API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Mar 20th, 2012
48
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 325.08 KB | None | 0 0
raw download clone embed print report
  1. [03/20/12 07:49:45.582]:Active Directory PT: Evaluating conditions.
  2. [03/20/12 07:49:45.582]:Active Directory PT: (if-class-name equal "$current-node$") = FALSE.
  3. [03/20/12 07:49:45.583]:Active Directory PT: Performing else actions.
  4. [03/20/12 07:49:45.583]:Active Directory PT: Action: do-if().
  5. [03/20/12 07:49:45.583]:Active Directory PT: Evaluating conditions.
  6. [03/20/12 07:49:45.583]:Active Directory PT: (if-local-variable 'pass' not-available) = TRUE.
  7. [03/20/12 07:49:45.583]:Active Directory PT: Performing if actions.
  8. [03/20/12 07:49:45.583]:Active Directory PT: Action: do-break().
  9. [03/20/12 07:49:45.583]:Active Directory PT:Policy returned:
  10. [03/20/12 07:49:45.584]:Active Directory PT:
  11. <nds dtdversion="3.5" ndsversion="8.x">
  12. <source>
  13. <product version="3.6.10.4747">DirXML</product>
  14. <contact>Novell, Inc.</contact>
  15. </source>
  16. <output>
  17. <status event-id="report status" level="success"></status>
  18. <status event-id="write state" level="success"><application>DirXML</application>
  19. <module>Active Directory</module>
  20. <object-dn></object-dn>
  21. <component>Publisher</component>
  22. </status>
  23. </output>
  24. </nds>
  25. [03/20/12 07:49:45.584]:Active Directory PT:
  26. <nds dtdversion="3.5" ndsversion="8.x">
  27. <source>
  28. <product version="3.6.10.4747">DirXML</product>
  29. <contact>Novell, Inc.</contact>
  30. </source>
  31. <output>
  32. <status event-id="report status" level="success"></status>
  33. <status event-id="write state" level="success"><application>DirXML</application>
  34. <module>Active Directory</module>
  35. <object-dn></object-dn>
  36. <component>Publisher</component>
  37. </status>
  38. </output>
  39. </nds>
  40. [03/20/12 07:49:45.933]:Active Directory :Remote Interface Driver: Received.
  41. [03/20/12 07:49:45.933]:Active Directory :
  42. <nds dtdversion="2.2">
  43. <source>
  44. <product version="3.6.10.4747">DirXML</product>
  45. <contact>Novell, Inc.</contact>
  46. </source>
  47. <input>
  48. <status level="success" type="heartbeat"/>
  49. </input>
  50. </nds>
  51. [03/20/12 07:49:45.934]:Active Directory :Remote Interface Driver: Received document for publisher channel
  52. [03/20/12 07:49:45.934]:Active Directory :Remote Interface Driver: Waiting for receive...
  53. [03/20/12 07:49:45.934]:Active Directory PT:Receiving DOM document from application.
  54. [03/20/12 07:49:45.934]:Active Directory PT:
  55. <nds dtdversion="2.2">
  56. <source>
  57. <product version="3.6.10.4747">DirXML</product>
  58. <contact>Novell, Inc.</contact>
  59. </source>
  60. <input>
  61. <status level="success" type="heartbeat"/>
  62. </input>
  63. </nds>
  64. [03/20/12 07:49:45.935]:Active Directory PT:Applying input transformation policies.
  65. [03/20/12 07:49:45.935]:Active Directory PT:Applying policy: %+C%14Clib-AccountTracking-Publish-itp-V1%-C.
  66. [03/20/12 07:49:45.935]:Active Directory PT: Applying to status #1.
  67. [03/20/12 07:49:45.935]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled or wrong object class'.
  68. [03/20/12 07:49:45.935]:Active Directory PT: Rule selected.
  69. [03/20/12 07:49:45.935]:Active Directory PT: Applying rule 'AccountTracking - disregard if disabled or wrong object class'.
  70. [03/20/12 07:49:45.936]:Active Directory PT: Action: do-if().
  71. [03/20/12 07:49:45.936]:Active Directory PT: Evaluating conditions.
  72. [03/20/12 07:49:45.936]:Active Directory PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  73. [03/20/12 07:49:45.936]:Active Directory PT: Performing else actions.
  74. [03/20/12 07:49:45.936]:Active Directory PT: Action: do-if().
  75. [03/20/12 07:49:45.936]:Active Directory PT: Evaluating conditions.
  76. [03/20/12 07:49:45.936]:Active Directory PT: (if-class-name available) = FALSE.
  77. [03/20/12 07:49:45.936]:Active Directory PT: Performing else actions.
  78. [03/20/12 07:49:45.937]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - on add-association sync the operation-properties to status operations'.
  79. [03/20/12 07:49:45.937]:Active Directory PT: (if-operation equal "add-association") = FALSE.
  80. [03/20/12 07:49:45.937]:Active Directory PT: Rule rejected.
  81. [03/20/12 07:49:45.937]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - Query for destination DN using Association'.
  82. [03/20/12 07:49:45.937]:Active Directory PT: (if-operation match "modify|delete|move|rename") = FALSE.
  83. [03/20/12 07:49:45.938]:Active Directory PT: Rule rejected.
  84. [03/20/12 07:49:45.938]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - add interested properties to current doc for future use.'.
  85. [03/20/12 07:49:45.938]:Active Directory PT: (if-operation match "add|modify|delete|rename|move|status") = TRUE.
  86. [03/20/12 07:49:45.938]:Active Directory PT: Rule selected.
  87. [03/20/12 07:49:45.938]:Active Directory PT: Applying rule 'AccountTracking - add interested properties to current doc for future use.'.
  88. [03/20/12 07:49:45.938]:Active Directory PT: Action: do-for-each(arg-node-set(token-global-variable("drv.acctTrk.identifiers"))).
  89. [03/20/12 07:49:45.939]:Active Directory PT: arg-node-set(token-global-variable("drv.acctTrk.identifiers"))
  90. [03/20/12 07:49:45.939]:Active Directory PT: token-global-variable("drv.acctTrk.identifiers")
  91. [03/20/12 07:49:45.939]:Active Directory PT: Token Value: {"sAMAccountName","userPrincipalName","LDAPDN","association"}.
  92. [03/20/12 07:49:45.939]:Active Directory PT: Arg Value: {"sAMAccountName","userPrincipalName","LDAPDN","association"}.
  93. [03/20/12 07:49:45.939]:Active Directory PT: Performing actions for local-variable(current-node) = "sAMAccountName".
  94. [03/20/12 07:49:45.939]:Active Directory PT: Action: do-if().
  95. [03/20/12 07:49:45.940]:Active Directory PT: Evaluating conditions.
  96. [03/20/12 07:49:45.940]:Active Directory PT: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  97. [03/20/12 07:49:45.940]:Active Directory PT: Performing else actions.
  98. [03/20/12 07:49:45.940]:Active Directory PT: Action: do-if().
  99. [03/20/12 07:49:45.940]:Active Directory PT: Evaluating conditions.
  100. [03/20/12 07:49:45.940]:Active Directory PT: (if-local-variable 'current-node' equal "association") = FALSE.
  101. [03/20/12 07:49:45.940]:Active Directory PT: Performing else actions.
  102. [03/20/12 07:49:45.941]:Active Directory PT: Action: do-if().
  103. [03/20/12 07:49:45.941]:Active Directory PT: Evaluating conditions.
  104. [03/20/12 07:49:45.941]:Active Directory PT: Expanded variable reference '$current-node$' to 'sAMAccountName'.
  105. [03/20/12 07:49:45.941]:Active Directory PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  106. [03/20/12 07:49:45.941]:Active Directory PT: Expanded variable reference '$current-node$' to 'sAMAccountName'.
  107. [03/20/12 07:49:45.941]:Active Directory PT: (if-op-attr '$current-node$' available) = FALSE.
  108. [03/20/12 07:49:45.942]:Active Directory PT: Performing else actions.
  109. [03/20/12 07:49:45.942]:Active Directory PT: Performing actions for local-variable(current-node) = "userPrincipalName".
  110. [03/20/12 07:49:45.942]:Active Directory PT: Action: do-if().
  111. [03/20/12 07:49:45.942]:Active Directory PT: Evaluating conditions.
  112. [03/20/12 07:49:45.942]:Active Directory PT: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  113. [03/20/12 07:49:45.942]:Active Directory PT: Performing else actions.
  114. [03/20/12 07:49:45.942]:Active Directory PT: Action: do-if().
  115. [03/20/12 07:49:45.943]:Active Directory PT: Evaluating conditions.
  116. [03/20/12 07:49:45.943]:Active Directory PT: (if-local-variable 'current-node' equal "association") = FALSE.
  117. [03/20/12 07:49:45.943]:Active Directory PT: Performing else actions.
  118. [03/20/12 07:49:45.943]:Active Directory PT: Action: do-if().
  119. [03/20/12 07:49:45.943]:Active Directory PT: Evaluating conditions.
  120. [03/20/12 07:49:45.943]:Active Directory PT: Expanded variable reference '$current-node$' to 'userPrincipalName'.
  121. [03/20/12 07:49:45.943]:Active Directory PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  122. [03/20/12 07:49:45.944]:Active Directory PT: Expanded variable reference '$current-node$' to 'userPrincipalName'.
  123. [03/20/12 07:49:45.944]:Active Directory PT: (if-op-attr '$current-node$' available) = FALSE.
  124. [03/20/12 07:49:45.944]:Active Directory PT: Performing else actions.
  125. [03/20/12 07:49:45.944]:Active Directory PT: Performing actions for local-variable(current-node) = "LDAPDN".
  126. [03/20/12 07:49:45.944]:Active Directory PT: Action: do-if().
  127. [03/20/12 07:49:45.944]:Active Directory PT: Evaluating conditions.
  128. [03/20/12 07:49:45.945]:Active Directory PT: (if-local-variable 'current-node' equal "LDAPDN") = TRUE.
  129. [03/20/12 07:49:45.945]:Active Directory PT: Expanded variable reference '$current-node$' to 'LDAPDN'.
  130. [03/20/12 07:49:45.945]:Active Directory PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  131. [03/20/12 07:49:45.945]:Active Directory PT: (if-src-dn available) = FALSE.
  132. [03/20/12 07:49:45.945]:Active Directory PT: Performing else actions.
  133. [03/20/12 07:49:45.945]:Active Directory PT: Action: do-if().
  134. [03/20/12 07:49:45.946]:Active Directory PT: Evaluating conditions.
  135. [03/20/12 07:49:45.946]:Active Directory PT: (if-local-variable 'current-node' equal "association") = FALSE.
  136. [03/20/12 07:49:45.946]:Active Directory PT: Performing else actions.
  137. [03/20/12 07:49:45.946]:Active Directory PT: Action: do-if().
  138. [03/20/12 07:49:45.946]:Active Directory PT: Evaluating conditions.
  139. [03/20/12 07:49:45.946]:Active Directory PT: Expanded variable reference '$current-node$' to 'LDAPDN'.
  140. [03/20/12 07:49:45.946]:Active Directory PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  141. [03/20/12 07:49:45.947]:Active Directory PT: Expanded variable reference '$current-node$' to 'LDAPDN'.
  142. [03/20/12 07:49:45.947]:Active Directory PT: (if-op-attr '$current-node$' available) = FALSE.
  143. [03/20/12 07:49:45.947]:Active Directory PT: Performing else actions.
  144. [03/20/12 07:49:45.947]:Active Directory PT: Performing actions for local-variable(current-node) = "association".
  145. [03/20/12 07:49:45.947]:Active Directory PT: Action: do-if().
  146. [03/20/12 07:49:45.947]:Active Directory PT: Evaluating conditions.
  147. [03/20/12 07:49:45.948]:Active Directory PT: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  148. [03/20/12 07:49:45.948]:Active Directory PT: Performing else actions.
  149. [03/20/12 07:49:45.948]:Active Directory PT: Action: do-if().
  150. [03/20/12 07:49:45.948]:Active Directory PT: Evaluating conditions.
  151. [03/20/12 07:49:45.948]:Active Directory PT: (if-local-variable 'current-node' equal "association") = TRUE.
  152. [03/20/12 07:49:45.949]:Active Directory PT: Expanded variable reference '$current-node$' to 'association'.
  153. [03/20/12 07:49:45.949]:Active Directory PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  154. [03/20/12 07:49:45.949]:Active Directory PT: (if-association available) = FALSE.
  155. [03/20/12 07:49:45.949]:Active Directory PT: Performing else actions.
  156. [03/20/12 07:49:45.949]:Active Directory PT: Action: do-if().
  157. [03/20/12 07:49:45.949]:Active Directory PT: Evaluating conditions.
  158. [03/20/12 07:49:45.949]:Active Directory PT: Expanded variable reference '$current-node$' to 'association'.
  159. [03/20/12 07:49:45.950]:Active Directory PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  160. [03/20/12 07:49:45.950]:Active Directory PT: Expanded variable reference '$current-node$' to 'association'.
  161. [03/20/12 07:49:45.950]:Active Directory PT: (if-op-attr '$current-node$' available) = FALSE.
  162. [03/20/12 07:49:45.950]:Active Directory PT: Performing else actions.
  163. [03/20/12 07:49:45.950]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - Initialize status properties on published events'.
  164. [03/20/12 07:49:45.951]:Active Directory PT: (if-operation match "add|modify|delete|rename|move") = FALSE.
  165. [03/20/12 07:49:45.951]:Active Directory PT: Rule rejected.
  166. [03/20/12 07:49:45.951]:Active Directory PT:Policy returned:
  167. [03/20/12 07:49:45.951]:Active Directory PT:
  168. <nds dtdversion="2.2">
  169. <source>
  170. <product version="3.6.10.4747">DirXML</product>
  171. <contact>Novell, Inc.</contact>
  172. </source>
  173. <input>
  174. <status level="success" type="heartbeat"/>
  175. </input>
  176. </nds>
  177. [03/20/12 07:49:45.951]:Active Directory PT:Applying policy: %+C%14Clib-AccountTracking-WriteAccounts-itp-V1%-C.
  178. [03/20/12 07:49:45.952]:Active Directory PT: Applying to status #1.
  179. [03/20/12 07:49:45.952]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled'.
  180. [03/20/12 07:49:45.952]:Active Directory PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  181. [03/20/12 07:49:45.952]:Active Directory PT: Rule rejected.
  182. [03/20/12 07:49:45.952]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - query DirXML-Accounts Attribute'.
  183. [03/20/12 07:49:45.952]:Active Directory PT: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  184. [03/20/12 07:49:45.952]:Active Directory PT: Rule rejected.
  185. [03/20/12 07:49:45.953]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - remove Dirxml-Account values on delete operation'.
  186. [03/20/12 07:49:45.953]:Active Directory PT: (if-operation match "delete|remove-association") = FALSE.
  187. [03/20/12 07:49:45.953]:Active Directory PT: (if-operation equal "status") = TRUE.
  188. [03/20/12 07:49:45.953]:Active Directory PT: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  189. [03/20/12 07:49:45.953]:Active Directory PT: Rule rejected.
  190. [03/20/12 07:49:45.953]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - update DirXMLAccounts attribute'.
  191. [03/20/12 07:49:45.954]:Active Directory PT: (if-op-property 'AccountTracking-Operation' not-available) = TRUE.
  192. [03/20/12 07:49:45.954]:Active Directory PT: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  193. [03/20/12 07:49:45.954]:Active Directory PT: (if-operation equal "status") = TRUE.
  194. [03/20/12 07:49:45.954]:Active Directory PT: (if-xpath true "./@level='success'") = TRUE.
  195. [03/20/12 07:49:45.954]:Active Directory PT: (if-op-property 'AccountTracking-Operation' available) = FALSE.
  196. [03/20/12 07:49:45.954]:Active Directory PT: Rule rejected.
  197. [03/20/12 07:49:45.955]:Active Directory PT:Policy returned:
  198. [03/20/12 07:49:45.955]:Active Directory PT:
  199. <nds dtdversion="2.2">
  200. <source>
  201. <product version="3.6.10.4747">DirXML</product>
  202. <contact>Novell, Inc.</contact>
  203. </source>
  204. <input>
  205. <status level="success" type="heartbeat"/>
  206. </input>
  207. </nds>
  208. [03/20/12 07:49:45.955]:Active Directory PT:Applying policy: %+C%14Citp%-C.
  209. [03/20/12 07:49:45.955]:Active Directory PT: Applying to status #1.
  210. [03/20/12 07:49:45.955]:Active Directory PT: Evaluating selection criteria for rule 'streetAddress: Convert CR-LF to LF'.
  211. [03/20/12 07:49:45.955]:Active Directory PT: Rule selected.
  212. [03/20/12 07:49:45.956]:Active Directory PT: Applying rule 'streetAddress: Convert CR-LF to LF'.
  213. [03/20/12 07:49:45.956]:Active Directory PT: Action: do-reformat-op-attr("streetAddress",token-replace-all("\r\n","\r",token-local-variable("current-value"))).
  214. [03/20/12 07:49:45.956]:Active Directory PT: Evaluating selection criteria for rule 'logonHours: Convert to Login Allowed Time Map form'.
  215. [03/20/12 07:49:45.956]:Active Directory PT: Rule selected.
  216. [03/20/12 07:49:45.956]:Active Directory PT: Applying rule 'logonHours: Convert to Login Allowed Time Map form'.
  217. [03/20/12 07:49:45.956]:Active Directory PT: Action: do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2eDir($current-value)")).
  218. [03/20/12 07:49:45.957]:Active Directory PT: Evaluating selection criteria for rule 'accountExpires: Convert to Identity Vault time format'.
  219. [03/20/12 07:49:45.957]:Active Directory PT: Rule selected.
  220. [03/20/12 07:49:45.957]:Active Directory PT: Applying rule 'accountExpires: Convert to Identity Vault time format'.
  221. [03/20/12 07:49:45.957]:Active Directory PT: Action: do-reformat-op-attr("accountExpires",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
  222. [03/20/12 07:49:45.957]:Active Directory PT: Evaluating selection criteria for rule 'lockoutTime: Convert to Identity Vault time format'.
  223. [03/20/12 07:49:45.958]:Active Directory PT: Rule selected.
  224. [03/20/12 07:49:45.958]:Active Directory PT: Applying rule 'lockoutTime: Convert to Identity Vault time format'.
  225. [03/20/12 07:49:45.958]:Active Directory PT: Action: do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
  226. [03/20/12 07:49:45.958]:Active Directory PT:Policy returned:
  227. [03/20/12 07:49:45.958]:Active Directory PT:
  228. <nds dtdversion="2.2">
  229. <source>
  230. <product version="3.6.10.4747">DirXML</product>
  231. <contact>Novell, Inc.</contact>
  232. </source>
  233. <input>
  234. <status level="success" type="heartbeat"/>
  235. </input>
  236. </nds>
  237. [03/20/12 07:49:45.959]:Active Directory PT:Applying policy: %+C%14Citp-EntitlementsImpl%-C.
  238. [03/20/12 07:49:45.959]:Active Directory PT: Applying to status #1.
  239. [03/20/12 07:49:45.959]:Active Directory PT: Evaluating selection criteria for rule 'Check target of add-association for group membership entitlements'.
  240. [03/20/12 07:49:45.959]:Active Directory PT: (if-global-variable 'drv.entitlement.Group' equal "true") = FALSE.
  241. [03/20/12 07:49:45.959]:Active Directory PT: Rule rejected.
  242. [03/20/12 07:49:45.959]:Active Directory PT: Evaluating selection criteria for rule 'Check target of add-association for Exchange mailbox entitlements'.
  243. [03/20/12 07:49:45.960]:Active Directory PT: (if-global-variable 'drv.exchMailboxMethod' equal "entitlement") = FALSE.
  244. [03/20/12 07:49:45.960]:Active Directory PT: Rule rejected.
  245. [03/20/12 07:49:45.960]:Active Directory PT:Policy returned:
  246. [03/20/12 07:49:45.960]:Active Directory PT:
  247. <nds dtdversion="2.2">
  248. <source>
  249. <product version="3.6.10.4747">DirXML</product>
  250. <contact>Novell, Inc.</contact>
  251. </source>
  252. <input>
  253. <status level="success" type="heartbeat"/>
  254. </input>
  255. </nds>
  256. [03/20/12 07:49:45.960]:Active Directory PT:Applying policy: %+C%14CPassword(Pub)-Sub Email Notifications%-C.
  257. [03/20/12 07:49:45.961]:Active Directory PT: Applying to status #1.
  258. [03/20/12 07:49:45.961]:Active Directory PT: Evaluating selection criteria for rule 'Send e-mail on a failure when subscribing to passwords'.
  259. [03/20/12 07:49:45.961]:Active Directory PT: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  260. [03/20/12 07:49:45.961]:Active Directory PT: (if-operation equal "status") = TRUE.
