <value timestamp="1341840499#4" type="string">user1</value>
  5163. </add-attr>
  5164. <add-attr attr-name="Full Name">
  5165. <value>test user1</value>
  5166. </add-attr>
  5167. <operation-data attempt-to-match="false" unmatched-src-dn="CN=testuser1"/>
  5168. </add>
  5169. </input>
  5170. </nds>
  5171. [07/10/12 04:03:14.189]:ADTRACE ST:No match found.
  5172. [07/10/12 04:03:14.204]:ADTRACE ST:Applying object creation policies.
  5173. [07/10/12 04:03:14.204]:ADTRACE ST:Applying policy: %+C%14CNOVLADENTEX-sub-cp-EntitlementsImpl%-C.
  5174. [07/10/12 04:03:14.204]:ADTRACE ST: Applying to add #1.
  5175. [07/10/12 04:03:14.204]:ADTRACE ST: Evaluating selection criteria for rule 'UserAccount entitlement: Veto account creation when entitlement not granted'.
  5176. [07/10/12 04:03:14.204]:ADTRACE ST: (if-global-variable 'drv.entitlement.UserAccount' equal "true") = TRUE.
  5177. [07/10/12 04:03:14.204]:ADTRACE ST: (if-class-name equal "User") = TRUE.
  5178. [07/10/12 04:03:14.204]:ADTRACE ST: Query from policy
  5179. [07/10/12 04:03:14.204]:ADTRACE ST:
  5180. <nds dtdversion="4.0" ndsversion="8.x">
  5181. <source>
  5182. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  5183. <contact>Novell, Inc.</contact>
  5184. </source>
  5185. <input>
  5186. <query class-name="User" dest-dn="\xxxxxIDM\xxxxx\data\users\testuser1" dest-entry-id="34037" scope="entry">
  5187. <read-attr attr-name="DirXML-EntitlementRef"/>
  5188. </query>
  5189. </input>
  5190. </nds>
  5191. [07/10/12 04:03:14.204]:ADTRACE ST: Pumping XDS to eDirectory.
  5192. [07/10/12 04:03:14.204]:ADTRACE ST: Performing operation query for \xxxxxIDM\xxxxx\data\users\testuser1.
  5193. [07/10/12 04:03:14.204]:ADTRACE ST: --JCLNT-- \xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver : Duplicating : context = 979763259, tempContext = 979763296
  5194. [07/10/12 04:03:14.204]:ADTRACE ST: --JCLNT-- \xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver : Calling free on tempContext = 979763296
  5195. [07/10/12 04:03:14.204]:ADTRACE ST: Query from policy result
  5196. [07/10/12 04:03:14.204]:ADTRACE ST:
  5197. <nds dtdversion="4.0" ndsversion="8.x">
  5198. <source>
  5199. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  5200. <contact>Novell, Inc.</contact>
  5201. </source>
  5202. <output>
  5203. <instance class-name="User" qualified-src-dn="O=xxxxx\OU=data\OU=users\CN=testuser1" src-dn="\xxxxxIDM\xxxxx\data\users\testuser1" src-entry-id="34037">
  5204. <association state="manual"></association>
  5205. </instance>
  5206. <status level="success"></status>
  5207. </output>
  5208. </nds>
  5209. [07/10/12 04:03:14.220]:ADTRACE ST: (if-entitlement 'UserAccount' not-available) = TRUE.
  5210. [07/10/12 04:03:14.220]:ADTRACE ST: Rule selected.
  5211. [07/10/12 04:03:14.220]:ADTRACE ST: Applying rule 'UserAccount entitlement: Veto account creation when entitlement not granted'.
  5212. [07/10/12 04:03:14.220]:ADTRACE ST: Action: do-add-src-object(class-name="User",arg-dn("OU=users,OU=NOVELLUSER,DC=idm,DC=com")).
  5213. [07/10/12 04:03:14.220]:ADTRACE ST: arg-dn("OU=users,OU=NOVELLUSER,DC=idm,DC=com")
  5214. [07/10/12 04:03:14.220]:ADTRACE ST: token-text("OU=users,OU=NOVELLUSER,DC=idm,DC=com")
  5215. [07/10/12 04:03:14.220]:ADTRACE ST: Arg Value: "OU=users,OU=NOVELLUSER,DC=idm,DC=com".