  261. [03/20/12 07:49:45.961]:Active Directory PT: (if-xpath true "self::status[@level != 'success'][text() != '']/operation-data/password-subscribe-status/association[text() != '']") = FALSE.
  262. [03/20/12 07:49:45.962]:Active Directory PT: Rule rejected.
  263. [03/20/12 07:49:45.962]:Active Directory PT: Evaluating selection criteria for rule 'Send e-mail on failure to reset connected system password using the Identity Manager data store password'.
  264. [03/20/12 07:49:45.962]:Active Directory PT: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  265. [03/20/12 07:49:45.962]:Active Directory PT: (if-operation equal "status") = TRUE.
  266. [03/20/12 07:49:45.962]:Active Directory PT: (if-xpath true "self::status[@level != 'success']/operation-data/password-reset-status") = FALSE.
  267. [03/20/12 07:49:45.963]:Active Directory PT: Rule rejected.
  268. [03/20/12 07:49:45.963]:Active Directory PT:Policy returned:
  269. [03/20/12 07:49:45.963]:Active Directory PT:
  270. <nds dtdversion="2.2">
  271. <source>
  272. <product version="3.6.10.4747">DirXML</product>
  273. <contact>Novell, Inc.</contact>
  274. </source>
  275. <input>
  276. <status level="success" type="heartbeat"/>
  277. </input>
  278. </nds>
  279. [03/20/12 07:49:45.963]:Active Directory PT:Applying policy: %+C%14Clib-Audit-SendEntitlementsEvents-itp-V1%-C.
  280. [03/20/12 07:49:45.963]:Active Directory PT: Applying to status #1.
  281. [03/20/12 07:49:45.963]:Active Directory PT: Evaluating selection criteria for rule '00031200 - Account Create By Entitlement Grant'.
  282. [03/20/12 07:49:45.964]:Active Directory PT: (if-operation equal "status") = TRUE.
  283. [03/20/12 07:49:45.964]:Active Directory PT: (if-op-property 'accountAction' equal "accountCreateByEntitlementGrant") = FALSE.
  284. [03/20/12 07:49:45.964]:Active Directory PT: Rule rejected.
  285. [03/20/12 07:49:45.964]:Active Directory PT: Evaluating selection criteria for rule '00031201 - Account Delete By Entitlement Revoke'.
  286. [03/20/12 07:49:45.964]:Active Directory PT: (if-operation equal "status") = TRUE.
  287. [03/20/12 07:49:45.964]:Active Directory PT: (if-xpath true "./operation-data/entitlement-impl/@state = '0'") = FALSE.
  288. [03/20/12 07:49:45.965]:Active Directory PT: (if-operation equal "status") = TRUE.
  289. [03/20/12 07:49:45.965]:Active Directory PT: (if-op-property 'accountAction' equal "accountDeleteByEntitlementRevoke") = FALSE.
  290. [03/20/12 07:49:45.965]:Active Directory PT: Rule rejected.
  291. [03/20/12 07:49:45.965]:Active Directory PT: Evaluating selection criteria for rule '00031202 - Account Disable By Entitlement Revoke'.
  292. [03/20/12 07:49:45.965]:Active Directory PT: (if-operation equal "status") = TRUE.
  293. [03/20/12 07:49:45.965]:Active Directory PT: (if-op-property 'accountAction' equal "accountDisableByEntitlementRevoke") = FALSE.
  294. [03/20/12 07:49:45.966]:Active Directory PT: Rule rejected.
  295. [03/20/12 07:49:45.966]:Active Directory PT: Evaluating selection criteria for rule '00031203 - Account Enable By Entitlement Grant'.
  296. [03/20/12 07:49:45.966]:Active Directory PT: (if-operation equal "status") = TRUE.
  297. [03/20/12 07:49:45.966]:Active Directory PT: (if-op-property 'accountAction' equal "accountEnableByEntitlementGrant") = FALSE.
  298. [03/20/12 07:49:45.966]:Active Directory PT: Rule rejected.
  299. [03/20/12 07:49:45.966]:Active Directory PT: Evaluating selection criteria for rule 'Generate Audit Event'.
  300. [03/20/12 07:49:45.966]:Active Directory PT: (if-operation equal "status") = TRUE.
  301. [03/20/12 07:49:45.967]:Active Directory PT: (if-local-variable 'auditEventID' available) = FALSE.
  302. [03/20/12 07:49:45.967]:Active Directory PT: Rule rejected.
  303. [03/20/12 07:49:45.967]:Active Directory PT:Policy returned:
  304. [03/20/12 07:49:45.967]:Active Directory PT:
  305. <nds dtdversion="2.2">
  306. <source>
  307. <product version="3.6.10.4747">DirXML</product>
  308. <contact>Novell, Inc.</contact>
  309. </source>
  310. <input>
  311. <status level="success" type="heartbeat"/>
  312. </input>
  313. </nds>
  314. [03/20/12 07:49:45.967]:Active Directory PT:Applying schema mapping policies to input.
  315. [03/20/12 07:49:45.967]:Active Directory PT:Applying policy: %+C%14Csmp%-C.
  316. [03/20/12 07:49:45.968]:Active Directory PT:Resolving association references.
  317. [03/20/12 07:49:45.968]:Active Directory PT:Applying event transformation policies.
  318. [03/20/12 07:49:45.968]:Active Directory PT:Applying policy: %+C%14Cpub-etp-EntitlementsImpl%-C.
  319. [03/20/12 07:49:45.968]:Active Directory PT: Applying to status #1.
  320. [03/20/12 07:49:45.968]:Active Directory PT: Evaluating selection criteria for rule 'Disallow user account delete when using entitlements'.
  321. [03/20/12 07:49:45.968]:Active Directory PT: (if-operation equal "delete") = FALSE.
  322. [03/20/12 07:49:45.969]:Active Directory PT: Rule rejected.
  323. [03/20/12 07:49:45.969]:Active Directory PT: Evaluating selection criteria for rule 'Strip Login Disabled from operation (Disable Option)'.
  324. [03/20/12 07:49:45.969]:Active Directory PT: (if-global-variable 'drv.entitlement.UserAccount' equal "true") = FALSE.
  325. [03/20/12 07:49:45.969]:Active Directory PT: Rule rejected.
  326. [03/20/12 07:49:45.969]:Active Directory PT:Policy returned:
  327. [03/20/12 07:49:45.969]:Active Directory PT:
  328. <nds dtdversion="2.2">
  329. <source>
  330. <product version="3.6.10.4747">DirXML</product>
  331. <contact>Novell, Inc.</contact>
  332. </source>
  333. <input>
  334. <status level="success" type="heartbeat"/>
  335. </input>
  336. </nds>
  337. [03/20/12 07:49:45.970]:Active Directory PT:Applying policy: %+C%14Cpub-etp-HandleMovesAndRenames%-C.
  338. [03/20/12 07:49:45.970]:Active Directory PT: Applying to status #1.
  339. [03/20/12 07:49:45.970]:Active Directory PT: Evaluating selection criteria for rule 'break if not a move or rename'.
  340. [03/20/12 07:49:45.970]:Active Directory PT: (if-operation not-match "move|rename") = TRUE.
  341. [03/20/12 07:49:45.970]:Active Directory PT: Rule selected.
  342. [03/20/12 07:49:45.970]:Active Directory PT: Applying rule 'break if not a move or rename'.
  343. [03/20/12 07:49:45.971]:Active Directory PT: Action: do-break().
  344. [03/20/12 07:49:45.971]:Active Directory PT:Policy returned:
  345. [03/20/12 07:49:45.971]:Active Directory PT:
  346. <nds dtdversion="2.2">
  347. <source>
  348. <product version="3.6.10.4747">DirXML</product>
  349. <contact>Novell, Inc.</contact>
  350. </source>
  351. <input>
  352. <status level="success" type="heartbeat"/>
  353. </input>
  354. </nds>
  355. [03/20/12 07:49:45.971]:Active Directory PT:Applying publisher filter.
  356. [03/20/12 07:49:45.971]:Active Directory PT:Publisher processing status for .
  357. [03/20/12 07:49:45.971]:Active Directory PT:Applying command transformation policies.
  358. [03/20/12 07:49:45.972]:Active Directory PT:Applying policy: %+C%14Cpub-ctp-UserNameMap%-C.
  359. [03/20/12 07:49:45.972]:Active Directory PT: Applying to status #1.
  360. [03/20/12 07:49:45.972]:Active Directory PT: Evaluating selection criteria for rule 'consider user objects when name mapping is enabled'.
  361. [03/20/12 07:49:45.972]:Active Directory PT: (if-class-name not-equal "User") = TRUE.
  362. [03/20/12 07:49:45.972]:Active Directory PT: Rule selected.
  363. [03/20/12 07:49:45.972]:Active Directory PT: Applying rule 'consider user objects when name mapping is enabled'.
  364. [03/20/12 07:49:45.972]:Active Directory PT: Action: do-break().
  365. [03/20/12 07:49:45.973]:Active Directory PT:Policy returned:
  366. [03/20/12 07:49:45.973]:Active Directory PT:
  367. <nds dtdversion="2.2">
  368. <source>
  369. <product version="3.6.10.4747">DirXML</product>
  370. <contact>Novell, Inc.</contact>
  371. </source>
  372. <input>
  373. <status level="success" type="heartbeat"/>
  374. </input>
  375. </nds>
  376. [03/20/12 07:49:45.973]:Active Directory PT:Applying policy: %+C%14Cpub-ctp%-C.
  377. [03/20/12 07:49:45.973]:Active Directory PT: Applying to status #1.
  378. [03/20/12 07:49:45.973]:Active Directory PT: Evaluating selection criteria for rule 'set cached context value on merge'.
  379. [03/20/12 07:49:45.974]:Active Directory PT: (if-operation equal "modify") = FALSE.
  380. [03/20/12 07:49:45.974]:Active Directory PT: Rule rejected.
  381. [03/20/12 07:49:45.974]:Active Directory PT: Evaluating selection criteria for rule 'Set Equivalent To Me when adding object to a group'.
  382. [03/20/12 07:49:45.975]:Active Directory PT: (if-class-name equal "Group") = FALSE.
  383. [03/20/12 07:49:45.975]:Active Directory PT: Rule rejected.
  384. [03/20/12 07:49:45.975]:Active Directory PT: Evaluating selection criteria for rule 'Remove Equivalent To Me when removing object from a group'.
  385. [03/20/12 07:49:45.975]:Active Directory PT: (if-class-name equal "Group") = FALSE.
  386. [03/20/12 07:49:45.975]:Active Directory PT: Rule rejected.
  387. [03/20/12 07:49:45.975]:Active Directory PT: Evaluating selection criteria for rule 'remove managed attributes when object disassociated'.
  388. [03/20/12 07:49:45.975]:Active Directory PT: (if-operation equal "remove-association") = FALSE.
  389. [03/20/12 07:49:45.976]:Active Directory PT: Rule rejected.
  390. [03/20/12 07:49:45.976]:Active Directory PT: Evaluating selection criteria for rule 'Prevent unassociated users from being removed from groups'.
  391. [03/20/12 07:49:45.976]:Active Directory PT: (if-operation equal "modify") = FALSE.
  392. [03/20/12 07:49:45.976]:Active Directory PT: Rule rejected.
  393. [03/20/12 07:49:45.976]:Active Directory PT:Policy returned:
  394. [03/20/12 07:49:45.976]:Active Directory PT:
  395. <nds dtdversion="2.2">
  396. <source>
  397. <product version="3.6.10.4747">DirXML</product>
  398. <contact>Novell, Inc.</contact>
  399. </source>
  400. <input>
  401. <status level="success" type="heartbeat"/>
  402. </input>
  403. </nds>
  404. [03/20/12 07:49:45.977]:Active Directory PT:Applying XSLT policy: %+C%14Cpub-cts%-C.
  405. [03/20/12 07:49:45.977]:Active Directory PT:Policy returned:
  406. [03/20/12 07:49:45.977]:Active Directory PT:
  407. <nds dtdversion="2.2">
  408. <source>
  409. <product version="3.6.10.4747">DirXML</product>
  410. <contact>Novell, Inc.</contact>
  411. </source>
  412. <input>
  413. <status level="success" type="heartbeat"/>
  414. </input>
  415. </nds>
  416. [03/20/12 07:49:45.978]:Active Directory PT:Applying policy: %+C%14CPassword(Pub)-Default Password Policy%-C.
  417. [03/20/12 07:49:45.978]:Active Directory PT: Applying to status #1.
  418. [03/20/12 07:49:45.978]:Active Directory PT: Evaluating selection criteria for rule 'On User add, provide default password of @Dirxml1 if no password exists'.
  419. [03/20/12 07:49:45.978]:Active Directory PT: (if-operation equal "add") = FALSE.
  420. [03/20/12 07:49:45.978]:Active Directory PT: Rule rejected.
  421. [03/20/12 07:49:45.979]:Active Directory PT:Policy returned:
  422. [03/20/12 07:49:45.979]:Active Directory PT:
  423. <nds dtdversion="2.2">
  424. <source>
  425. <product version="3.6.10.4747">DirXML</product>
  426. <contact>Novell, Inc.</contact>
  427. </source>
  428. <input>
  429. <status level="success" type="heartbeat"/>
  430. </input>
  431. </nds>
  432. [03/20/12 07:49:45.979]:Active Directory PT:Applying policy: %+C%14CPassword(Pub)-Check Password GCV%-C.
  433. [03/20/12 07:49:45.979]:Active Directory PT: Applying to status #1.
  434. [03/20/12 07:49:45.979]:Active Directory PT: Evaluating selection criteria for rule 'Block publishing passwords to Identity Manager data store when adding a object'.
  435. [03/20/12 07:49:45.980]:Active Directory PT: (if-global-variable 'enable-password-publish' equal "false") = FALSE.
  436. [03/20/12 07:49:45.980]:Active Directory PT: Rule rejected.
  437. [03/20/12 07:49:45.980]:Active Directory PT: Evaluating selection criteria for rule 'Block sending modify-password changes to the Identity Manager data store'.
  438. [03/20/12 07:49:45.980]:Active Directory PT: (if-global-variable 'enable-password-publish' equal "false") = FALSE.
  439. [03/20/12 07:49:45.980]:Active Directory PT: Rule rejected.
  440. [03/20/12 07:49:45.980]:Active Directory PT:Policy returned:
  441. [03/20/12 07:49:45.980]:Active Directory PT:
  442. <nds dtdversion="2.2">
  443. <source>
  444. <product version="3.6.10.4747">DirXML</product>
  445. <contact>Novell, Inc.</contact>
  446. </source>
  447. <input>
  448. <status level="success" type="heartbeat"/>
  449. </input>
  450. </nds>
  451. [03/20/12 07:49:45.981]:Active Directory PT:Applying policy: %+C%14CPassword(Pub)-Publish Distribution Password%-C.
  452. [03/20/12 07:49:45.981]:Active Directory PT: Applying to status #1.
  453. [03/20/12 07:49:45.981]:Active Directory PT: Evaluating selection criteria for rule 'Add nspmDistributionAttribute attribute to add operation'.
  454. [03/20/12 07:49:45.981]:Active Directory PT: (if-global-variable 'publish-password-to-dp' equal "true") = FALSE.
  455. [03/20/12 07:49:45.982]:Active Directory PT: Rule rejected.
  456. [03/20/12 07:49:45.982]:Active Directory PT: Evaluating selection criteria for rule 'Change modify-password operations to a modify'.
  457. [03/20/12 07:49:45.982]:Active Directory PT: (if-global-variable 'publish-password-to-dp' equal "true") = FALSE.
  458. [03/20/12 07:49:45.982]:Active Directory PT: Rule rejected.
  459. [03/20/12 07:49:45.982]:Active Directory PT:Policy returned:
  460. [03/20/12 07:49:45.982]:Active Directory PT:
  461. <nds dtdversion="2.2">
  462. <source>
  463. <product version="3.6.10.4747">DirXML</product>
  464. <contact>Novell, Inc.</contact>
  465. </source>
  466. <input>
  467. <status level="success" type="heartbeat"/>
  468. </input>
  469. </nds>
  470. [03/20/12 07:49:45.983]:Active Directory PT:Applying policy: %+C%14CPassword(Pub)-Publish NDS Password%-C.
  471. [03/20/12 07:49:45.983]:Active Directory PT: Applying to status #1.
  472. [03/20/12 07:49:45.983]:Active Directory PT: Evaluating selection criteria for rule 'Block publishing passwords to NDS password'.
  473. [03/20/12 07:49:45.983]:Active Directory PT: (if-global-variable 'publish-password-to-nds' equal "false") = FALSE.
  474. [03/20/12 07:49:45.983]:Active Directory PT: Rule rejected.
  475. [03/20/12 07:49:45.983]:Active Directory PT: Evaluating selection criteria for rule 'Block sending modify-password changes to the NDS password'.
  476. [03/20/12 07:49:45.984]:Active Directory PT: (if-global-variable 'publish-password-to-nds' equal "false") = FALSE.
  477. [03/20/12 07:49:45.984]:Active Directory PT: Rule rejected.
  478. [03/20/12 07:49:45.984]:Active Directory PT:Policy returned:
  479. [03/20/12 07:49:45.984]:Active Directory PT:
  480. <nds dtdversion="2.2">
  481. <source>
  482. <product version="3.6.10.4747">DirXML</product>
  483. <contact>Novell, Inc.</contact>
  484. </source>
  485. <input>
  486. <status level="success" type="heartbeat"/>
  487. </input>
  488. </nds>
  489. [03/20/12 07:49:45.984]:Active Directory PT:Applying policy: %+C%14CPassword(Pub)-Add Password Payload%-C.
  490. [03/20/12 07:49:45.984]:Active Directory PT: Applying to status #1.
  491. [03/20/12 07:49:45.985]:Active Directory PT: Evaluating selection criteria for rule 'Add operation-data element to password operations'.
  492. [03/20/12 07:49:45.985]:Active Directory PT: (if-operation equal "add") = FALSE.
  493. [03/20/12 07:49:45.985]:Active Directory PT: (if-operation equal "add") = FALSE.
  494. [03/20/12 07:49:45.985]:Active Directory PT: (if-operation equal "modify-password") = FALSE.
  495. [03/20/12 07:49:45.985]:Active Directory PT: (if-operation equal "modify") = FALSE.
  496. [03/20/12 07:49:45.985]:Active Directory PT: Rule rejected.
  497. [03/20/12 07:49:45.985]:Active Directory PT: Evaluating selection criteria for rule 'Add payload data to password operations'.
  498. [03/20/12 07:49:45.986]:Active Directory PT: (if-operation equal "addPayloadToPassword") = FALSE.
  499. [03/20/12 07:49:45.986]:Active Directory PT: (if-operation equal "add") = FALSE.
  500. [03/20/12 07:49:45.986]:Active Directory PT: (if-operation equal "modify-password") = FALSE.
  501. [03/20/12 07:49:45.986]:Active Directory PT: (if-operation equal "modify") = FALSE.
  502. [03/20/12 07:49:45.986]:Active Directory PT: Rule rejected.
  503. [03/20/12 07:49:45.986]:Active Directory PT:Policy returned:
  504. [03/20/12 07:49:45.986]:Active Directory PT:
  505. <nds dtdversion="2.2">
  506. <source>
  507. <product version="3.6.10.4747">DirXML</product>
  508. <contact>Novell, Inc.</contact>
  509. </source>
  510. <input>
  511. <status level="success" type="heartbeat"/>
  512. </input>
  513. </nds>
  514. [03/20/12 07:49:45.987]:Active Directory PT:Applying policy: %+C%14Clib-AccountTracking-WriteAccountsOnAdds-pub-ctp-V1%-C.
  515. [03/20/12 07:49:45.987]:Active Directory PT: Applying to status #1.
  516. [03/20/12 07:49:45.987]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - disregard policy if disabled'.
  517. [03/20/12 07:49:45.987]:Active Directory PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  518. [03/20/12 07:49:45.987]:Active Directory PT: Rule rejected.
  519. [03/20/12 07:49:45.988]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - on add operation add Dirxml-Accounts'.
  520. [03/20/12 07:49:45.988]:Active Directory PT: (if-operation equal "add") = FALSE.
  521. [03/20/12 07:49:45.988]:Active Directory PT: Rule rejected.
  522. [03/20/12 07:49:45.988]:Active Directory PT:Policy returned:
  523. [03/20/12 07:49:45.988]:Active Directory PT:
  524. <nds dtdversion="2.2">
  525. <source>
  526. <product version="3.6.10.4747">DirXML</product>
  527. <contact>Novell, Inc.</contact>
  528. </source>
  529. <input>
  530. <status level="success" type="heartbeat"/>
  531. </input>
  532. </nds>
  533. [03/20/12 07:49:45.989]:Active Directory PT:Filtering out notification-only attributes.
  534. [03/20/12 07:49:45.989]:Active Directory PT:Pumping XDS to eDirectory.
  535. [03/20/12 07:49:45.989]:Active Directory PT:Performing operation status for .
  536. [03/20/12 07:49:45.989]:Active Directory PT:
  537. DirXML Log Event -------------------
  538. Driver: \EDIR2ADLAB\fdny\AD-TEST\Active Directory
  539. Channel: Publisher
  540. Status: Success
  541. [03/20/12 07:49:45.989]:Active Directory PT:Fixing up association references.
  542. [03/20/12 07:49:45.990]:Active Directory PT:Applying schema mapping policies to output.
  543. [03/20/12 07:49:45.990]:Active Directory PT:Applying policy: %+C%14Csmp%-C.
  544. [03/20/12 07:49:45.990]:Active Directory PT:Applying output transformation policies.
  545. [03/20/12 07:49:45.990]:Active Directory PT:Applying policy: %+C%14Cotp%-C.
  546. [03/20/12 07:49:45.990]:Active Directory PT: Applying to status #1.
  547. [03/20/12 07:49:45.990]:Active Directory PT: Evaluating selection criteria for rule 'Street Address: Convert LF to CR-LF'.
  548. [03/20/12 07:49:45.991]:Active Directory PT: Rule selected.
  549. [03/20/12 07:49:45.991]:Active Directory PT: Applying rule 'Street Address: Convert LF to CR-LF'.
  550. [03/20/12 07:49:45.991]:Active Directory PT: Action: do-reformat-op-attr("streetAddress",token-replace-all("[^\r]\n","\r\n",token-local-variable("current-value"))).
  551. [03/20/12 07:49:45.991]:Active Directory PT: Evaluating selection criteria for rule 'logonHours: Convert to Active Directory form'.
  552. [03/20/12 07:49:45.991]:Active Directory PT: Rule selected.
  553. [03/20/12 07:49:45.991]:Active Directory PT: Applying rule 'logonHours: Convert to Active Directory form'.
  554. [03/20/12 07:49:45.992]:Active Directory PT: Action: do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2ADLenient($current-value)")).
  555. [03/20/12 07:49:45.992]:Active Directory PT: Evaluating selection criteria for rule 'accountExpires: Convert to Active Directory form'.
  556. [03/20/12 07:49:45.992]:Active Directory PT: (if-op-attr 'accountExpires' changing) = FALSE.
  557. [03/20/12 07:49:45.992]:Active Directory PT: Rule rejected.
  558. [03/20/12 07:49:45.992]:Active Directory PT: Evaluating selection criteria for rule 'lockoutTime: Convert to Active Directory form'.
  559. [03/20/12 07:49:45.992]:Active Directory PT: Rule selected.
  560. [03/20/12 07:49:45.993]:Active Directory PT: Applying rule 'lockoutTime: Convert to Active Directory form'.
  561. [03/20/12 07:49:45.993]:Active Directory PT: Action: do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateEpoch2FileTime($current-value)")).
  562. [03/20/12 07:49:45.993]:Active Directory PT: Evaluating selection criteria for rule 'Add: User - convert multi-valued Telephone to single value'.
  563. [03/20/12 07:49:45.993]:Active Directory PT: (if-operation equal "add") = FALSE.
  564. [03/20/12 07:49:45.993]:Active Directory PT: Rule rejected.
  565. [03/20/12 07:49:45.993]:Active Directory PT: Evaluating selection criteria for rule 'update Active Directory logon name'.
  566. [03/20/12 07:49:45.994]:Active Directory PT: (if-xpath true "self::status[@level = 'success']/operation-data/windows-2000-logon-name") = FALSE.
  567. [03/20/12 07:49:45.994]:Active Directory PT: Rule rejected.
  568. [03/20/12 07:49:45.994]:Active Directory PT: Evaluating selection criteria for rule 'Exchange: Remove HomeMDB when disabled'.
  569. [03/20/12 07:49:45.994]:Active Directory PT: (if-global-variable 'drv.exchMailboxMethod' equal "disabled") = TRUE.
  570. [03/20/12 07:49:45.994]:Active Directory PT: Rule selected.
  571. [03/20/12 07:49:45.994]:Active Directory PT: Applying rule 'Exchange: Remove HomeMDB when disabled'.
  572. [03/20/12 07:49:45.995]:Active Directory PT: Action: do-strip-op-attr("homeMDB").
  573. [03/20/12 07:49:45.995]:Active Directory PT:Policy returned:
  574. [03/20/12 07:49:45.995]:Active Directory PT:
  575. <nds dtdversion="3.5" ndsversion="8.x">
  576. <source>
  577. <product version="3.6.10.4747">DirXML</product>
  578. <contact>Novell, Inc.</contact>
  579. </source>
  580. <output>
  581. <status event-id="0" level="success"></status>
  582. </output>
  583. </nds>
  584. [03/20/12 07:49:45.995]:Active Directory PT:Applying policy: %+C%14CPassword(Sub)-Pub Email Notifications%-C.
  585. [03/20/12 07:49:45.995]:Active Directory PT: Applying to status #1.
  586. [03/20/12 07:49:45.996]:Active Directory PT: Evaluating selection criteria for rule 'Send e-mail for a failed publish password operation'.
  587. [03/20/12 07:49:45.996]:Active Directory PT: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  588. [03/20/12 07:49:45.996]:Active Directory PT: (if-operation equal "status") = TRUE.
  589. [03/20/12 07:49:45.996]:Active Directory PT: (if-xpath true "self::status[@level != 'success']/operation-data/password-publish-status") = FALSE.
  590. [03/20/12 07:49:45.996]:Active Directory PT: Rule rejected.
  591. [03/20/12 07:49:45.996]:Active Directory PT:Policy returned:
  592. [03/20/12 07:49:45.996]:Active Directory PT:
  593. <nds dtdversion="3.5" ndsversion="8.x">
  594. <source>
  595. <product version="3.6.10.4747">DirXML</product>
  596. <contact>Novell, Inc.</contact>
  597. </source>
  598. <output>
  599. <status event-id="0" level="success"></status>
  600. </output>
  601. </nds>
  602. [03/20/12 07:49:45.997]:Active Directory PT:Applying policy: %+C%14Clib-CredProv-ConvertPayload-otp-V1%-C.
  603. [03/20/12 07:49:45.997]:Active Directory PT: Applying to status #1.
  604. [03/20/12 07:49:45.997]:Active Directory PT: Evaluating selection criteria for rule 'Is credential provisioning enabled? Are there any custom payloads?'.
  605. [03/20/12 07:49:45.997]:Active Directory PT: Rule selected.
  606. [03/20/12 07:49:45.998]:Active Directory PT: Applying rule 'Is credential provisioning enabled? Are there any custom payloads?'.
  607. [03/20/12 07:49:45.998]:Active Directory PT: Action: do-if().
  608. [03/20/12 07:49:45.998]:Active Directory PT: Evaluating conditions.
  609. [03/20/12 07:49:45.998]:Active Directory PT: (if-global-variable 'credprov.enable' not-equal "true") = TRUE.
  610. [03/20/12 07:49:45.998]:Active Directory PT: Performing if actions.
  611. [03/20/12 07:49:45.998]:Active Directory PT: Action: do-break().
  612. [03/20/12 07:49:45.998]:Active Directory PT:Policy returned:
  613. [03/20/12 07:49:45.999]:Active Directory PT:
  614. <nds dtdversion="3.5" ndsversion="8.x">
  615. <source>
  616. <product version="3.6.10.4747">DirXML</product>
  617. <contact>Novell, Inc.</contact>
  618. </source>
  619. <output>
  620. <status event-id="0" level="success"></status>
  621. </output>
  622. </nds>
  623. [03/20/12 07:49:45.999]:Active Directory PT:Applying policy: %+C%14Clib-AccountTracking-Subscribe-otp-V1%-C.
  624. [03/20/12 07:49:45.999]:Active Directory PT: Applying to status #1.
  625. [03/20/12 07:49:45.999]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled or wrong object class'.
  626. [03/20/12 07:49:45.999]:Active Directory PT: Rule selected.
  627. [03/20/12 07:49:46.000]:Active Directory PT: Applying rule 'AccountTracking - disregard if disabled or wrong object class'.
  628. [03/20/12 07:49:46.000]:Active Directory PT: Action: do-if().
  629. [03/20/12 07:49:46.000]:Active Directory PT: Evaluating conditions.
  630. [03/20/12 07:49:46.000]:Active Directory PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  631. [03/20/12 07:49:46.000]:Active Directory PT: Performing else actions.
  632. [03/20/12 07:49:46.000]:Active Directory PT: Action: do-for-each(arg-node-set(token-global-variable("drv.acctTrk.objectClass"))).
  633. [03/20/12 07:49:46.000]:Active Directory PT: arg-node-set(token-global-variable("drv.acctTrk.objectClass"))
  634. [03/20/12 07:49:46.001]:Active Directory PT: token-global-variable("drv.acctTrk.objectClass")
  635. [03/20/12 07:49:46.001]:Active Directory PT: Token Value: {"user"}.
  636. [03/20/12 07:49:46.001]:Active Directory PT: Arg Value: {"user"}.
  637. [03/20/12 07:49:46.001]:Active Directory PT: Performing actions for local-variable(current-node) = "user".
  638. [03/20/12 07:49:46.001]:Active Directory PT: Action: do-if().
  639. [03/20/12 07:49:46.001]:Active Directory PT: Evaluating conditions.
  640. [03/20/12 07:49:46.002]:Active Directory PT: (if-class-name equal "$current-node$") = FALSE.
  641. [03/20/12 07:49:46.002]:Active Directory PT: Performing else actions.
  642. [03/20/12 07:49:46.002]:Active Directory PT: Action: do-if().
  643. [03/20/12 07:49:46.002]:Active Directory PT: Evaluating conditions.
  644. [03/20/12 07:49:46.002]:Active Directory PT: (if-local-variable 'pass' not-available) = TRUE.
  645. [03/20/12 07:49:46.002]:Active Directory PT: Performing if actions.
  646. [03/20/12 07:49:46.002]:Active Directory PT: Action: do-break().
  647. [03/20/12 07:49:46.002]:Active Directory PT:Policy returned:
  648. [03/20/12 07:49:46.003]:Active Directory PT:
  649. <nds dtdversion="3.5" ndsversion="8.x">
  650. <source>
  651. <product version="3.6.10.4747">DirXML</product>
  652. <contact>Novell, Inc.</contact>
  653. </source>
  654. <output>
  655. <status event-id="0" level="success"></status>
  656. </output>
  657. </nds>
  658. [03/20/12 07:49:46.003]:Active Directory PT:
  659. <nds dtdversion="3.5" ndsversion="8.x">
  660. <source>
  661. <product version="3.6.10.4747">DirXML</product>
  662. <contact>Novell, Inc.</contact>
  663. </source>
  664. <output>
  665. <status event-id="0" level="success"></status>
  666. </output>
  667. </nds>
  668. [03/20/12 07:49:46.003]:Active Directory PT:Remote Interface Driver: Sending...
  669. [03/20/12 07:49:46.004]:Active Directory PT:
  670. <nds dtdversion="3.5" ndsversion="8.x">
  671. <source>
  672. <product version="3.6.10.4747">DirXML</product>
  673. <contact>Novell, Inc.</contact>
  674. </source>
  675. <output>
  676. <status event-id="0" level="success"></status>
  677. </output>
  678. </nds>
  679. [03/20/12 07:49:46.004]:Active Directory PT:Remote Interface Driver: Document sent.
  680. [03/20/12 07:49:46.896]:Active Directory :Remote Interface Driver: Received.
  681. [03/20/12 07:49:46.897]:Active Directory :
  682. <nds dtdversion="2.2">
  683. <source>
  684. <product version="3.6.10.4747">DirXML</product>
  685. <contact>Novell, Inc.</contact>
  686. </source>
  687. <input>
  688. <status level="success" type="heartbeat"/>
  689. </input>
  690. </nds>
  691. [03/20/12 07:49:46.897]:Active Directory :Remote Interface Driver: Received document for publisher channel
  692. [03/20/12 07:49:46.897]:Active Directory :Remote Interface Driver: Waiting for receive...
  693. [03/20/12 07:49:46.897]:Active Directory PT:Receiving DOM document from application.
  694. [03/20/12 07:49:46.898]:Active Directory PT:
  695. <nds dtdversion="2.2">
  696. <source>
  697. <product version="3.6.10.4747">DirXML</product>
  698. <contact>Novell, Inc.</contact>
  699. </source>
  700. <input>
  701. <status level="success" type="heartbeat"/>
  702. </input>
  703. </nds>
  704. [03/20/12 07:49:46.898]:Active Directory PT:Applying input transformation policies.
  705. [03/20/12 07:49:46.898]:Active Directory PT:Applying policy: %+C%14Clib-AccountTracking-Publish-itp-V1%-C.
  706. [03/20/12 07:49:46.898]:Active Directory PT: Applying to status #1.
  707. [03/20/12 07:49:46.899]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled or wrong object class'.
  708. [03/20/12 07:49:46.899]:Active Directory PT: Rule selected.
  709. [03/20/12 07:49:46.899]:Active Directory PT: Applying rule 'AccountTracking - disregard if disabled or wrong object class'.
  710. [03/20/12 07:49:46.899]:Active Directory PT: Action: do-if().
  711. [03/20/12 07:49:46.899]:Active Directory PT: Evaluating conditions.
  712. [03/20/12 07:49:46.899]:Active Directory PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  713. [03/20/12 07:49:46.900]:Active Directory PT: Performing else actions.
  714. [03/20/12 07:49:46.900]:Active Directory PT: Action: do-if().
  715. [03/20/12 07:49:46.900]:Active Directory PT: Evaluating conditions.
  716. [03/20/12 07:49:46.900]:Active Directory PT: (if-class-name available) = FALSE.
  717. [03/20/12 07:49:46.900]:Active Directory PT: Performing else actions.
  718. [03/20/12 07:49:46.900]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - on add-association sync the operation-properties to status operations'.
  719. [03/20/12 07:49:46.901]:Active Directory PT: (if-operation equal "add-association") = FALSE.
  720. [03/20/12 07:49:46.901]:Active Directory PT: Rule rejected.
  721. [03/20/12 07:49:46.901]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - Query for destination DN using Association'.
  722. [03/20/12 07:49:46.901]:Active Directory PT: (if-operation match "modify|delete|move|rename") = FALSE.
  723. [03/20/12 07:49:46.901]:Active Directory PT: Rule rejected.
  724. [03/20/12 07:49:46.901]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - add interested properties to current doc for future use.'.
  725. [03/20/12 07:49:46.901]:Active Directory PT: (if-operation match "add|modify|delete|rename|move|status") = TRUE.
  726. [03/20/12 07:49:46.902]:Active Directory PT: Rule selected.
  727. [03/20/12 07:49:46.902]:Active Directory PT: Applying rule 'AccountTracking - add interested properties to current doc for future use.'.
  728. [03/20/12 07:49:46.902]:Active Directory PT: Action: do-for-each(arg-node-set(token-global-variable("drv.acctTrk.identifiers"))).
  729. [03/20/12 07:49:46.902]:Active Directory PT: arg-node-set(token-global-variable("drv.acctTrk.identifiers"))
  730. [03/20/12 07:49:46.902]:Active Directory PT: token-global-variable("drv.acctTrk.identifiers")
  731. [03/20/12 07:49:46.903]:Active Directory PT: Token Value: {"sAMAccountName","userPrincipalName","LDAPDN","association"}.
  732. [03/20/12 07:49:46.903]:Active Directory PT: Arg Value: {"sAMAccountName","userPrincipalName","LDAPDN","association"}.
  733. [03/20/12 07:49:46.903]:Active Directory PT: Performing actions for local-variable(current-node) = "sAMAccountName".
  734. [03/20/12 07:49:46.903]:Active Directory PT: Action: do-if().
  735. [03/20/12 07:49:46.903]:Active Directory PT: Evaluating conditions.
  736. [03/20/12 07:49:46.903]:Active Directory PT: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  737. [03/20/12 07:49:46.904]:Active Directory PT: Performing else actions.
  738. [03/20/12 07:49:46.904]:Active Directory PT: Action: do-if().
  739. [03/20/12 07:49:46.904]:Active Directory PT: Evaluating conditions.
  740. [03/20/12 07:49:46.904]:Active Directory PT: (if-local-variable 'current-node' equal "association") = FALSE.
  741. [03/20/12 07:49:46.904]:Active Directory PT: Performing else actions.
  742. [03/20/12 07:49:46.904]:Active Directory PT: Action: do-if().
  743. [03/20/12 07:49:46.904]:Active Directory PT: Evaluating conditions.
  744. [03/20/12 07:49:46.905]:Active Directory PT: Expanded variable reference '$current-node$' to 'sAMAccountName'.
  745. [03/20/12 07:49:46.905]:Active Directory PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  746. [03/20/12 07:49:46.905]:Active Directory PT: Expanded variable reference '$current-node$' to 'sAMAccountName'.
  747. [03/20/12 07:49:46.905]:Active Directory PT: (if-op-attr '$current-node$' available) = FALSE.
  748. [03/20/12 07:49:46.905]:Active Directory PT: Performing else actions.
  749. [03/20/12 07:49:46.905]:Active Directory PT: Performing actions for local-variable(current-node) = "userPrincipalName".
  750. [03/20/12 07:49:46.906]:Active Directory PT: Action: do-if().
  751. [03/20/12 07:49:46.906]:Active Directory PT: Evaluating conditions.
  752. [03/20/12 07:49:46.906]:Active Directory PT: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  753. [03/20/12 07:49:46.906]:Active Directory PT: Performing else actions.
  754. [03/20/12 07:49:46.906]:Active Directory PT: Action: do-if().
  755. [03/20/12 07:49:46.906]:Active Directory PT: Evaluating conditions.
  756. [03/20/12 07:49:46.906]:Active Directory PT: (if-local-variable 'current-node' equal "association") = FALSE.
  757. [03/20/12 07:49:46.907]:Active Directory PT: Performing else actions.
  758. [03/20/12 07:49:46.907]:Active Directory PT: Action: do-if().
  759. [03/20/12 07:49:46.907]:Active Directory PT: Evaluating conditions.
  760. [03/20/12 07:49:46.907]:Active Directory PT: Expanded variable reference '$current-node$' to 'userPrincipalName'.
  761. [03/20/12 07:49:46.907]:Active Directory PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  762. [03/20/12 07:49:46.908]:Active Directory PT: Expanded variable reference '$current-node$' to 'userPrincipalName'.
  763. [03/20/12 07:49:46.908]:Active Directory PT: (if-op-attr '$current-node$' available) = FALSE.
  764. [03/20/12 07:49:46.908]:Active Directory PT: Performing else actions.
  765. [03/20/12 07:49:46.908]:Active Directory PT: Performing actions for local-variable(current-node) = "LDAPDN".
  766. [03/20/12 07:49:46.908]:Active Directory PT: Action: do-if().
  767. [03/20/12 07:49:46.908]:Active Directory PT: Evaluating conditions.
  768. [03/20/12 07:49:46.908]:Active Directory PT: (if-local-variable 'current-node' equal "LDAPDN") = TRUE.
  769. [03/20/12 07:49:46.909]:Active Directory PT: Expanded variable reference '$current-node$' to 'LDAPDN'.
  770. [03/20/12 07:49:46.909]:Active Directory PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  771. [03/20/12 07:49:46.909]:Active Directory PT: (if-src-dn available) = FALSE.
  772. [03/20/12 07:49:46.909]:Active Directory PT: Performing else actions.
  773. [03/20/12 07:49:46.909]:Active Directory PT: Action: do-if().
  774. [03/20/12 07:49:46.909]:Active Directory PT: Evaluating conditions.
  775. [03/20/12 07:49:46.910]:Active Directory PT: (if-local-variable 'current-node' equal "association") = FALSE.
  776. [03/20/12 07:49:46.910]:Active Directory PT: Performing else actions.
  777. [03/20/12 07:49:46.910]:Active Directory PT: Action: do-if().
  778. [03/20/12 07:49:46.910]:Active Directory PT: Evaluating conditions.
  779. [03/20/12 07:49:46.910]:Active Directory PT: Expanded variable reference '$current-node$' to 'LDAPDN'.
  780. [03/20/12 07:49:46.910]:Active Directory PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  781. [03/20/12 07:49:46.911]:Active Directory PT: Expanded variable reference '$current-node$' to 'LDAPDN'.
  782. [03/20/12 07:49:46.911]:Active Directory PT: (if-op-attr '$current-node$' available) = FALSE.
  783. [03/20/12 07:49:46.911]:Active Directory PT: Performing else actions.