  5216. [07/10/12 04:03:14.220]:ADTRACE ST: Evaluating selection criteria for rule 'Prepare to check group entitlements after add'.
  5217. [07/10/12 04:03:14.220]:ADTRACE ST: (if-global-variable 'drv.entitlement.Group' equal "true") = TRUE.
  5218. [07/10/12 04:03:14.220]:ADTRACE ST: (if-class-name equal "User") = TRUE.
  5219. [07/10/12 04:03:14.220]:ADTRACE ST: (if-entitlement 'Group' available) = FALSE.
  5220. [07/10/12 04:03:14.220]:ADTRACE ST: Rule rejected.
  5221. [07/10/12 04:03:14.220]:ADTRACE ST: Evaluating selection criteria for rule 'Prepare to check Exchange entitlements after the add'.
  5222. [07/10/12 04:03:14.220]:ADTRACE ST: (if-global-variable 'drv.exchMailboxMethod' equal "entitlement") = FALSE.
  5223. [07/10/12 04:03:14.220]:ADTRACE ST: Rule rejected.
  5224. [07/10/12 04:03:14.220]:ADTRACE ST: Direct command from policy
  5225. [07/10/12 04:03:14.220]:ADTRACE ST:
  5226. <nds dtdversion="4.0" ndsversion="8.x">
  5227. <source>
  5228. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  5229. <contact>Novell, Inc.</contact>
  5230. </source>
  5231. <input>
  5232. <add class-name="User" dest-dn="OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="WINIDM-NDS#20120710110311#1#1:a69cee9c-7d7b-47df-812e-39a59945b0d4"/>
  5233. </input>
  5234. </nds>
  5235. [07/10/12 04:03:14.220]:ADTRACE ST: Pumping XDS to eDirectory.
  5236. [07/10/12 04:03:14.220]:ADTRACE ST: Performing operation add for OU=users,OU=NOVELLUSER,DC=idm,DC=com.
  5237. [07/10/12 04:03:14.220]:ADTRACE ST: --JCLNT-- \xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver : Duplicating : context = 979763278, tempContext = 979763296
  5238. [07/10/12 04:03:14.220]:ADTRACE ST: Adding entry OU=users,OU=NOVELLUSER,DC=idm,DC=com.
  5239. [07/10/12 04:03:14.220]:ADTRACE ST: Creating RDN in context ..
  5240. [07/10/12 04:03:14.220]:ADTRACE ST: --JCLNT-- \xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver : Calling free on tempContext = 979763296
  5241. [07/10/12 04:03:14.454]:ADTRACE ST: Processing returned document.
  5242. [07/10/12 04:03:14.454]:ADTRACE ST: Processing operation <status> for .
  5243. [07/10/12 04:03:14.454]:ADTRACE ST:
  5244. DirXML Log Event -------------------
  5245. Driver: \xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver
  5246. Channel: Subscriber
  5247. Object: \xxxxxIDM\xxxxx\data\users\testuser1
  5248. Status: Error
  5249. Message: Code(-9010) An exception occurred: novell.jclient.JCException: createEntry -672 ERR_NO_ACCESS
  5250. [07/10/12 04:03:14.720]:ADTRACE ST: Direct command from policy result
  5251. [07/10/12 04:03:14.720]:ADTRACE ST:
  5252. <nds dtdversion="4.0" ndsversion="8.x">
  5253. <source>
  5254. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  5255. <contact>Novell, Inc.</contact>
  5256. </source>
  5257. <output>
  5258. <status event-id="WINIDM-NDS#20120710110311#1#1:a69cee9c-7d7b-47df-812e-39a59945b0d4" level="error">Code(-9010) An exception occurred: novell.jclient.JCException: createEntry -672 ERR_NO_ACCESS<application>DirXML</application>
  5259. <module>Active Directory Driver</module>
  5260. <object-dn>\xxxxxIDM\xxxxx\data\users\testuser1</object-dn>
  5261. <component>Subscriber</component>
  5262. </status>
  5263. </output>
  5264. </nds>
  5265. [07/10/12 04:03:14.720]:ADTRACE ST:Policy returned:
  5266. [07/10/12 04:03:14.720]:ADTRACE ST:
  5267. <nds dtdversion="4.0" ndsversion="8.x">
  5268. <source>
  5269. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  5270. <contact>Novell, Inc.</contact>
  5271. </source>
  5272. <input>
  5273. <add cached-time="20120710110311.986Z" class-name="User" event-id="WINIDM-NDS#20120710110311#1#1:a69cee9c-7d7b-47df-812e-39a59945b0d4" qualified-src-dn="O=xxxxx\OU=data\OU=users\CN=testuser1" src-dn="\xxxxxIDM\xxxxx\data\users\testuser1" src-entry-id="34037" timestamp="0#0">
  5274. <add-attr attr-name="Given Name">
  5275. <value timestamp="1341840499#5" type="string">test</value>
  5276. </add-attr>
  5277. <add-attr attr-name="Surname">
  5278. <value timestamp="1341840499#4" type="string">user1</value>
  5279. </add-attr>
  5280. <add-attr attr-name="Full Name">
  5281. <value>test user1</value>
  5282. </add-attr>
  5283. <operation-data attempt-to-match="false" unmatched-src-dn="CN=testuser1"/>
  5284. </add>
  5285. </input>
  5286. </nds>
  5287. [07/10/12 04:03:14.720]:ADTRACE ST:Applying policy: %+C%14CNOVLADDCFG-sub-cp-Users%-C.