  784. [03/20/12 07:49:46.911]:Active Directory PT: Performing actions for local-variable(current-node) = "association".
  785. [03/20/12 07:49:46.911]:Active Directory PT: Action: do-if().
  786. [03/20/12 07:49:46.911]:Active Directory PT: Evaluating conditions.
  787. [03/20/12 07:49:46.912]:Active Directory PT: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  788. [03/20/12 07:49:46.912]:Active Directory PT: Performing else actions.
  789. [03/20/12 07:49:46.912]:Active Directory PT: Action: do-if().
  790. [03/20/12 07:49:46.912]:Active Directory PT: Evaluating conditions.
  791. [03/20/12 07:49:46.912]:Active Directory PT: (if-local-variable 'current-node' equal "association") = TRUE.
  792. [03/20/12 07:49:46.912]:Active Directory PT: Expanded variable reference '$current-node$' to 'association'.
  793. [03/20/12 07:49:46.913]:Active Directory PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  794. [03/20/12 07:49:46.913]:Active Directory PT: (if-association available) = FALSE.
  795. [03/20/12 07:49:46.913]:Active Directory PT: Performing else actions.
  796. [03/20/12 07:49:46.913]:Active Directory PT: Action: do-if().
  797. [03/20/12 07:49:46.913]:Active Directory PT: Evaluating conditions.
  798. [03/20/12 07:49:46.913]:Active Directory PT: Expanded variable reference '$current-node$' to 'association'.
  799. [03/20/12 07:49:46.913]:Active Directory PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  800. [03/20/12 07:49:46.914]:Active Directory PT: Expanded variable reference '$current-node$' to 'association'.
  801. [03/20/12 07:49:46.914]:Active Directory PT: (if-op-attr '$current-node$' available) = FALSE.
  802. [03/20/12 07:49:46.914]:Active Directory PT: Performing else actions.
  803. [03/20/12 07:49:46.914]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - Initialize status properties on published events'.
  804. [03/20/12 07:49:46.914]:Active Directory PT: (if-operation match "add|modify|delete|rename|move") = FALSE.
  805. [03/20/12 07:49:46.915]:Active Directory PT: Rule rejected.
  806. [03/20/12 07:49:46.915]:Active Directory PT:Policy returned:
  807. [03/20/12 07:49:46.915]:Active Directory PT:
  808. <nds dtdversion="2.2">
  809. <source>
  810. <product version="3.6.10.4747">DirXML</product>
  811. <contact>Novell, Inc.</contact>
  812. </source>
  813. <input>
  814. <status level="success" type="heartbeat"/>
  815. </input>
  816. </nds>
  817. [03/20/12 07:49:46.915]:Active Directory PT:Applying policy: %+C%14Clib-AccountTracking-WriteAccounts-itp-V1%-C.
  818. [03/20/12 07:49:46.915]:Active Directory PT: Applying to status #1.
  819. [03/20/12 07:49:46.916]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled'.
  820. [03/20/12 07:49:46.916]:Active Directory PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  821. [03/20/12 07:49:46.916]:Active Directory PT: Rule rejected.
  822. [03/20/12 07:49:46.916]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - query DirXML-Accounts Attribute'.
  823. [03/20/12 07:49:46.916]:Active Directory PT: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  824. [03/20/12 07:49:46.916]:Active Directory PT: Rule rejected.
  825. [03/20/12 07:49:46.916]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - remove Dirxml-Account values on delete operation'.
  826. [03/20/12 07:49:46.917]:Active Directory PT: (if-operation match "delete|remove-association") = FALSE.
  827. [03/20/12 07:49:46.917]:Active Directory PT: (if-operation equal "status") = TRUE.
  828. [03/20/12 07:49:46.917]:Active Directory PT: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  829. [03/20/12 07:49:46.917]:Active Directory PT: Rule rejected.
  830. [03/20/12 07:49:46.917]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - update DirXMLAccounts attribute'.
  831. [03/20/12 07:49:46.917]:Active Directory PT: (if-op-property 'AccountTracking-Operation' not-available) = TRUE.
  832. [03/20/12 07:49:46.918]:Active Directory PT: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  833. [03/20/12 07:49:46.918]:Active Directory PT: (if-operation equal "status") = TRUE.
  834. [03/20/12 07:49:46.918]:Active Directory PT: (if-xpath true "./@level='success'") = TRUE.
  835. [03/20/12 07:49:46.918]:Active Directory PT: (if-op-property 'AccountTracking-Operation' available) = FALSE.
  836. [03/20/12 07:49:46.918]:Active Directory PT: Rule rejected.
  837. [03/20/12 07:49:46.918]:Active Directory PT:Policy returned:
  838. [03/20/12 07:49:46.919]:Active Directory PT:
  839. <nds dtdversion="2.2">
  840. <source>
  841. <product version="3.6.10.4747">DirXML</product>
  842. <contact>Novell, Inc.</contact>
  843. </source>
  844. <input>
  845. <status level="success" type="heartbeat"/>
  846. </input>
  847. </nds>
  848. [03/20/12 07:49:46.919]:Active Directory PT:Applying policy: %+C%14Citp%-C.
  849. [03/20/12 07:49:46.919]:Active Directory PT: Applying to status #1.
  850. [03/20/12 07:49:46.919]:Active Directory PT: Evaluating selection criteria for rule 'streetAddress: Convert CR-LF to LF'.
  851. [03/20/12 07:49:46.919]:Active Directory PT: Rule selected.
  852. [03/20/12 07:49:46.920]:Active Directory PT: Applying rule 'streetAddress: Convert CR-LF to LF'.
  853. [03/20/12 07:49:46.920]:Active Directory PT: Action: do-reformat-op-attr("streetAddress",token-replace-all("\r\n","\r",token-local-variable("current-value"))).
  854. [03/20/12 07:49:46.920]:Active Directory PT: Evaluating selection criteria for rule 'logonHours: Convert to Login Allowed Time Map form'.
  855. [03/20/12 07:49:46.920]:Active Directory PT: Rule selected.
  856. [03/20/12 07:49:46.920]:Active Directory PT: Applying rule 'logonHours: Convert to Login Allowed Time Map form'.
  857. [03/20/12 07:49:46.920]:Active Directory PT: Action: do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2eDir($current-value)")).
  858. [03/20/12 07:49:46.921]:Active Directory PT: Evaluating selection criteria for rule 'accountExpires: Convert to Identity Vault time format'.
  859. [03/20/12 07:49:46.921]:Active Directory PT: Rule selected.
  860. [03/20/12 07:49:46.921]:Active Directory PT: Applying rule 'accountExpires: Convert to Identity Vault time format'.
  861. [03/20/12 07:49:46.921]:Active Directory PT: Action: do-reformat-op-attr("accountExpires",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
  862. [03/20/12 07:49:46.921]:Active Directory PT: Evaluating selection criteria for rule 'lockoutTime: Convert to Identity Vault time format'.
  863. [03/20/12 07:49:46.922]:Active Directory PT: Rule selected.
  864. [03/20/12 07:49:46.922]:Active Directory PT: Applying rule 'lockoutTime: Convert to Identity Vault time format'.
  865. [03/20/12 07:49:46.922]:Active Directory PT: Action: do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
  866. [03/20/12 07:49:46.922]:Active Directory PT:Policy returned:
  867. [03/20/12 07:49:46.922]:Active Directory PT:
  868. <nds dtdversion="2.2">
  869. <source>
  870. <product version="3.6.10.4747">DirXML</product>
  871. <contact>Novell, Inc.</contact>
  872. </source>
  873. <input>
  874. <status level="success" type="heartbeat"/>
  875. </input>
  876. </nds>
  877. [03/20/12 07:49:46.923]:Active Directory PT:Applying policy: %+C%14Citp-EntitlementsImpl%-C.
  878. [03/20/12 07:49:46.923]:Active Directory PT: Applying to status #1.
  879. [03/20/12 07:49:46.923]:Active Directory PT: Evaluating selection criteria for rule 'Check target of add-association for group membership entitlements'.
  880. [03/20/12 07:49:46.923]:Active Directory PT: (if-global-variable 'drv.entitlement.Group' equal "true") = FALSE.
  881. [03/20/12 07:49:46.923]:Active Directory PT: Rule rejected.
  882. [03/20/12 07:49:46.923]:Active Directory PT: Evaluating selection criteria for rule 'Check target of add-association for Exchange mailbox entitlements'.
  883. [03/20/12 07:49:46.924]:Active Directory PT: (if-global-variable 'drv.exchMailboxMethod' equal "entitlement") = FALSE.
  884. [03/20/12 07:49:46.924]:Active Directory PT: Rule rejected.
  885. [03/20/12 07:49:46.924]:Active Directory PT:Policy returned:
  886. [03/20/12 07:49:46.924]:Active Directory PT:
  887. <nds dtdversion="2.2">
  888. <source>
  889. <product version="3.6.10.4747">DirXML</product>
  890. <contact>Novell, Inc.</contact>
  891. </source>
  892. <input>
  893. <status level="success" type="heartbeat"/>
  894. </input>
  895. </nds>
  896. [03/20/12 07:49:46.924]:Active Directory PT:Applying policy: %+C%14CPassword(Pub)-Sub Email Notifications%-C.
  897. [03/20/12 07:49:46.924]:Active Directory PT: Applying to status #1.
  898. [03/20/12 07:49:46.925]:Active Directory PT: Evaluating selection criteria for rule 'Send e-mail on a failure when subscribing to passwords'.
  899. [03/20/12 07:49:46.925]:Active Directory PT: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  900. [03/20/12 07:49:46.925]:Active Directory PT: (if-operation equal "status") = TRUE.
  901. [03/20/12 07:49:46.925]:Active Directory PT: (if-xpath true "self::status[@level != 'success'][text() != '']/operation-data/password-subscribe-status/association[text() != '']") = FALSE.
  902. [03/20/12 07:49:46.925]:Active Directory PT: Rule rejected.
  903. [03/20/12 07:49:46.926]:Active Directory PT: Evaluating selection criteria for rule 'Send e-mail on failure to reset connected system password using the Identity Manager data store password'.
  904. [03/20/12 07:49:46.926]:Active Directory PT: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  905. [03/20/12 07:49:46.926]:Active Directory PT: (if-operation equal "status") = TRUE.
  906. [03/20/12 07:49:46.926]:Active Directory PT: (if-xpath true "self::status[@level != 'success']/operation-data/password-reset-status") = FALSE.
  907. [03/20/12 07:49:46.926]:Active Directory PT: Rule rejected.
  908. [03/20/12 07:49:46.927]:Active Directory PT:Policy returned:
  909. [03/20/12 07:49:46.927]:Active Directory PT:
  910. <nds dtdversion="2.2">
  911. <source>
  912. <product version="3.6.10.4747">DirXML</product>
  913. <contact>Novell, Inc.</contact>
  914. </source>
  915. <input>
  916. <status level="success" type="heartbeat"/>
  917. </input>
  918. </nds>
  919. [03/20/12 07:49:46.927]:Active Directory PT:Applying policy: %+C%14Clib-Audit-SendEntitlementsEvents-itp-V1%-C.
  920. [03/20/12 07:49:46.927]:Active Directory PT: Applying to status #1.
  921. [03/20/12 07:49:46.927]:Active Directory PT: Evaluating selection criteria for rule '00031200 - Account Create By Entitlement Grant'.
  922. [03/20/12 07:49:46.928]:Active Directory PT: (if-operation equal "status") = TRUE.
  923. [03/20/12 07:49:46.928]:Active Directory PT: (if-op-property 'accountAction' equal "accountCreateByEntitlementGrant") = FALSE.
  924. [03/20/12 07:49:46.928]:Active Directory PT: Rule rejected.
  925. [03/20/12 07:49:46.928]:Active Directory PT: Evaluating selection criteria for rule '00031201 - Account Delete By Entitlement Revoke'.
  926. [03/20/12 07:49:46.928]:Active Directory PT: (if-operation equal "status") = TRUE.
  927. [03/20/12 07:49:46.928]:Active Directory PT: (if-xpath true "./operation-data/entitlement-impl/@state = '0'") = FALSE.
  928. [03/20/12 07:49:46.929]:Active Directory PT: (if-operation equal "status") = TRUE.
  929. [03/20/12 07:49:46.929]:Active Directory PT: (if-op-property 'accountAction' equal "accountDeleteByEntitlementRevoke") = FALSE.
  930. [03/20/12 07:49:46.929]:Active Directory PT: Rule rejected.
  931. [03/20/12 07:49:46.929]:Active Directory PT: Evaluating selection criteria for rule '00031202 - Account Disable By Entitlement Revoke'.
  932. [03/20/12 07:49:46.929]:Active Directory PT: (if-operation equal "status") = TRUE.
  933. [03/20/12 07:49:46.929]:Active Directory PT: (if-op-property 'accountAction' equal "accountDisableByEntitlementRevoke") = FALSE.
  934. [03/20/12 07:49:46.929]:Active Directory PT: Rule rejected.
  935. [03/20/12 07:49:46.930]:Active Directory PT: Evaluating selection criteria for rule '00031203 - Account Enable By Entitlement Grant'.
  936. [03/20/12 07:49:46.930]:Active Directory PT: (if-operation equal "status") = TRUE.
  937. [03/20/12 07:49:46.930]:Active Directory PT: (if-op-property 'accountAction' equal "accountEnableByEntitlementGrant") = FALSE.
  938. [03/20/12 07:49:46.930]:Active Directory PT: Rule rejected.
  939. [03/20/12 07:49:46.930]:Active Directory PT: Evaluating selection criteria for rule 'Generate Audit Event'.
  940. [03/20/12 07:49:46.930]:Active Directory PT: (if-operation equal "status") = TRUE.
  941. [03/20/12 07:49:46.931]:Active Directory PT: (if-local-variable 'auditEventID' available) = FALSE.
  942. [03/20/12 07:49:46.931]:Active Directory PT: Rule rejected.
  943. [03/20/12 07:49:46.931]:Active Directory PT:Policy returned:
  944. [03/20/12 07:49:46.931]:Active Directory PT:
  945. <nds dtdversion="2.2">
  946. <source>
  947. <product version="3.6.10.4747">DirXML</product>
  948. <contact>Novell, Inc.</contact>
  949. </source>
  950. <input>
  951. <status level="success" type="heartbeat"/>
  952. </input>
  953. </nds>
  954. [03/20/12 07:49:46.931]:Active Directory PT:Applying schema mapping policies to input.
  955. [03/20/12 07:49:46.932]:Active Directory PT:Applying policy: %+C%14Csmp%-C.
  956. [03/20/12 07:49:46.932]:Active Directory PT:Resolving association references.
  957. [03/20/12 07:49:46.932]:Active Directory PT:Applying event transformation policies.
  958. [03/20/12 07:49:46.932]:Active Directory PT:Applying policy: %+C%14Cpub-etp-EntitlementsImpl%-C.
  959. [03/20/12 07:49:46.932]:Active Directory PT: Applying to status #1.
  960. [03/20/12 07:49:46.932]:Active Directory PT: Evaluating selection criteria for rule 'Disallow user account delete when using entitlements'.
  961. [03/20/12 07:49:46.933]:Active Directory PT: (if-operation equal "delete") = FALSE.
  962. [03/20/12 07:49:46.933]:Active Directory PT: Rule rejected.
  963. [03/20/12 07:49:46.933]:Active Directory PT: Evaluating selection criteria for rule 'Strip Login Disabled from operation (Disable Option)'.
  964. [03/20/12 07:49:46.933]:Active Directory PT: (if-global-variable 'drv.entitlement.UserAccount' equal "true") = FALSE.
  965. [03/20/12 07:49:46.933]:Active Directory PT: Rule rejected.
  966. [03/20/12 07:49:46.933]:Active Directory PT:Policy returned:
  967. [03/20/12 07:49:46.933]:Active Directory PT:
  968. <nds dtdversion="2.2">
  969. <source>
  970. <product version="3.6.10.4747">DirXML</product>
  971. <contact>Novell, Inc.</contact>
  972. </source>
  973. <input>
  974. <status level="success" type="heartbeat"/>
  975. </input>
  976. </nds>
  977. [03/20/12 07:49:46.934]:Active Directory PT:Applying policy: %+C%14Cpub-etp-HandleMovesAndRenames%-C.
  978. [03/20/12 07:49:46.934]:Active Directory PT: Applying to status #1.
  979. [03/20/12 07:49:46.934]:Active Directory PT: Evaluating selection criteria for rule 'break if not a move or rename'.
  980. [03/20/12 07:49:46.934]:Active Directory PT: (if-operation not-match "move|rename") = TRUE.
  981. [03/20/12 07:49:46.934]:Active Directory PT: Rule selected.
  982. [03/20/12 07:49:46.934]:Active Directory PT: Applying rule 'break if not a move or rename'.
  983. [03/20/12 07:49:46.935]:Active Directory PT: Action: do-break().
  984. [03/20/12 07:49:46.935]:Active Directory PT:Policy returned:
  985. [03/20/12 07:49:46.935]:Active Directory PT:
  986. <nds dtdversion="2.2">
  987. <source>
  988. <product version="3.6.10.4747">DirXML</product>
  989. <contact>Novell, Inc.</contact>
  990. </source>
  991. <input>
  992. <status level="success" type="heartbeat"/>
  993. </input>
  994. </nds>
  995. [03/20/12 07:49:46.935]:Active Directory PT:Applying publisher filter.
  996. [03/20/12 07:49:46.935]:Active Directory PT:Publisher processing status for .
  997. [03/20/12 07:49:46.936]:Active Directory PT:Applying command transformation policies.
  998. [03/20/12 07:49:46.936]:Active Directory PT:Applying policy: %+C%14Cpub-ctp-UserNameMap%-C.
  999. [03/20/12 07:49:46.936]:Active Directory PT: Applying to status #1.
  1000. [03/20/12 07:49:46.936]:Active Directory PT: Evaluating selection criteria for rule 'consider user objects when name mapping is enabled'.
  1001. [03/20/12 07:49:46.936]:Active Directory PT: (if-class-name not-equal "User") = TRUE.
  1002. [03/20/12 07:49:46.936]:Active Directory PT: Rule selected.
  1003. [03/20/12 07:49:46.936]:Active Directory PT: Applying rule 'consider user objects when name mapping is enabled'.
  1004. [03/20/12 07:49:46.937]:Active Directory PT: Action: do-break().
  1005. [03/20/12 07:49:46.937]:Active Directory PT:Policy returned:
  1006. [03/20/12 07:49:46.937]:Active Directory PT:
  1007. <nds dtdversion="2.2">
  1008. <source>
  1009. <product version="3.6.10.4747">DirXML</product>
  1010. <contact>Novell, Inc.</contact>
  1011. </source>
  1012. <input>
  1013. <status level="success" type="heartbeat"/>
  1014. </input>
  1015. </nds>
  1016. [03/20/12 07:49:46.937]:Active Directory PT:Applying policy: %+C%14Cpub-ctp%-C.
  1017. [03/20/12 07:49:46.937]:Active Directory PT: Applying to status #1.
  1018. [03/20/12 07:49:46.937]:Active Directory PT: Evaluating selection criteria for rule 'set cached context value on merge'.
  1019. [03/20/12 07:49:46.938]:Active Directory PT: (if-operation equal "modify") = FALSE.
  1020. [03/20/12 07:49:46.938]:Active Directory PT: Rule rejected.
  1021. [03/20/12 07:49:46.938]:Active Directory PT: Evaluating selection criteria for rule 'Set Equivalent To Me when adding object to a group'.
  1022. [03/20/12 07:49:46.938]:Active Directory PT: (if-class-name equal "Group") = FALSE.
  1023. [03/20/12 07:49:46.938]:Active Directory PT: Rule rejected.
  1024. [03/20/12 07:49:46.938]:Active Directory PT: Evaluating selection criteria for rule 'Remove Equivalent To Me when removing object from a group'.
  1025. [03/20/12 07:49:46.938]:Active Directory PT: (if-class-name equal "Group") = FALSE.
  1026. [03/20/12 07:49:46.939]:Active Directory PT: Rule rejected.
  1027. [03/20/12 07:49:46.939]:Active Directory PT: Evaluating selection criteria for rule 'remove managed attributes when object disassociated'.
  1028. [03/20/12 07:49:46.939]:Active Directory PT: (if-operation equal "remove-association") = FALSE.
  1029. [03/20/12 07:49:46.939]:Active Directory PT: Rule rejected.
  1030. [03/20/12 07:49:46.939]:Active Directory PT: Evaluating selection criteria for rule 'Prevent unassociated users from being removed from groups'.
  1031. [03/20/12 07:49:46.939]:Active Directory PT: (if-operation equal "modify") = FALSE.
  1032. [03/20/12 07:49:46.940]:Active Directory PT: Rule rejected.
  1033. [03/20/12 07:49:46.940]:Active Directory PT:Policy returned:
  1034. [03/20/12 07:49:46.940]:Active Directory PT:
  1035. <nds dtdversion="2.2">
  1036. <source>
  1037. <product version="3.6.10.4747">DirXML</product>
  1038. <contact>Novell, Inc.</contact>
  1039. </source>
  1040. <input>
  1041. <status level="success" type="heartbeat"/>
  1042. </input>
  1043. </nds>
  1044. [03/20/12 07:49:46.940]:Active Directory PT:Applying XSLT policy: %+C%14Cpub-cts%-C.
  1045. [03/20/12 07:49:46.941]:Active Directory PT:Policy returned:
  1046. [03/20/12 07:49:46.941]:Active Directory PT:
  1047. <nds dtdversion="2.2">
  1048. <source>
  1049. <product version="3.6.10.4747">DirXML</product>
  1050. <contact>Novell, Inc.</contact>
  1051. </source>
  1052. <input>
  1053. <status level="success" type="heartbeat"/>
  1054. </input>
  1055. </nds>
  1056. [03/20/12 07:49:46.941]:Active Directory PT:Applying policy: %+C%14CPassword(Pub)-Default Password Policy%-C.
  1057. [03/20/12 07:49:46.941]:Active Directory PT: Applying to status #1.
  1058. [03/20/12 07:49:46.942]:Active Directory PT: Evaluating selection criteria for rule 'On User add, provide default password of @Dirxml1 if no password exists'.
  1059. [03/20/12 07:49:46.942]:Active Directory PT: (if-operation equal "add") = FALSE.
  1060. [03/20/12 07:49:46.942]:Active Directory PT: Rule rejected.
  1061. [03/20/12 07:49:46.942]:Active Directory PT:Policy returned:
  1062. [03/20/12 07:49:46.942]:Active Directory PT:
  1063. <nds dtdversion="2.2">
  1064. <source>
  1065. <product version="3.6.10.4747">DirXML</product>
  1066. <contact>Novell, Inc.</contact>
  1067. </source>
  1068. <input>
  1069. <status level="success" type="heartbeat"/>
  1070. </input>
  1071. </nds>
  1072. [03/20/12 07:49:46.942]:Active Directory PT:Applying policy: %+C%14CPassword(Pub)-Check Password GCV%-C.
  1073. [03/20/12 07:49:46.943]:Active Directory PT: Applying to status #1.
  1074. [03/20/12 07:49:46.943]:Active Directory PT: Evaluating selection criteria for rule 'Block publishing passwords to Identity Manager data store when adding a object'.
  1075. [03/20/12 07:49:46.943]:Active Directory PT: (if-global-variable 'enable-password-publish' equal "false") = FALSE.
  1076. [03/20/12 07:49:46.943]:Active Directory PT: Rule rejected.
  1077. [03/20/12 07:49:46.943]:Active Directory PT: Evaluating selection criteria for rule 'Block sending modify-password changes to the Identity Manager data store'.
  1078. [03/20/12 07:49:46.944]:Active Directory PT: (if-global-variable 'enable-password-publish' equal "false") = FALSE.
  1079. [03/20/12 07:49:46.944]:Active Directory PT: Rule rejected.
  1080. [03/20/12 07:49:46.944]:Active Directory PT:Policy returned:
  1081. [03/20/12 07:49:46.944]:Active Directory PT:
  1082. <nds dtdversion="2.2">
  1083. <source>
  1084. <product version="3.6.10.4747">DirXML</product>
  1085. <contact>Novell, Inc.</contact>
  1086. </source>
  1087. <input>
  1088. <status level="success" type="heartbeat"/>
  1089. </input>
  1090. </nds>
  1091. [03/20/12 07:49:46.944]:Active Directory PT:Applying policy: %+C%14CPassword(Pub)-Publish Distribution Password%-C.
  1092. [03/20/12 07:49:46.945]:Active Directory PT: Applying to status #1.
  1093. [03/20/12 07:49:46.945]:Active Directory PT: Evaluating selection criteria for rule 'Add nspmDistributionAttribute attribute to add operation'.
  1094. [03/20/12 07:49:46.945]:Active Directory PT: (if-global-variable 'publish-password-to-dp' equal "true") = FALSE.
  1095. [03/20/12 07:49:46.945]:Active Directory PT: Rule rejected.
  1096. [03/20/12 07:49:46.945]:Active Directory PT: Evaluating selection criteria for rule 'Change modify-password operations to a modify'.
  1097. [03/20/12 07:49:46.945]:Active Directory PT: (if-global-variable 'publish-password-to-dp' equal "true") = FALSE.
  1098. [03/20/12 07:49:46.945]:Active Directory PT: Rule rejected.
  1099. [03/20/12 07:49:46.946]:Active Directory PT:Policy returned:
  1100. [03/20/12 07:49:46.946]:Active Directory PT:
  1101. <nds dtdversion="2.2">
  1102. <source>
  1103. <product version="3.6.10.4747">DirXML</product>
  1104. <contact>Novell, Inc.</contact>
  1105. </source>
  1106. <input>
  1107. <status level="success" type="heartbeat"/>
  1108. </input>
  1109. </nds>
  1110. [03/20/12 07:49:46.946]:Active Directory PT:Applying policy: %+C%14CPassword(Pub)-Publish NDS Password%-C.
  1111. [03/20/12 07:49:46.946]:Active Directory PT: Applying to status #1.
  1112. [03/20/12 07:49:46.946]:Active Directory PT: Evaluating selection criteria for rule 'Block publishing passwords to NDS password'.
  1113. [03/20/12 07:49:46.947]:Active Directory PT: (if-global-variable 'publish-password-to-nds' equal "false") = FALSE.
  1114. [03/20/12 07:49:46.947]:Active Directory PT: Rule rejected.
  1115. [03/20/12 07:49:46.947]:Active Directory PT: Evaluating selection criteria for rule 'Block sending modify-password changes to the NDS password'.
  1116. [03/20/12 07:49:46.947]:Active Directory PT: (if-global-variable 'publish-password-to-nds' equal "false") = FALSE.
  1117. [03/20/12 07:49:46.947]:Active Directory PT: Rule rejected.
  1118. [03/20/12 07:49:46.947]:Active Directory PT:Policy returned:
  1119. [03/20/12 07:49:46.947]:Active Directory PT:
  1120. <nds dtdversion="2.2">
  1121. <source>
  1122. <product version="3.6.10.4747">DirXML</product>
  1123. <contact>Novell, Inc.</contact>
  1124. </source>
  1125. <input>
  1126. <status level="success" type="heartbeat"/>
  1127. </input>
  1128. </nds>
  1129. [03/20/12 07:49:46.948]:Active Directory PT:Applying policy: %+C%14CPassword(Pub)-Add Password Payload%-C.
  1130. [03/20/12 07:49:46.948]:Active Directory PT: Applying to status #1.
  1131. [03/20/12 07:49:46.948]:Active Directory PT: Evaluating selection criteria for rule 'Add operation-data element to password operations'.
  1132. [03/20/12 07:49:46.948]:Active Directory PT: (if-operation equal "add") = FALSE.
  1133. [03/20/12 07:49:46.948]:Active Directory PT: (if-operation equal "add") = FALSE.
  1134. [03/20/12 07:49:46.949]:Active Directory PT: (if-operation equal "modify-password") = FALSE.
  1135. [03/20/12 07:49:46.949]:Active Directory PT: (if-operation equal "modify") = FALSE.
  1136. [03/20/12 07:49:46.949]:Active Directory PT: Rule rejected.
  1137. [03/20/12 07:49:46.949]:Active Directory PT: Evaluating selection criteria for rule 'Add payload data to password operations'.
  1138. [03/20/12 07:49:46.949]:Active Directory PT: (if-operation equal "addPayloadToPassword") = FALSE.
  1139. [03/20/12 07:49:46.949]:Active Directory PT: (if-operation equal "add") = FALSE.
  1140. [03/20/12 07:49:46.949]:Active Directory PT: (if-operation equal "modify-password") = FALSE.
  1141. [03/20/12 07:49:46.950]:Active Directory PT: (if-operation equal "modify") = FALSE.
  1142. [03/20/12 07:49:46.950]:Active Directory PT: Rule rejected.
  1143. [03/20/12 07:49:46.950]:Active Directory PT:Policy returned:
  1144. [03/20/12 07:49:46.950]:Active Directory PT:
  1145. <nds dtdversion="2.2">
  1146. <source>
  1147. <product version="3.6.10.4747">DirXML</product>
  1148. <contact>Novell, Inc.</contact>
  1149. </source>
  1150. <input>
  1151. <status level="success" type="heartbeat"/>
  1152. </input>
  1153. </nds>
  1154. [03/20/12 07:49:46.950]:Active Directory PT:Applying policy: %+C%14Clib-AccountTracking-WriteAccountsOnAdds-pub-ctp-V1%-C.
  1155. [03/20/12 07:49:46.950]:Active Directory PT: Applying to status #1.
  1156. [03/20/12 07:49:46.951]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - disregard policy if disabled'.
  1157. [03/20/12 07:49:46.951]:Active Directory PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  1158. [03/20/12 07:49:46.951]:Active Directory PT: Rule rejected.
  1159. [03/20/12 07:49:46.951]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - on add operation add Dirxml-Accounts'.
  1160. [03/20/12 07:49:46.951]:Active Directory PT: (if-operation equal "add") = FALSE.
  1161. [03/20/12 07:49:46.951]:Active Directory PT: Rule rejected.
  1162. [03/20/12 07:49:46.952]:Active Directory PT:Policy returned:
  1163. [03/20/12 07:49:46.952]:Active Directory PT:
  1164. <nds dtdversion="2.2">
  1165. <source>
  1166. <product version="3.6.10.4747">DirXML</product>
  1167. <contact>Novell, Inc.</contact>
  1168. </source>
  1169. <input>
  1170. <status level="success" type="heartbeat"/>
  1171. </input>
  1172. </nds>
  1173. [03/20/12 07:49:46.952]:Active Directory PT:Filtering out notification-only attributes.
  1174. [03/20/12 07:49:46.952]:Active Directory PT:Pumping XDS to eDirectory.
  1175. [03/20/12 07:49:46.952]:Active Directory PT:Performing operation status for .
  1176. [03/20/12 07:49:46.953]:Active Directory PT:
  1177. DirXML Log Event -------------------
  1178. Driver: \EDIR2ADLAB\fdny\AD-TEST\Active Directory
  1179. Channel: Publisher
  1180. Status: Success
  1181. [03/20/12 07:49:46.953]:Active Directory PT:Fixing up association references.
  1182. [03/20/12 07:49:46.953]:Active Directory PT:Applying schema mapping policies to output.
  1183. [03/20/12 07:49:46.953]:Active Directory PT:Applying policy: %+C%14Csmp%-C.
  1184. [03/20/12 07:49:46.953]:Active Directory PT:Applying output transformation policies.
  1185. [03/20/12 07:49:46.953]:Active Directory PT:Applying policy: %+C%14Cotp%-C.
  1186. [03/20/12 07:49:46.954]:Active Directory PT: Applying to status #1.
  1187. [03/20/12 07:49:46.954]:Active Directory PT: Evaluating selection criteria for rule 'Street Address: Convert LF to CR-LF'.
  1188. [03/20/12 07:49:46.954]:Active Directory PT: Rule selected.
  1189. [03/20/12 07:49:46.954]:Active Directory PT: Applying rule 'Street Address: Convert LF to CR-LF'.
  1190. [03/20/12 07:49:46.954]:Active Directory PT: Action: do-reformat-op-attr("streetAddress",token-replace-all("[^\r]\n","\r\n",token-local-variable("current-value"))).
  1191. [03/20/12 07:49:46.954]:Active Directory PT: Evaluating selection criteria for rule 'logonHours: Convert to Active Directory form'.
  1192. [03/20/12 07:49:46.955]:Active Directory PT: Rule selected.
  1193. [03/20/12 07:49:46.955]:Active Directory PT: Applying rule 'logonHours: Convert to Active Directory form'.
  1194. [03/20/12 07:49:46.955]:Active Directory PT: Action: do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2ADLenient($current-value)")).
  1195. [03/20/12 07:49:46.955]:Active Directory PT: Evaluating selection criteria for rule 'accountExpires: Convert to Active Directory form'.
  1196. [03/20/12 07:49:46.955]:Active Directory PT: (if-op-attr 'accountExpires' changing) = FALSE.
  1197. [03/20/12 07:49:46.956]:Active Directory PT: Rule rejected.
  1198. [03/20/12 07:49:46.956]:Active Directory PT: Evaluating selection criteria for rule 'lockoutTime: Convert to Active Directory form'.
  1199. [03/20/12 07:49:46.956]:Active Directory PT: Rule selected.
  1200. [03/20/12 07:49:46.956]:Active Directory PT: Applying rule 'lockoutTime: Convert to Active Directory form'.
  1201. [03/20/12 07:49:46.956]:Active Directory PT: Action: do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateEpoch2FileTime($current-value)")).
  1202. [03/20/12 07:49:46.956]:Active Directory PT: Evaluating selection criteria for rule 'Add: User - convert multi-valued Telephone to single value'.
  1203. [03/20/12 07:49:46.957]:Active Directory PT: (if-operation equal "add") = FALSE.
  1204. [03/20/12 07:49:46.957]:Active Directory PT: Rule rejected.
  1205. [03/20/12 07:49:46.957]:Active Directory PT: Evaluating selection criteria for rule 'update Active Directory logon name'.
  1206. [03/20/12 07:49:46.957]:Active Directory PT: (if-xpath true "self::status[@level = 'success']/operation-data/windows-2000-logon-name") = FALSE.
  1207. [03/20/12 07:49:46.957]:Active Directory PT: Rule rejected.
  1208. [03/20/12 07:49:46.957]:Active Directory PT: Evaluating selection criteria for rule 'Exchange: Remove HomeMDB when disabled'.
  1209. [03/20/12 07:49:46.958]:Active Directory PT: (if-global-variable 'drv.exchMailboxMethod' equal "disabled") = TRUE.
  1210. [03/20/12 07:49:46.958]:Active Directory PT: Rule selected.
  1211. [03/20/12 07:49:46.958]:Active Directory PT: Applying rule 'Exchange: Remove HomeMDB when disabled'.
  1212. [03/20/12 07:49:46.958]:Active Directory PT: Action: do-strip-op-attr("homeMDB").
  1213. [03/20/12 07:49:46.958]:Active Directory PT:Policy returned:
  1214. [03/20/12 07:49:46.958]:Active Directory PT:
  1215. <nds dtdversion="3.5" ndsversion="8.x">
  1216. <source>
  1217. <product version="3.6.10.4747">DirXML</product>
  1218. <contact>Novell, Inc.</contact>
  1219. </source>
  1220. <output>
  1221. <status event-id="0" level="success"></status>
  1222. </output>
  1223. </nds>
  1224. [03/20/12 07:49:46.959]:Active Directory PT:Applying policy: %+C%14CPassword(Sub)-Pub Email Notifications%-C.
  1225. [03/20/12 07:49:46.959]:Active Directory PT: Applying to status #1.
  1226. [03/20/12 07:49:46.959]:Active Directory PT: Evaluating selection criteria for rule 'Send e-mail for a failed publish password operation'.
  1227. [03/20/12 07:49:46.959]:Active Directory PT: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  1228. [03/20/12 07:49:46.960]:Active Directory PT: (if-operation equal "status") = TRUE.
  1229. [03/20/12 07:49:46.960]:Active Directory PT: (if-xpath true "self::status[@level != 'success']/operation-data/password-publish-status") = FALSE.
  1230. [03/20/12 07:49:46.960]:Active Directory PT: Rule rejected.
  1231. [03/20/12 07:49:46.960]:Active Directory PT:Policy returned:
  1232. [03/20/12 07:49:46.960]:Active Directory PT:
  1233. <nds dtdversion="3.5" ndsversion="8.x">
  1234. <source>
  1235. <product version="3.6.10.4747">DirXML</product>
  1236. <contact>Novell, Inc.</contact>
  1237. </source>
  1238. <output>
  1239. <status event-id="0" level="success"></status>
  1240. </output>
  1241. </nds>
  1242. [03/20/12 07:49:46.961]:Active Directory PT:Applying policy: %+C%14Clib-CredProv-ConvertPayload-otp-V1%-C.
  1243. [03/20/12 07:49:46.961]:Active Directory PT: Applying to status #1.
  1244. [03/20/12 07:49:46.961]:Active Directory PT: Evaluating selection criteria for rule 'Is credential provisioning enabled? Are there any custom payloads?'.
  1245. [03/20/12 07:49:46.961]:Active Directory PT: Rule selected.
  1246. [03/20/12 07:49:46.961]:Active Directory PT: Applying rule 'Is credential provisioning enabled? Are there any custom payloads?'.
  1247. [03/20/12 07:49:46.961]:Active Directory PT: Action: do-if().
  1248. [03/20/12 07:49:46.961]:Active Directory PT: Evaluating conditions.
  1249. [03/20/12 07:49:46.962]:Active Directory PT: (if-global-variable 'credprov.enable' not-equal "true") = TRUE.
  1250. [03/20/12 07:49:46.962]:Active Directory PT: Performing if actions.
  1251. [03/20/12 07:49:46.962]:Active Directory PT: Action: do-break().
  1252. [03/20/12 07:49:46.962]:Active Directory PT:Policy returned:
  1253. [03/20/12 07:49:46.962]:Active Directory PT:
  1254. <nds dtdversion="3.5" ndsversion="8.x">
  1255. <source>
  1256. <product version="3.6.10.4747">DirXML</product>
  1257. <contact>Novell, Inc.</contact>
  1258. </source>
  1259. <output>
  1260. <status event-id="0" level="success"></status>
  1261. </output>
  1262. </nds>
  1263. [03/20/12 07:49:46.962]:Active Directory PT:Applying policy: %+C%14Clib-AccountTracking-Subscribe-otp-V1%-C.
  1264. [03/20/12 07:49:46.963]:Active Directory PT: Applying to status #1.
  1265. [03/20/12 07:49:46.963]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled or wrong object class'.
  1266. [03/20/12 07:49:46.963]:Active Directory PT: Rule selected.
  1267. [03/20/12 07:49:46.963]:Active Directory PT: Applying rule 'AccountTracking - disregard if disabled or wrong object class'.
  1268. [03/20/12 07:49:46.963]:Active Directory PT: Action: do-if().
  1269. [03/20/12 07:49:46.963]:Active Directory PT: Evaluating conditions.
  1270. [03/20/12 07:49:46.964]:Active Directory PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  1271. [03/20/12 07:49:46.964]:Active Directory PT: Performing else actions.
  1272. [03/20/12 07:49:46.964]:Active Directory PT: Action: do-for-each(arg-node-set(token-global-variable("drv.acctTrk.objectClass"))).
  1273. [03/20/12 07:49:46.964]:Active Directory PT: arg-node-set(token-global-variable("drv.acctTrk.objectClass"))
  1274. [03/20/12 07:49:46.964]:Active Directory PT: token-global-variable("drv.acctTrk.objectClass")
  1275. [03/20/12 07:49:46.964]:Active Directory PT: Token Value: {"user"}.
  1276. [03/20/12 07:49:46.965]:Active Directory PT: Arg Value: {"user"}.
  1277. [03/20/12 07:49:46.965]:Active Directory PT: Performing actions for local-variable(current-node) = "user".
  1278. [03/20/12 07:49:46.965]:Active Directory PT: Action: do-if().
  1279. [03/20/12 07:49:46.965]:Active Directory PT: Evaluating conditions.
  1280. [03/20/12 07:49:46.965]:Active Directory PT: (if-class-name equal "$current-node$") = FALSE.
  1281. [03/20/12 07:49:46.965]:Active Directory PT: Performing else actions.
  1282. [03/20/12 07:49:46.965]:Active Directory PT: Action: do-if().
  1283. [03/20/12 07:49:46.966]:Active Directory PT: Evaluating conditions.
  1284. [03/20/12 07:49:46.966]:Active Directory PT: (if-local-variable 'pass' not-available) = TRUE.
  1285. [03/20/12 07:49:46.966]:Active Directory PT: Performing if actions.
  1286. [03/20/12 07:49:46.966]:Active Directory PT: Action: do-break().
  1287. [03/20/12 07:49:46.966]:Active Directory PT:Policy returned:
  1288. [03/20/12 07:49:46.966]:Active Directory PT:
  1289. <nds dtdversion="3.5" ndsversion="8.x">
  1290. <source>
  1291. <product version="3.6.10.4747">DirXML</product>
  1292. <contact>Novell, Inc.</contact>
  1293. </source>
  1294. <output>
  1295. <status event-id="0" level="success"></status>
  1296. </output>
  1297. </nds>
  1298. [03/20/12 07:49:46.967]:Active Directory PT:
  1299. <nds dtdversion="3.5" ndsversion="8.x">
  1300. <source>
  1301. <product version="3.6.10.4747">DirXML</product>
  1302. <contact>Novell, Inc.</contact>
  1303. </source>
  1304. <output>
  1305. <status event-id="0" level="success"></status>
  1306. </output>
  1307. </nds>
  1308. [03/20/12 07:49:46.967]:Active Directory PT:Remote Interface Driver: Sending...