  5288. [07/10/12 04:03:14.720]:ADTRACE ST: Applying to add #1.
  5289. [07/10/12 04:03:14.720]:ADTRACE ST: Evaluating selection criteria for rule 'Break if not a User'.
  5290. [07/10/12 04:03:14.720]:ADTRACE ST: (if-class-name not-equal "User") = FALSE.
  5291. [07/10/12 04:03:14.720]:ADTRACE ST: Rule rejected.
  5292. [07/10/12 04:03:14.720]:ADTRACE ST: Evaluating selection criteria for rule 'Veto if nspmDistributionPassword is not available'.
  5293. [07/10/12 04:03:14.720]:ADTRACE ST: Rule selected.
  5294. [07/10/12 04:03:14.720]:ADTRACE ST: Applying rule 'Veto if nspmDistributionPassword is not available'.
  5295. [07/10/12 04:03:14.720]:ADTRACE ST: Action: do-veto-if-op-attr-not-available("nspmDistributionPassword").
  5296. [07/10/12 04:03:14.720]:ADTRACE ST:Policy returned:
  5297. [07/10/12 04:03:14.736]:ADTRACE ST:
  5298. <nds dtdversion="4.0" ndsversion="8.x">
  5299. <source>
  5300. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  5301. <contact>Novell, Inc.</contact>
  5302. </source>
  5303. <input/>
  5304. </nds>
  5305. [07/10/12 04:03:14.736]:ADTRACE ST:Applying policy: %+C%14CNOVLADDCFG-sub-cp-Groups%-C.
  5306. [07/10/12 04:03:14.736]:ADTRACE ST:Policy returned:
  5307. [07/10/12 04:03:14.736]:ADTRACE ST:
  5308. <nds dtdversion="4.0" ndsversion="8.x">
  5309. <source>
  5310. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  5311. <contact>Novell, Inc.</contact>
  5312. </source>
  5313. <input/>
  5314. </nds>
  5315. [07/10/12 04:03:14.736]:ADTRACE ST:Applying policy: %+C%14CNOVLADENTEX-sub-cp-ExchMailboxPolicy%-C.
  5316. [07/10/12 04:03:14.736]:ADTRACE ST:Policy returned:
  5317. [07/10/12 04:03:14.736]:ADTRACE ST:
  5318. <nds dtdversion="4.0" ndsversion="8.x">
  5319. <source>
  5320. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  5321. <contact>Novell, Inc.</contact>
  5322. </source>
  5323. <input/>
  5324. </nds>
  5325. [07/10/12 04:03:14.736]:ADTRACE ST:Processing returned document.
  5326. [07/10/12 04:03:14.736]:ADTRACE ST:Processing operation <status> for .
  5327. [07/10/12 04:03:14.736]:ADTRACE ST:
  5328. DirXML Log Event -------------------
  5329. Driver: \xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver
  5330. Channel: Subscriber
  5331. Object: \xxxxxIDM\xxxxx\data\users\testuser1
  5332. Status: Warning
  5333. Message: Code(-8017) Operation vetoed by object creation policy.
  5334. [07/10/12 04:03:14.970]:ADTRACE ST:End transaction.
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!