  1309. [03/20/12 07:49:46.967]:Active Directory PT:
  1310. <nds dtdversion="3.5" ndsversion="8.x">
  1311. <source>
  1312. <product version="3.6.10.4747">DirXML</product>
  1313. <contact>Novell, Inc.</contact>
  1314. </source>
  1315. <output>
  1316. <status event-id="0" level="success"></status>
  1317. </output>
  1318. </nds>
  1319. [03/20/12 07:49:46.968]:Active Directory PT:Remote Interface Driver: Document sent.
  1320. [03/20/12 07:50:01.371]:Active Directory ST:Submitting identification query to subscriber shim:
  1321. [03/20/12 07:50:01.372]:Active Directory ST:
  1322. <nds dtdversion="3.5" ndsversion="8.x">
  1323. <source>
  1324. <product version="3.6.10.4747">DirXML</product>
  1325. <contact>Novell, Inc.</contact>
  1326. </source>
  1327. <input>
  1328. <query event-id="query-driver-ident" scope="entry">
  1329. <search-class class-name="__driver_identification_class__"/>
  1330. <read-attr/>
  1331. </query>
  1332. </input>
  1333. </nds>
  1334. [03/20/12 07:50:01.372]:Active Directory ST:Remote Interface Driver: Sending...
  1335. [03/20/12 07:50:01.372]:Active Directory ST:
  1336. <nds dtdversion="3.5" ndsversion="8.x">
  1337. <source>
  1338. <product version="3.6.10.4747">DirXML</product>
  1339. <contact>Novell, Inc.</contact>
  1340. </source>
  1341. <input>
  1342. <query event-id="query-driver-ident" scope="entry">
  1343. <search-class class-name="__driver_identification_class__"/>
  1344. <read-attr/>
  1345. </query>
  1346. </input>
  1347. </nds>
  1348. [03/20/12 07:50:01.373]:Active Directory ST:Remote Interface Driver: Document sent.
  1349. [03/20/12 07:50:01.394]:Active Directory :Remote Interface Driver: Received.
  1350. [03/20/12 07:50:01.394]:Active Directory :
  1351. <nds dtdversion="1.1" ndsversion="8.7">
  1352. <source>
  1353. <product asn1id="" build="20090313_120000" instance="\EDIR2ADLAB\fdny\AD-TEST\Active Directory" version="3.5.5">AD</product>
  1354. <contact>Novell, Inc.</contact>
  1355. </source>
  1356. <output>
  1357. <instance class-name="__driver_identification_class__">
  1358. <attr attr-name="driver-id">
  1359. <value type="string">AD</value>
  1360. </attr>
  1361. <attr attr-name="driver-version">
  1362. <value type="string">3.5.5</value>
  1363. </attr>
  1364. <attr attr-name="min-activation-version">
  1365. <value type="string">5</value>
  1366. </attr>
  1367. <attr attr-name="query-ex-supported">
  1368. <value type="state">true</value>
  1369. </attr>
  1370. </instance>
  1371. <status event-id="query-driver-ident" level="success"/>
  1372. </output>
  1373. </nds>
  1374. [03/20/12 07:50:01.395]:Active Directory :Remote Interface Driver: Received document for subscriber channel
  1375. [03/20/12 07:50:01.395]:Active Directory ST:SubscriptionShim.execute() returned:
  1376. [03/20/12 07:50:01.395]:Active Directory ST:
  1377. <nds dtdversion="1.1" ndsversion="8.7">
  1378. <source>
  1379. <product asn1id="" build="20090313_120000" instance="\EDIR2ADLAB\fdny\AD-TEST\Active Directory" version="3.5.5">AD</product>
  1380. <contact>Novell, Inc.</contact>
  1381. </source>
  1382. <output>
  1383. <instance class-name="__driver_identification_class__">
  1384. <attr attr-name="driver-id">
  1385. <value type="string">AD</value>
  1386. </attr>
  1387. <attr attr-name="driver-version">
  1388. <value type="string">3.5.5</value>
  1389. </attr>
  1390. <attr attr-name="min-activation-version">
  1391. <value type="string">5</value>
  1392. </attr>
  1393. <attr attr-name="query-ex-supported">
  1394. <value type="state">true</value>
  1395. </attr>
  1396. </instance>
  1397. <status event-id="query-driver-ident" level="success"/>
  1398. </output>
  1399. </nds>
  1400. [03/20/12 07:50:01.398]:Active Directory :Remote Interface Driver: Waiting for receive...
  1401. [03/20/12 07:50:27.740]:Active Directory ST:Start transaction.
  1402. [03/20/12 07:50:27.740]:Active Directory ST:Processing events for transaction.
  1403. [03/20/12 07:50:27.741]:Active Directory ST:
  1404. <nds dtdversion="3.5" ndsversion="8.x">
  1405. <source>
  1406. <product version="3.6.10.4747">DirXML</product>
  1407. <contact>Novell, Inc.</contact>
  1408. </source>
  1409. <input>
  1410. <sync cached-time="20120320115027.684Z" class-name="User" event-id="edir2adlab-idm361#20120320115027#1#1" qualified-src-dn="O=fdny\OU=Support\OU=BTDS\OU=LAN\CN=goldwap" src-dn="\EDIR2ADLAB\fdny\Support\BTDS\LAN\goldwap" src-entry-id="32938" timestamp="0#0">
  1411. <association state="manual"></association>
  1412. </sync>
  1413. </input>
  1414. </nds>
  1415. [03/20/12 07:50:27.741]:Active Directory ST:No event transformation policies.
  1416. [03/20/12 07:50:27.741]:Active Directory ST:Subscriber processing sync for \EDIR2ADLAB\fdny\Support\BTDS\LAN\goldwap.
  1417. [03/20/12 07:50:27.742]:Active Directory ST:Reading relevant attributes from \EDIR2ADLAB\fdny\Support\BTDS\LAN\goldwap.
  1418. [03/20/12 07:50:27.742]:Active Directory ST:
  1419. <nds dtdversion="3.5" ndsversion="8.x">
  1420. <source>
  1421. <product version="3.6.10.4747">DirXML</product>
  1422. <contact>Novell, Inc.</contact>
  1423. </source>
  1424. <input>
  1425. <query class-name="User" dest-dn="\EDIR2ADLAB\fdny\Support\BTDS\LAN\goldwap" dest-entry-id="32938" scope="entry">
  1426. <read-attr attr-name="Description"/>
  1427. <read-attr attr-name="DirXML-EntitlementRef"/>
  1428. <read-attr attr-name="Facsimile Telephone Number"/>
  1429. <read-attr attr-name="Full Name"/>
  1430. <read-attr attr-name="Given Name"/>
  1431. <read-attr attr-name="Initials"/>
  1432. <read-attr attr-name="Internet EMail Address"/>
  1433. <read-attr attr-name="L"/>
  1434. <read-attr attr-name="Login Allowed Time Map"/>
  1435. <read-attr attr-name="Login Disabled"/>
  1436. <read-attr attr-name="Login Expiration Time"/>
  1437. <read-attr attr-name="nspmDistributionPassword"/>
  1438. <read-attr attr-name="Physical Delivery Office Name"/>
  1439. <read-attr attr-name="Postal Code"/>
  1440. <read-attr attr-name="Postal Office Box"/>
  1441. <read-attr attr-name="S"/>
  1442. <read-attr attr-name="SA"/>
  1443. <read-attr attr-name="Surname"/>
  1444. <read-attr attr-name="Telephone Number"/>
  1445. <read-attr attr-name="Title"/>
  1446. </query>
  1447. </input>
  1448. </nds>
  1449. [03/20/12 07:50:27.743]:Active Directory ST:Pumping XDS to eDirectory.
  1450. [03/20/12 07:50:27.743]:Active Directory ST:Performing operation query for \EDIR2ADLAB\fdny\Support\BTDS\LAN\goldwap.
  1451. [03/20/12 07:50:27.744]:Active Directory ST:Driver object has insufficient rights to read \EDIR2ADLAB\fdny\Support\BTDS\LAN\goldwap#Full Name.
  1452. [03/20/12 07:50:27.745]:Active Directory ST:Read result:
  1453. [03/20/12 07:50:27.745]:Active Directory ST:
  1454. <nds dtdversion="3.5" ndsversion="8.x">
  1455. <source>
  1456. <product version="3.6.10.4747">DirXML</product>
  1457. <contact>Novell, Inc.</contact>
  1458. </source>
  1459. <output>
  1460. <instance class-name="User" qualified-src-dn="O=fdny\OU=Support\OU=BTDS\OU=LAN\CN=goldwap" src-dn="\EDIR2ADLAB\fdny\Support\BTDS\LAN\goldwap" src-entry-id="32938">
  1461. <association state="manual"></association>
  1462. <attr attr-name="Given Name">
  1463. <value timestamp="1332166853#1" type="string">Philip</value>
  1464. </attr>
  1465. <attr attr-name="Surname">
  1466. <value timestamp="1332164807#3" type="string">Goldwasser</value>
  1467. </attr>
  1468. </instance>
  1469. <status level="success"></status>
  1470. </output>
  1471. </nds>
  1472. [03/20/12 07:50:27.746]:Active Directory ST:Synthetic add:
  1473. [03/20/12 07:50:27.746]:Active Directory ST:
  1474. <nds dtdversion="3.5" ndsversion="8.x">
  1475. <source>
  1476. <product version="3.6.10.4747">DirXML</product>
  1477. <contact>Novell, Inc.</contact>
  1478. </source>
  1479. <output>
  1480. <add class-name="User" event-id="edir2adlab-idm361#20120320115027#1#1" qualified-src-dn="O=fdny\OU=Support\OU=BTDS\OU=LAN\CN=goldwap" src-dn="\EDIR2ADLAB\fdny\Support\BTDS\LAN\goldwap" src-entry-id="32938">
  1481. <association state="manual"></association>
  1482. <add-attr attr-name="Given Name">
  1483. <value timestamp="1332166853#1" type="string">Philip</value>
  1484. </add-attr>
  1485. <add-attr attr-name="Surname">
  1486. <value timestamp="1332164807#3" type="string">Goldwasser</value>
  1487. </add-attr>
  1488. </add>
  1489. <status level="success"></status>
  1490. </output>
  1491. </nds>
  1492. [03/20/12 07:50:27.747]:Active Directory ST:Applying object matching policies.
  1493. [03/20/12 07:50:27.747]:Active Directory ST:Applying policy: %+C%14Csub-mp-Scoping%-C.
  1494. [03/20/12 07:50:27.747]:Active Directory ST: Applying to add #1.
  1495. [03/20/12 07:50:27.747]:Active Directory ST: Evaluating selection criteria for rule 'remember relative position in hierarchy'.
  1496. [03/20/12 07:50:27.747]:Active Directory ST: (if-src-dn in-subtree "fdny") = TRUE.
  1497. [03/20/12 07:50:27.747]:Active Directory ST: Rule selected.
  1498. [03/20/12 07:50:27.747]:Active Directory ST: Applying rule 'remember relative position in hierarchy'.
  1499. [03/20/12 07:50:27.747]:Active Directory ST: Action: do-set-op-property("unmatched-src-dn",token-unmatched-src-dn(convert="true")).
  1500. [03/20/12 07:50:27.748]:Active Directory ST: arg-string(token-unmatched-src-dn(convert="true"))
  1501. [03/20/12 07:50:27.748]:Active Directory ST: token-unmatched-src-dn(convert="true")
  1502. [03/20/12 07:50:27.748]:Active Directory ST: Token Value: "CN=goldwap,OU=LAN,OU=BTDS,OU=Support".
  1503. [03/20/12 07:50:27.748]:Active Directory ST: Arg Value: "CN=goldwap,OU=LAN,OU=BTDS,OU=Support".
  1504. [03/20/12 07:50:27.748]:Active Directory ST: Action: do-set-op-property("attempt-to-match","true").
  1505. [03/20/12 07:50:27.748]:Active Directory ST: arg-string("true")
  1506. [03/20/12 07:50:27.748]:Active Directory ST: token-text("true")
  1507. [03/20/12 07:50:27.748]:Active Directory ST: Arg Value: "true".
  1508. [03/20/12 07:50:27.748]:Active Directory ST:Policy returned:
  1509. [03/20/12 07:50:27.748]:Active Directory ST:
  1510. <nds dtdversion="3.5" ndsversion="8.x">
  1511. <source>
  1512. <product version="3.6.10.4747">DirXML</product>
  1513. <contact>Novell, Inc.</contact>
  1514. </source>
  1515. <input>
  1516. <add class-name="User" event-id="edir2adlab-idm361#20120320115027#1#1" qualified-src-dn="O=fdny\OU=Support\OU=BTDS\OU=LAN\CN=goldwap" src-dn="\EDIR2ADLAB\fdny\Support\BTDS\LAN\goldwap" src-entry-id="32938">
  1517. <add-attr attr-name="Given Name">
  1518. <value timestamp="1332166853#1" type="string">Philip</value>
  1519. </add-attr>
  1520. <add-attr attr-name="Surname">
  1521. <value timestamp="1332164807#3" type="string">Goldwasser</value>
  1522. </add-attr>
  1523. <operation-data attempt-to-match="true" unmatched-src-dn="CN=goldwap,OU=LAN,OU=BTDS,OU=Support"/>
  1524. </add>
  1525. </input>
  1526. </nds>
  1527. [03/20/12 07:50:27.749]:Active Directory ST:Applying policy: %+C%14Csub-mp-EntitlementsImpl%-C.
  1528. [03/20/12 07:50:27.749]:Active Directory ST: Applying to add #1.
  1529. [03/20/12 07:50:27.749]:Active Directory ST: Evaluating selection criteria for rule 'UserAccount entitlement: do not match existing accounts'.
  1530. [03/20/12 07:50:27.750]:Active Directory ST: (if-class-name equal "User") = TRUE.
  1531. [03/20/12 07:50:27.750]:Active Directory ST: (if-global-variable 'drv.entitlement.UserAccount' equal "true") = FALSE.
  1532. [03/20/12 07:50:27.750]:Active Directory ST: Rule rejected.
  1533. [03/20/12 07:50:27.750]:Active Directory ST:Policy returned:
  1534. [03/20/12 07:50:27.750]:Active Directory ST:
  1535. <nds dtdversion="3.5" ndsversion="8.x">
  1536. <source>
  1537. <product version="3.6.10.4747">DirXML</product>
  1538. <contact>Novell, Inc.</contact>
  1539. </source>
  1540. <input>
  1541. <add class-name="User" event-id="edir2adlab-idm361#20120320115027#1#1" qualified-src-dn="O=fdny\OU=Support\OU=BTDS\OU=LAN\CN=goldwap" src-dn="\EDIR2ADLAB\fdny\Support\BTDS\LAN\goldwap" src-entry-id="32938">
  1542. <add-attr attr-name="Given Name">
  1543. <value timestamp="1332166853#1" type="string">Philip</value>
  1544. </add-attr>
  1545. <add-attr attr-name="Surname">
  1546. <value timestamp="1332164807#3" type="string">Goldwasser</value>
  1547. </add-attr>
  1548. <operation-data attempt-to-match="true" unmatched-src-dn="CN=goldwap,OU=LAN,OU=BTDS,OU=Support"/>
  1549. </add>
  1550. </input>
  1551. </nds>
  1552. [03/20/12 07:50:27.751]:Active Directory ST:Applying policy: %+C%14Csub-mp%-C.
  1553. [03/20/12 07:50:27.751]:Active Directory ST: Applying to add #1.
  1554. [03/20/12 07:50:27.751]:Active Directory ST: Evaluating selection criteria for rule 'veto out-of-scope events'.
  1555. [03/20/12 07:50:27.751]:Active Directory ST: (if-op-property 'attempt-to-match' not-available) = FALSE.
  1556. [03/20/12 07:50:27.751]:Active Directory ST: (if-op-property 'attempt-to-match' equal "false") = FALSE.
  1557. [03/20/12 07:50:27.751]:Active Directory ST: Rule rejected.
  1558. [03/20/12 07:50:27.751]:Active Directory ST: Evaluating selection criteria for rule 'generate full name if not in Identity Vault'.
  1559. [03/20/12 07:50:27.751]:Active Directory ST: (if-class-name equal "User") = TRUE.
  1560. [03/20/12 07:50:27.752]:Active Directory ST: (if-global-variable 'FullNameMap' equal "true") = TRUE.
  1561. [03/20/12 07:50:27.752]:Active Directory ST: Query from policy
  1562. [03/20/12 07:50:27.752]:Active Directory ST:
  1563. <nds dtdversion="3.5" ndsversion="8.x">
  1564. <source>
  1565. <product version="3.6.10.4747">DirXML</product>
  1566. <contact>Novell, Inc.</contact>
  1567. </source>
  1568. <input>
  1569. <query class-name="User" dest-dn="\EDIR2ADLAB\fdny\Support\BTDS\LAN\goldwap" dest-entry-id="32938" scope="entry">
  1570. <read-attr attr-name="Full Name"/>
  1571. </query>
  1572. </input>
  1573. </nds>
  1574. [03/20/12 07:50:27.752]:Active Directory ST: Pumping XDS to eDirectory.
  1575. [03/20/12 07:50:27.752]:Active Directory ST: Performing operation query for \EDIR2ADLAB\fdny\Support\BTDS\LAN\goldwap.
  1576. [03/20/12 07:50:27.753]:Active Directory ST: Driver object has insufficient rights to read \EDIR2ADLAB\fdny\Support\BTDS\LAN\goldwap#Full Name.
  1577. [03/20/12 07:50:27.753]:Active Directory ST: Query from policy result
  1578. [03/20/12 07:50:27.753]:Active Directory ST:
  1579. <nds dtdversion="3.5" ndsversion="8.x">
  1580. <source>
  1581. <product version="3.6.10.4747">DirXML</product>
  1582. <contact>Novell, Inc.</contact>
  1583. </source>
  1584. <output>
  1585. <instance class-name="User" qualified-src-dn="O=fdny\OU=Support\OU=BTDS\OU=LAN\CN=goldwap" src-dn="\EDIR2ADLAB\fdny\Support\BTDS\LAN\goldwap" src-entry-id="32938">
  1586. <association state="manual"></association>
  1587. </instance>
  1588. <status level="success"></status>
  1589. </output>
  1590. </nds>
  1591. [03/20/12 07:50:27.754]:Active Directory ST: (if-attr 'Full Name' not-available) = TRUE.
  1592. [03/20/12 07:50:27.754]:Active Directory ST: (if-attr 'Given Name' available) = TRUE.
  1593. [03/20/12 07:50:27.754]:Active Directory ST: Rule selected.
  1594. [03/20/12 07:50:27.754]:Active Directory ST: Applying rule 'generate full name if not in Identity Vault'.
  1595. [03/20/12 07:50:27.755]:Active Directory ST: Action: do-set-local-variable("gen-full-name",token-attr("Given Name")+" "+token-attr("Surname")).
  1596. [03/20/12 07:50:27.755]:Active Directory ST: arg-string(token-attr("Given Name")+" "+token-attr("Surname"))
  1597. [03/20/12 07:50:27.755]:Active Directory ST: token-attr("Given Name")
  1598. [03/20/12 07:50:27.755]:Active Directory ST: Token Value: "Philip".
  1599. [03/20/12 07:50:27.755]:Active Directory ST: token-text(" ")
  1600. [03/20/12 07:50:27.755]:Active Directory ST: token-attr("Surname")
  1601. [03/20/12 07:50:27.755]:Active Directory ST: Token Value: "Goldwasser".
  1602. [03/20/12 07:50:27.755]:Active Directory ST: Arg Value: "Philip Goldwasser".
  1603. [03/20/12 07:50:27.755]:Active Directory ST: Action: do-set-src-attr-value("Full Name",token-xpath("normalize-space($gen-full-name)")).
  1604. [03/20/12 07:50:27.756]:Active Directory ST: arg-string(token-xpath("normalize-space($gen-full-name)"))
  1605. [03/20/12 07:50:27.756]:Active Directory ST: token-xpath("normalize-space($gen-full-name)")
  1606. [03/20/12 07:50:27.756]:Active Directory ST: Token Value: "Philip Goldwasser".
  1607. [03/20/12 07:50:27.756]:Active Directory ST: Arg Value: "Philip Goldwasser".
  1608. [03/20/12 07:50:27.756]:Active Directory ST: Action: do-set-dest-attr-value("Full Name",token-xpath("normalize-space($gen-full-name)")).
  1609. [03/20/12 07:50:27.756]:Active Directory ST: arg-string(token-xpath("normalize-space($gen-full-name)"))
  1610. [03/20/12 07:50:27.756]:Active Directory ST: token-xpath("normalize-space($gen-full-name)")
  1611. [03/20/12 07:50:27.756]:Active Directory ST: Token Value: "Philip Goldwasser".
  1612. [03/20/12 07:50:27.757]:Active Directory ST: Arg Value: "Philip Goldwasser".
  1613. [03/20/12 07:50:27.757]:Active Directory ST: Evaluating selection criteria for rule 'match users based on NT logon name'.
  1614. [03/20/12 07:50:27.757]:Active Directory ST: (if-class-name equal "User") = TRUE.
  1615. [03/20/12 07:50:27.757]:Active Directory ST: (if-global-variable 'LogonNameMap' equal "true") = TRUE.
  1616. [03/20/12 07:50:27.757]:Active Directory ST: Rule selected.
  1617. [03/20/12 07:50:27.757]:Active Directory ST: Applying rule 'match users based on NT logon name'.
  1618. [03/20/12 07:50:27.757]:Active Directory ST: Action: do-find-matching-object(scope="subtree",arg-dn(token-global-variable("drv.user.container")),arg-match-attr("DirXML-ADAliasName",token-replace-all("^a-zA-Z0-9\x21\x23-\x29\x2d\x2e\x40\x5e-\x60\x7b\x7d\x7e\xc0-\xf6\xf8-\xff\x410-\x44f","",token-src-name()))).
  1619. [03/20/12 07:50:27.757]:Active Directory ST: arg-dn(token-global-variable("drv.user.container"))
  1620. [03/20/12 07:50:27.758]:Active Directory ST: token-global-variable("drv.user.container")
  1621. [03/20/12 07:50:27.758]:Active Directory ST: Token Value: "OU=FDNY,dc=edir2adlab,dc=local".
  1622. [03/20/12 07:50:27.758]:Active Directory ST: Arg Value: "OU=FDNY,dc=edir2adlab,dc=local".
  1623. [03/20/12 07:50:27.758]:Active Directory ST: arg-match-attr("DirXML-ADAliasName",token-replace-all("^a-zA-Z0-9\x21\x23-\x29\x2d\x2e\x40\x5e-\x60\x7b\x7d\x7e\xc0-\xf6\xf8-\xff\x410-\x44f","",token-src-name()))
  1624. [03/20/12 07:50:27.758]:Active Directory ST: arg-string(token-replace-all("^a-zA-Z0-9\x21\x23-\x29\x2d\x2e\x40\x5e-\x60\x7b\x7d\x7e\xc0-\xf6\xf8-\xff\x410-\x44f","",token-src-name()))
  1625. [03/20/12 07:50:27.758]:Active Directory ST: token-replace-all("^a-zA-Z0-9\x21\x23-\x29\x2d\x2e\x40\x5e-\x60\x7b\x7d\x7e\xc0-\xf6\xf8-\xff\x410-\x44f","",token-src-name())
  1626. [03/20/12 07:50:27.759]:Active Directory ST: token-replace-all("^a-zA-Z0-9\x21\x23-\x29\x2d\x2e\x40\x5e-\x60\x7b\x7d\x7e\xc0-\xf6\xf8-\xff\x410-\x44f","",token-src-name())
  1627. [03/20/12 07:50:27.759]:Active Directory ST: token-src-name()
  1628. [03/20/12 07:50:27.759]:Active Directory ST: Token Value: "goldwap".
  1629. [03/20/12 07:50:27.759]:Active Directory ST: Arg Value: "goldwap".
  1630. [03/20/12 07:50:27.759]:Active Directory ST: Token Value: "goldwap".
  1631. [03/20/12 07:50:27.759]:Active Directory ST: Arg Value: "goldwap".
  1632. [03/20/12 07:50:27.759]:Active Directory ST: Query from policy
  1633. [03/20/12 07:50:27.760]:Active Directory ST:
  1634. <nds dtdversion="3.5" ndsversion="8.x">
  1635. <source>
  1636. <product version="3.6.10.4747">DirXML</product>
  1637. <contact>Novell, Inc.</contact>
  1638. </source>
  1639. <input>
  1640. <query class-name="User" dest-dn="OU=FDNY,dc=edir2adlab,dc=local" scope="subtree">
  1641. <search-class class-name="User"/>
  1642. <search-attr attr-name="DirXML-ADAliasName">
  1643. <value type="string">goldwap</value>
  1644. </search-attr>
  1645. <read-attr/>
  1646. </query>
  1647. </input>
  1648. </nds>
  1649. [03/20/12 07:50:27.760]:Active Directory ST: Fixing up association references.
  1650. [03/20/12 07:50:27.760]:Active Directory ST: Applying schema mapping policies to output.
  1651. [03/20/12 07:50:27.760]:Active Directory ST: Applying policy: %+C%14Csmp%-C.
  1652. [03/20/12 07:50:27.761]:Active Directory ST: Mapping attr-name 'DirXML-ADAliasName' to 'userPrincipalName'.
  1653. [03/20/12 07:50:27.761]:Active Directory ST: Mapping class-name 'User' to 'user'.
  1654. [03/20/12 07:50:27.761]:Active Directory ST: Mapping class-name 'User' to 'user'.
  1655. [03/20/12 07:50:27.761]:Active Directory ST: Applying output transformation policies.
  1656. [03/20/12 07:50:27.761]:Active Directory ST: Applying policy: %+C%14Cotp%-C.
  1657. [03/20/12 07:50:27.761]:Active Directory ST: Applying to query #1.
  1658. [03/20/12 07:50:27.761]:Active Directory ST: Evaluating selection criteria for rule 'Street Address: Convert LF to CR-LF'.
  1659. [03/20/12 07:50:27.761]:Active Directory ST: Rule selected.
  1660. [03/20/12 07:50:27.762]:Active Directory ST: Applying rule 'Street Address: Convert LF to CR-LF'.
  1661. [03/20/12 07:50:27.762]:Active Directory ST: Action: do-reformat-op-attr("streetAddress",token-replace-all("[^\r]\n","\r\n",token-local-variable("current-value"))).
  1662. [03/20/12 07:50:27.762]:Active Directory ST: Evaluating selection criteria for rule 'logonHours: Convert to Active Directory form'.
  1663. [03/20/12 07:50:27.762]:Active Directory ST: Rule selected.
  1664. [03/20/12 07:50:27.762]:Active Directory ST: Applying rule 'logonHours: Convert to Active Directory form'.
  1665. [03/20/12 07:50:27.762]:Active Directory ST: Action: do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2ADLenient($current-value)")).
  1666. [03/20/12 07:50:27.762]:Active Directory ST: Evaluating selection criteria for rule 'accountExpires: Convert to Active Directory form'.
  1667. [03/20/12 07:50:27.763]:Active Directory ST: (if-op-attr 'accountExpires' changing) = FALSE.
  1668. [03/20/12 07:50:27.763]:Active Directory ST: Rule rejected.
  1669. [03/20/12 07:50:27.763]:Active Directory ST: Evaluating selection criteria for rule 'lockoutTime: Convert to Active Directory form'.
  1670. [03/20/12 07:50:27.763]:Active Directory ST: Rule selected.
  1671. [03/20/12 07:50:27.763]:Active Directory ST: Applying rule 'lockoutTime: Convert to Active Directory form'.
  1672. [03/20/12 07:50:27.763]:Active Directory ST: Action: do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateEpoch2FileTime($current-value)")).
  1673. [03/20/12 07:50:27.763]:Active Directory ST: Evaluating selection criteria for rule 'Add: User - convert multi-valued Telephone to single value'.
  1674. [03/20/12 07:50:27.764]:Active Directory ST: (if-operation equal "add") = FALSE.
  1675. [03/20/12 07:50:27.764]:Active Directory ST: Rule rejected.
  1676. [03/20/12 07:50:27.764]:Active Directory ST: Evaluating selection criteria for rule 'update Active Directory logon name'.
  1677. [03/20/12 07:50:27.764]:Active Directory ST: (if-xpath true "self::status[@level = 'success']/operation-data/windows-2000-logon-name") = FALSE.
  1678. [03/20/12 07:50:27.764]:Active Directory ST: Rule rejected.
  1679. [03/20/12 07:50:27.764]:Active Directory ST: Evaluating selection criteria for rule 'Exchange: Remove HomeMDB when disabled'.
  1680. [03/20/12 07:50:27.764]:Active Directory ST: (if-global-variable 'drv.exchMailboxMethod' equal "disabled") = TRUE.
  1681. [03/20/12 07:50:27.764]:Active Directory ST: Rule selected.
  1682. [03/20/12 07:50:27.764]:Active Directory ST: Applying rule 'Exchange: Remove HomeMDB when disabled'.
  1683. [03/20/12 07:50:27.765]:Active Directory ST: Action: do-strip-op-attr("homeMDB").
  1684. [03/20/12 07:50:27.765]:Active Directory ST: Policy returned:
  1685. [03/20/12 07:50:27.765]:Active Directory ST:
  1686. <nds dtdversion="3.5" ndsversion="8.x">
  1687. <source>
  1688. <product version="3.6.10.4747">DirXML</product>
  1689. <contact>Novell, Inc.</contact>
  1690. </source>
  1691. <input>
  1692. <query class-name="user" dest-dn="OU=FDNY,dc=edir2adlab,dc=local" event-id="0" scope="subtree">
  1693. <search-class class-name="user"/>
  1694. <search-attr attr-name="userPrincipalName">
  1695. <value type="string">goldwap</value>
  1696. </search-attr>
  1697. <read-attr/>
  1698. </query>
  1699. </input>
  1700. </nds>
  1701. [03/20/12 07:50:27.765]:Active Directory ST: Applying policy: %+C%14CPassword(Sub)-Pub Email Notifications%-C.
  1702. [03/20/12 07:50:27.765]:Active Directory ST: Applying to query #1.
  1703. [03/20/12 07:50:27.766]:Active Directory ST: Evaluating selection criteria for rule 'Send e-mail for a failed publish password operation'.
  1704. [03/20/12 07:50:27.766]:Active Directory ST: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  1705. [03/20/12 07:50:27.766]:Active Directory ST: (if-operation equal "status") = FALSE.
  1706. [03/20/12 07:50:27.766]:Active Directory ST: Rule rejected.
  1707. [03/20/12 07:50:27.766]:Active Directory ST: Policy returned:
  1708. [03/20/12 07:50:27.766]:Active Directory ST:
  1709. <nds dtdversion="3.5" ndsversion="8.x">
  1710. <source>
  1711. <product version="3.6.10.4747">DirXML</product>
  1712. <contact>Novell, Inc.</contact>
  1713. </source>
  1714. <input>
  1715. <query class-name="user" dest-dn="OU=FDNY,dc=edir2adlab,dc=local" event-id="0" scope="subtree">
  1716. <search-class class-name="user"/>
  1717. <search-attr attr-name="userPrincipalName">
  1718. <value type="string">goldwap</value>
  1719. </search-attr>
  1720. <read-attr/>
  1721. </query>
  1722. </input>
  1723. </nds>
  1724. [03/20/12 07:50:27.767]:Active Directory ST: Applying policy: %+C%14Clib-CredProv-ConvertPayload-otp-V1%-C.
  1725. [03/20/12 07:50:27.767]:Active Directory ST: Applying to query #1.
  1726. [03/20/12 07:50:27.767]:Active Directory ST: Evaluating selection criteria for rule 'Is credential provisioning enabled? Are there any custom payloads?'.
  1727. [03/20/12 07:50:27.767]:Active Directory ST: Rule selected.
  1728. [03/20/12 07:50:27.767]:Active Directory ST: Applying rule 'Is credential provisioning enabled? Are there any custom payloads?'.
  1729. [03/20/12 07:50:27.767]:Active Directory ST: Action: do-if().
  1730. [03/20/12 07:50:27.768]:Active Directory ST: Evaluating conditions.
  1731. [03/20/12 07:50:27.768]:Active Directory ST: (if-global-variable 'credprov.enable' not-equal "true") = TRUE.
  1732. [03/20/12 07:50:27.768]:Active Directory ST: Performing if actions.
  1733. [03/20/12 07:50:27.768]:Active Directory ST: Action: do-break().
  1734. [03/20/12 07:50:27.768]:Active Directory ST: Policy returned:
  1735. [03/20/12 07:50:27.768]:Active Directory ST:
  1736. <nds dtdversion="3.5" ndsversion="8.x">
  1737. <source>
  1738. <product version="3.6.10.4747">DirXML</product>
  1739. <contact>Novell, Inc.</contact>
  1740. </source>
  1741. <input>
  1742. <query class-name="user" dest-dn="OU=FDNY,dc=edir2adlab,dc=local" event-id="0" scope="subtree">
  1743. <search-class class-name="user"/>
  1744. <search-attr attr-name="userPrincipalName">
  1745. <value type="string">goldwap</value>
  1746. </search-attr>
  1747. <read-attr/>
  1748. </query>
  1749. </input>
  1750. </nds>
  1751. [03/20/12 07:50:27.769]:Active Directory ST: Applying policy: %+C%14Clib-AccountTracking-Subscribe-otp-V1%-C.
  1752. [03/20/12 07:50:27.769]:Active Directory ST: Applying to query #1.
  1753. [03/20/12 07:50:27.769]:Active Directory ST: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled or wrong object class'.
  1754. [03/20/12 07:50:27.769]:Active Directory ST: Rule selected.
  1755. [03/20/12 07:50:27.769]:Active Directory ST: Applying rule 'AccountTracking - disregard if disabled or wrong object class'.
  1756. [03/20/12 07:50:27.769]:Active Directory ST: Action: do-if().
  1757. [03/20/12 07:50:27.769]:Active Directory ST: Evaluating conditions.
  1758. [03/20/12 07:50:27.769]:Active Directory ST: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  1759. [03/20/12 07:50:27.769]:Active Directory ST: Performing else actions.
  1760. [03/20/12 07:50:27.770]:Active Directory ST: Action: do-for-each(arg-node-set(token-global-variable("drv.acctTrk.objectClass"))).
  1761. [03/20/12 07:50:27.770]:Active Directory ST: arg-node-set(token-global-variable("drv.acctTrk.objectClass"))
  1762. [03/20/12 07:50:27.770]:Active Directory ST: token-global-variable("drv.acctTrk.objectClass")
  1763. [03/20/12 07:50:27.770]:Active Directory ST: Token Value: {"user"}.
  1764. [03/20/12 07:50:27.770]:Active Directory ST: Arg Value: {"user"}.
  1765. [03/20/12 07:50:27.770]:Active Directory ST: Performing actions for local-variable(current-node) = "user".
  1766. [03/20/12 07:50:27.770]:Active Directory ST: Action: do-if().
  1767. [03/20/12 07:50:27.770]:Active Directory ST: Evaluating conditions.
  1768. [03/20/12 07:50:27.771]:Active Directory ST: Expanded variable reference '$current-node$' to 'user'.
  1769. [03/20/12 07:50:27.771]:Active Directory ST: (if-class-name equal "$current-node$") = TRUE.
  1770. [03/20/12 07:50:27.771]:Active Directory ST: Performing if actions.
  1771. [03/20/12 07:50:27.771]:Active Directory ST: Action: do-set-local-variable("pass",scope="policy","true").
  1772. [03/20/12 07:50:27.771]:Active Directory ST: arg-string("true")
  1773. [03/20/12 07:50:27.771]:Active Directory ST: token-text("true")
  1774. [03/20/12 07:50:27.771]:Active Directory ST: Arg Value: "true".
  1775. [03/20/12 07:50:27.771]:Active Directory ST: Action: do-if().
  1776. [03/20/12 07:50:27.771]:Active Directory ST: Evaluating conditions.
  1777. [03/20/12 07:50:27.772]:Active Directory ST: (if-local-variable 'pass' not-available) = FALSE.
  1778. [03/20/12 07:50:27.772]:Active Directory ST: Performing else actions.
  1779. [03/20/12 07:50:27.772]:Active Directory ST: Evaluating selection criteria for rule 'AccountTracking - include desired attribute values in operation-data'.
  1780. [03/20/12 07:50:27.772]:Active Directory ST: (if-operation match "add|modify|delete|rename|move") = FALSE.
  1781. [03/20/12 07:50:27.772]:Active Directory ST: Rule rejected.
  1782. [03/20/12 07:50:27.772]:Active Directory ST: Evaluating selection criteria for rule 'Account-Tracking-StripAccountTrackingAccountStatus Attribute'.
  1783. [03/20/12 07:50:27.772]:Active Directory ST: (if-op-attr 'AccountTrackingAccountStatus' available) = FALSE.
  1784. [03/20/12 07:50:27.772]:Active Directory ST: Rule rejected.
  1785. [03/20/12 07:50:27.774]:Active Directory ST: Policy returned:
  1786. [03/20/12 07:50:27.774]:Active Directory ST:
  1787. <nds dtdversion="3.5" ndsversion="8.x">
  1788. <source>
  1789. <product version="3.6.10.4747">DirXML</product>
  1790. <contact>Novell, Inc.</contact>
  1791. </source>
  1792. <input>
  1793. <query class-name="user" dest-dn="OU=FDNY,dc=edir2adlab,dc=local" event-id="0" scope="subtree">
  1794. <search-class class-name="user"/>
  1795. <search-attr attr-name="userPrincipalName">
  1796. <value type="string">goldwap</value>
  1797. </search-attr>
  1798. <read-attr/>
  1799. </query>
  1800. </input>
  1801. </nds>
  1802. [03/20/12 07:50:27.774]:Active Directory ST: Submitting document to subscriber shim:
  1803. [03/20/12 07:50:27.774]:Active Directory ST:
  1804. <nds dtdversion="3.5" ndsversion="8.x">
  1805. <source>
  1806. <product version="3.6.10.4747">DirXML</product>
  1807. <contact>Novell, Inc.</contact>
  1808. </source>
  1809. <input>
  1810. <query class-name="user" dest-dn="OU=FDNY,dc=edir2adlab,dc=local" event-id="0" scope="subtree">
  1811. <search-class class-name="user"/>
  1812. <search-attr attr-name="userPrincipalName">
  1813. <value type="string">goldwap</value>
  1814. </search-attr>
  1815. <read-attr/>
  1816. </query>
  1817. </input>
  1818. </nds>
  1819. [03/20/12 07:50:27.775]:Active Directory ST: Remote Interface Driver: Sending...
  1820. [03/20/12 07:50:27.775]:Active Directory ST:
  1821. <nds dtdversion="3.5" ndsversion="8.x">
  1822. <source>
  1823. <product version="3.6.10.4747">DirXML</product>
  1824. <contact>Novell, Inc.</contact>
  1825. </source>
  1826. <input>
  1827. <query class-name="user" dest-dn="OU=FDNY,dc=edir2adlab,dc=local" event-id="0" scope="subtree">
  1828. <search-class class-name="user"/>
  1829. <search-attr attr-name="userPrincipalName">
  1830. <value type="string">goldwap</value>
  1831. </search-attr>
  1832. <read-attr/>
  1833. </query>
  1834. </input>
  1835. </nds>
  1836. [03/20/12 07:50:27.776]:Active Directory ST: Remote Interface Driver: Document sent.
  1837. [03/20/12 07:50:27.817]:Active Directory :Remote Interface Driver: Received.
  1838. [03/20/12 07:50:27.818]:Active Directory :
  1839. <nds dtdversion="1.1" ndsversion="8.7">
  1840. <source>
  1841. <product asn1id="" build="20090313_120000" instance="\EDIR2ADLAB\fdny\AD-TEST\Active Directory" version="3.5.5">AD</product>
  1842. <contact>Novell, Inc.</contact>
  1843. </source>
  1844. <output>
  1845. <status event-id="0" level="success"/>
  1846. </output>
  1847. </nds>
  1848. [03/20/12 07:50:27.818]:Active Directory :Remote Interface Driver: Received document for subscriber channel
  1849. [03/20/12 07:50:27.818]:Active Directory ST: SubscriptionShim.execute() returned:
  1850. [03/20/12 07:50:27.818]:Active Directory ST:
  1851. <nds dtdversion="1.1" ndsversion="8.7">
  1852. <source>
  1853. <product asn1id="" build="20090313_120000" instance="\EDIR2ADLAB\fdny\AD-TEST\Active Directory" version="3.5.5">AD</product>
  1854. <contact>Novell, Inc.</contact>
  1855. </source>
  1856. <output>
  1857. <status event-id="0" level="success"/>
  1858. </output>
  1859. </nds>
  1860. [03/20/12 07:50:27.819]:Active Directory ST: Applying input transformation policies.
  1861. [03/20/12 07:50:27.819]:Active Directory ST: Applying policy: %+C%14Clib-AccountTracking-Publish-itp-V1%-C.
  1862. [03/20/12 07:50:27.819]:Active Directory ST: Applying to status #1.
  1863. [03/20/12 07:50:27.819]:Active Directory ST: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled or wrong object class'.
  1864. [03/20/12 07:50:27.819]:Active Directory ST: Rule selected.
  1865. [03/20/12 07:50:27.819]:Active Directory ST: Applying rule 'AccountTracking - disregard if disabled or wrong object class'.
  1866. [03/20/12 07:50:27.819]:Active Directory ST: Action: do-if().
  1867. [03/20/12 07:50:27.820]:Active Directory ST: Evaluating conditions.
  1868. [03/20/12 07:50:27.820]:Active Directory ST: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  1869. [03/20/12 07:50:27.820]:Active Directory ST: Performing else actions.
  1870. [03/20/12 07:50:27.820]:Active Directory ST: Action: do-if().
  1871. [03/20/12 07:50:27.820]:Active Directory ST: Evaluating conditions.
  1872. [03/20/12 07:50:27.820]:Active Directory ST: (if-class-name available) = FALSE.
  1873. [03/20/12 07:50:27.820]:Active Directory ST: Performing else actions.
  1874. [03/20/12 07:50:27.820]:Active Directory ST: Evaluating selection criteria for rule 'AccountTracking - on add-association sync the operation-properties to status operations'.
  1875. [03/20/12 07:50:27.820]:Active Directory ST: (if-operation equal "add-association") = FALSE.
  1876. [03/20/12 07:50:27.821]:Active Directory ST: Rule rejected.
  1877. [03/20/12 07:50:27.821]:Active Directory ST: Evaluating selection criteria for rule 'AccountTracking - Query for destination DN using Association'.
  1878. [03/20/12 07:50:27.821]:Active Directory ST: (if-operation match "modify|delete|move|rename") = FALSE.
  1879. [03/20/12 07:50:27.821]:Active Directory ST: Rule rejected.
  1880. [03/20/12 07:50:27.821]:Active Directory ST: Evaluating selection criteria for rule 'AccountTracking - add interested properties to current doc for future use.'.
  1881. [03/20/12 07:50:27.821]:Active Directory ST: (if-operation match "add|modify|delete|rename|move|status") = TRUE.
  1882. [03/20/12 07:50:27.821]:Active Directory ST: Rule selected.
  1883. [03/20/12 07:50:27.821]:Active Directory ST: Applying rule 'AccountTracking - add interested properties to current doc for future use.'.
  1884. [03/20/12 07:50:27.822]:Active Directory ST: Action: do-for-each(arg-node-set(token-global-variable("drv.acctTrk.identifiers"))).
  1885. [03/20/12 07:50:27.822]:Active Directory ST: arg-node-set(token-global-variable("drv.acctTrk.identifiers"))
  1886. [03/20/12 07:50:27.822]:Active Directory ST: token-global-variable("drv.acctTrk.identifiers")
  1887. [03/20/12 07:50:27.822]:Active Directory ST: Token Value: {"sAMAccountName","userPrincipalName","LDAPDN","association"}.
  1888. [03/20/12 07:50:27.822]:Active Directory ST: Arg Value: {"sAMAccountName","userPrincipalName","LDAPDN","association"}.
  1889. [03/20/12 07:50:27.822]:Active Directory ST: Performing actions for local-variable(current-node) = "sAMAccountName".
  1890. [03/20/12 07:50:27.822]:Active Directory ST: Action: do-if().
  1891. [03/20/12 07:50:27.822]:Active Directory ST: Evaluating conditions.
  1892. [03/20/12 07:50:27.823]:Active Directory ST: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  1893. [03/20/12 07:50:27.823]:Active Directory ST: Performing else actions.
  1894. [03/20/12 07:50:27.823]:Active Directory ST: Action: do-if().
  1895. [03/20/12 07:50:27.823]:Active Directory ST: Evaluating conditions.
  1896. [03/20/12 07:50:27.823]:Active Directory ST: (if-local-variable 'current-node' equal "association") = FALSE.
  1897. [03/20/12 07:50:27.823]:Active Directory ST: Performing else actions.
  1898. [03/20/12 07:50:27.823]:Active Directory ST: Action: do-if().
  1899. [03/20/12 07:50:27.823]:Active Directory ST: Evaluating conditions.
  1900. [03/20/12 07:50:27.824]:Active Directory ST: Expanded variable reference '$current-node$' to 'sAMAccountName'.
  1901. [03/20/12 07:50:27.824]:Active Directory ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  1902. [03/20/12 07:50:27.824]:Active Directory ST: Expanded variable reference '$current-node$' to 'sAMAccountName'.
  1903. [03/20/12 07:50:27.824]:Active Directory ST: (if-op-attr '$current-node$' available) = FALSE.
  1904. [03/20/12 07:50:27.824]:Active Directory ST: Performing else actions.
  1905. [03/20/12 07:50:27.824]:Active Directory ST: Performing actions for local-variable(current-node) = "userPrincipalName".
  1906. [03/20/12 07:50:27.824]:Active Directory ST: Action: do-if().
  1907. [03/20/12 07:50:27.824]:Active Directory ST: Evaluating conditions.
  1908. [03/20/12 07:50:27.825]:Active Directory ST: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  1909. [03/20/12 07:50:27.825]:Active Directory ST: Performing else actions.
  1910. [03/20/12 07:50:27.825]:Active Directory ST: Action: do-if().
  1911. [03/20/12 07:50:27.825]:Active Directory ST: Evaluating conditions.
  1912. [03/20/12 07:50:27.825]:Active Directory ST: (if-local-variable 'current-node' equal "association") = FALSE.
  1913. [03/20/12 07:50:27.825]:Active Directory ST: Performing else actions.
  1914. [03/20/12 07:50:27.825]:Active Directory ST: Action: do-if().
  1915. [03/20/12 07:50:27.825]:Active Directory ST: Evaluating conditions.
  1916. [03/20/12 07:50:27.825]:Active Directory ST: Expanded variable reference '$current-node$' to 'userPrincipalName'.
  1917. [03/20/12 07:50:27.826]:Active Directory ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  1918. [03/20/12 07:50:27.826]:Active Directory ST: Expanded variable reference '$current-node$' to 'userPrincipalName'.
  1919. [03/20/12 07:50:27.826]:Active Directory ST: (if-op-attr '$current-node$' available) = FALSE.
  1920. [03/20/12 07:50:27.826]:Active Directory ST: Performing else actions.
  1921. [03/20/12 07:50:27.826]:Active Directory ST: Performing actions for local-variable(current-node) = "LDAPDN".
  1922. [03/20/12 07:50:27.826]:Active Directory ST: Action: do-if().
  1923. [03/20/12 07:50:27.826]:Active Directory ST: Evaluating conditions.
  1924. [03/20/12 07:50:27.826]:Active Directory ST: (if-local-variable 'current-node' equal "LDAPDN") = TRUE.
  1925. [03/20/12 07:50:27.827]:Active Directory ST: Expanded variable reference '$current-node$' to 'LDAPDN'.
  1926. [03/20/12 07:50:27.827]:Active Directory ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  1927. [03/20/12 07:50:27.827]:Active Directory ST: (if-src-dn available) = FALSE.
  1928. [03/20/12 07:50:27.827]:Active Directory ST: Performing else actions.
  1929. [03/20/12 07:50:27.827]:Active Directory ST: Action: do-if().
  1930. [03/20/12 07:50:27.827]:Active Directory ST: Evaluating conditions.
  1931. [03/20/12 07:50:27.827]:Active Directory ST: (if-local-variable 'current-node' equal "association") = FALSE.
  1932. [03/20/12 07:50:27.827]:Active Directory ST: Performing else actions.
  1933. [03/20/12 07:50:27.827]:Active Directory ST: Action: do-if().
  1934. [03/20/12 07:50:27.828]:Active Directory ST: Evaluating conditions.
  1935. [03/20/12 07:50:27.828]:Active Directory ST: Expanded variable reference '$current-node$' to 'LDAPDN'.
  1936. [03/20/12 07:50:27.828]:Active Directory ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  1937. [03/20/12 07:50:27.828]:Active Directory ST: Expanded variable reference '$current-node$' to 'LDAPDN'.
  1938. [03/20/12 07:50:27.828]:Active Directory ST: (if-op-attr '$current-node$' available) = FALSE.
  1939. [03/20/12 07:50:27.828]:Active Directory ST: Performing else actions.
  1940. [03/20/12 07:50:27.828]:Active Directory ST: Performing actions for local-variable(current-node) = "association".
  1941. [03/20/12 07:50:27.828]:Active Directory ST: Action: do-if().
  1942. [03/20/12 07:50:27.828]:Active Directory ST: Evaluating conditions.
  1943. [03/20/12 07:50:27.829]:Active Directory ST: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  1944. [03/20/12 07:50:27.829]:Active Directory ST: Performing else actions.
  1945. [03/20/12 07:50:27.829]:Active Directory ST: Action: do-if().
  1946. [03/20/12 07:50:27.829]:Active Directory ST: Evaluating conditions.
  1947. [03/20/12 07:50:27.829]:Active Directory ST: (if-local-variable 'current-node' equal "association") = TRUE.
  1948. [03/20/12 07:50:27.829]:Active Directory ST: Expanded variable reference '$current-node$' to 'association'.
  1949. [03/20/12 07:50:27.829]:Active Directory ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  1950. [03/20/12 07:50:27.829]:Active Directory ST: (if-association available) = FALSE.
  1951. [03/20/12 07:50:27.829]:Active Directory ST: Performing else actions.
  1952. [03/20/12 07:50:27.830]:Active Directory ST: Action: do-if().
  1953. [03/20/12 07:50:27.830]:Active Directory ST: Evaluating conditions.
  1954. [03/20/12 07:50:27.830]:Active Directory ST: Expanded variable reference '$current-node$' to 'association'.
  1955. [03/20/12 07:50:27.830]:Active Directory ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  1956. [03/20/12 07:50:27.830]:Active Directory ST: Expanded variable reference '$current-node$' to 'association'.
  1957. [03/20/12 07:50:27.830]:Active Directory ST: (if-op-attr '$current-node$' available) = FALSE.
  1958. [03/20/12 07:50:27.830]:Active Directory ST: Performing else actions.
  1959. [03/20/12 07:50:27.830]:Active Directory ST: Evaluating selection criteria for rule 'AccountTracking - Initialize status properties on published events'.
  1960. [03/20/12 07:50:27.831]:Active Directory ST: (if-operation match "add|modify|delete|rename|move") = FALSE.
  1961. [03/20/12 07:50:27.831]:Active Directory ST: Rule rejected.
  1962. [03/20/12 07:50:27.831]:Active Directory ST: Policy returned:
  1963. [03/20/12 07:50:27.831]:Active Directory ST:
  1964. <nds dtdversion="1.1" ndsversion="8.7">
  1965. <source>
  1966. <product asn1id="" build="20090313_120000" instance="\EDIR2ADLAB\fdny\AD-TEST\Active Directory" version="3.5.5">AD</product>
  1967. <contact>Novell, Inc.</contact>
  1968. </source>
  1969. <output>
  1970. <status event-id="0" level="success"/>
  1971. </output>
  1972. </nds>
  1973. [03/20/12 07:50:27.831]:Active Directory ST: Applying policy: %+C%14Clib-AccountTracking-WriteAccounts-itp-V1%-C.
  1974. [03/20/12 07:50:27.832]:Active Directory ST: Applying to status #1.
  1975. [03/20/12 07:50:27.832]:Active Directory ST: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled'.
  1976. [03/20/12 07:50:27.832]:Active Directory ST: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  1977. [03/20/12 07:50:27.832]:Active Directory ST: Rule rejected.
  1978. [03/20/12 07:50:27.832]:Active Directory ST: Evaluating selection criteria for rule 'AccountTracking - query DirXML-Accounts Attribute'.
  1979. [03/20/12 07:50:27.832]:Active Directory ST: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  1980. [03/20/12 07:50:27.832]:Active Directory ST: Rule rejected.
  1981. [03/20/12 07:50:27.832]:Active Directory ST: Evaluating selection criteria for rule 'AccountTracking - remove Dirxml-Account values on delete operation'.
  1982. [03/20/12 07:50:27.832]:Active Directory ST: (if-operation match "delete|remove-association") = FALSE.
  1983. [03/20/12 07:50:27.833]:Active Directory ST: (if-operation equal "status") = TRUE.
  1984. [03/20/12 07:50:27.833]:Active Directory ST: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  1985. [03/20/12 07:50:27.833]:Active Directory ST: Rule rejected.
  1986. [03/20/12 07:50:27.833]:Active Directory ST: Evaluating selection criteria for rule 'AccountTracking - update DirXMLAccounts attribute'.
  1987. [03/20/12 07:50:27.833]:Active Directory ST: (if-op-property 'AccountTracking-Operation' not-available) = TRUE.
  1988. [03/20/12 07:50:27.833]:Active Directory ST: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  1989. [03/20/12 07:50:27.833]:Active Directory ST: (if-operation equal "status") = TRUE.
  1990. [03/20/12 07:50:27.833]:Active Directory ST: (if-xpath true "./@level='success'") = TRUE.
  1991. [03/20/12 07:50:27.834]:Active Directory ST: (if-op-property 'AccountTracking-Operation' available) = FALSE.
  1992. [03/20/12 07:50:27.834]:Active Directory ST: Rule rejected.
  1993. [03/20/12 07:50:27.834]:Active Directory ST: Policy returned:
  1994. [03/20/12 07:50:27.834]:Active Directory ST:
  1995. <nds dtdversion="1.1" ndsversion="8.7">
  1996. <source>
  1997. <product asn1id="" build="20090313_120000" instance="\EDIR2ADLAB\fdny\AD-TEST\Active Directory" version="3.5.5">AD</product>
  1998. <contact>Novell, Inc.</contact>
  1999. </source>
  2000. <output>
  2001. <status event-id="0" level="success"/>
  2002. </output>
  2003. </nds>
  2004. [03/20/12 07:50:27.834]:Active Directory ST: Applying policy: %+C%14Citp%-C.
  2005. [03/20/12 07:50:27.834]:Active Directory ST: Applying to status #1.
  2006. [03/20/12 07:50:27.834]:Active Directory ST: Evaluating selection criteria for rule 'streetAddress: Convert CR-LF to LF'.
  2007. [03/20/12 07:50:27.835]:Active Directory ST: Rule selected.
  2008. [03/20/12 07:50:27.835]:Active Directory ST: Applying rule 'streetAddress: Convert CR-LF to LF'.
  2009. [03/20/12 07:50:27.835]:Active Directory ST: Action: do-reformat-op-attr("streetAddress",token-replace-all("\r\n","\r",token-local-variable("current-value"))).
  2010. [03/20/12 07:50:27.835]:Active Directory ST: Evaluating selection criteria for rule 'logonHours: Convert to Login Allowed Time Map form'.
  2011. [03/20/12 07:50:27.835]:Active Directory ST: Rule selected.
  2012. [03/20/12 07:50:27.835]:Active Directory ST: Applying rule 'logonHours: Convert to Login Allowed Time Map form'.
  2013. [03/20/12 07:50:27.835]:Active Directory ST: Action: do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2eDir($current-value)")).
  2014. [03/20/12 07:50:27.835]:Active Directory ST: Evaluating selection criteria for rule 'accountExpires: Convert to Identity Vault time format'.
  2015. [03/20/12 07:50:27.836]:Active Directory ST: Rule selected.
  2016. [03/20/12 07:50:27.836]:Active Directory ST: Applying rule 'accountExpires: Convert to Identity Vault time format'.
  2017. [03/20/12 07:50:27.836]:Active Directory ST: Action: do-reformat-op-attr("accountExpires",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
  2018. [03/20/12 07:50:27.836]:Active Directory ST: Evaluating selection criteria for rule 'lockoutTime: Convert to Identity Vault time format'.
  2019. [03/20/12 07:50:27.836]:Active Directory ST: Rule selected.
  2020. [03/20/12 07:50:27.836]:Active Directory ST: Applying rule 'lockoutTime: Convert to Identity Vault time format'.
  2021. [03/20/12 07:50:27.836]:Active Directory ST: Action: do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
  2022. [03/20/12 07:50:27.836]:Active Directory ST: Policy returned:
  2023. [03/20/12 07:50:27.837]:Active Directory ST:
  2024. <nds dtdversion="1.1" ndsversion="8.7">
  2025. <source>
  2026. <product asn1id="" build="20090313_120000" instance="\EDIR2ADLAB\fdny\AD-TEST\Active Directory" version="3.5.5">AD</product>
  2027. <contact>Novell, Inc.</contact>
  2028. </source>
  2029. <output>
  2030. <status event-id="0" level="success"/>
  2031. </output>
  2032. </nds>
  2033. [03/20/12 07:50:27.837]:Active Directory ST: Applying policy: %+C%14Citp-EntitlementsImpl%-C.
  2034. [03/20/12 07:50:27.837]:Active Directory ST: Applying to status #1.
  2035. [03/20/12 07:50:27.837]:Active Directory ST: Evaluating selection criteria for rule 'Check target of add-association for group membership entitlements'.
  2036. [03/20/12 07:50:27.837]:Active Directory ST: (if-global-variable 'drv.entitlement.Group' equal "true") = FALSE.
  2037. [03/20/12 07:50:27.837]:Active Directory ST: Rule rejected.
  2038. [03/20/12 07:50:27.837]:Active Directory ST: Evaluating selection criteria for rule 'Check target of add-association for Exchange mailbox entitlements'.
  2039. [03/20/12 07:50:27.838]:Active Directory ST: (if-global-variable 'drv.exchMailboxMethod' equal "entitlement") = FALSE.
  2040. [03/20/12 07:50:27.838]:Active Directory ST: Rule rejected.
  2041. [03/20/12 07:50:27.838]:Active Directory ST: Policy returned:
  2042. [03/20/12 07:50:27.838]:Active Directory ST:
  2043. <nds dtdversion="1.1" ndsversion="8.7">
  2044. <source>
  2045. <product asn1id="" build="20090313_120000" instance="\EDIR2ADLAB\fdny\AD-TEST\Active Directory" version="3.5.5">AD</product>
  2046. <contact>Novell, Inc.</contact>
  2047. </source>
  2048. <output>
  2049. <status event-id="0" level="success"/>
  2050. </output>
  2051. </nds>
  2052. [03/20/12 07:50:27.838]:Active Directory ST: Applying policy: %+C%14CPassword(Pub)-Sub Email Notifications%-C.
  2053. [03/20/12 07:50:27.838]:Active Directory ST: Applying to status #1.
  2054. [03/20/12 07:50:27.838]:Active Directory ST: Evaluating selection criteria for rule 'Send e-mail on a failure when subscribing to passwords'.
  2055. [03/20/12 07:50:27.839]:Active Directory ST: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  2056. [03/20/12 07:50:27.839]:Active Directory ST: (if-operation equal "status") = TRUE.
  2057. [03/20/12 07:50:27.839]:Active Directory ST: (if-xpath true "self::status[@level != 'success'][text() != '']/operation-data/password-subscribe-status/association[text() != '']") = FALSE.
  2058. [03/20/12 07:50:27.839]:Active Directory ST: Rule rejected.
  2059. [03/20/12 07:50:27.839]:Active Directory ST: Evaluating selection criteria for rule 'Send e-mail on failure to reset connected system password using the Identity Manager data store password'.
  2060. [03/20/12 07:50:27.840]:Active Directory ST: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  2061. [03/20/12 07:50:27.840]:Active Directory ST: (if-operation equal "status") = TRUE.
  2062. [03/20/12 07:50:27.840]:Active Directory ST: (if-xpath true "self::status[@level != 'success']/operation-data/password-reset-status") = FALSE.
  2063. [03/20/12 07:50:27.840]:Active Directory ST: Rule rejected.
  2064. [03/20/12 07:50:27.840]:Active Directory ST: Policy returned:
  2065. [03/20/12 07:50:27.840]:Active Directory ST:
  2066. <nds dtdversion="1.1" ndsversion="8.7">
  2067. <source>
  2068. <product asn1id="" build="20090313_120000" instance="\EDIR2ADLAB\fdny\AD-TEST\Active Directory" version="3.5.5">AD</product>
  2069. <contact>Novell, Inc.</contact>
  2070. </source>
  2071. <output>
  2072. <status event-id="0" level="success"/>
  2073. </output>
  2074. </nds>
  2075. [03/20/12 07:50:27.841]:Active Directory ST: Applying policy: %+C%14Clib-Audit-SendEntitlementsEvents-itp-V1%-C.
  2076. [03/20/12 07:50:27.841]:Active Directory ST: Applying to status #1.
  2077. [03/20/12 07:50:27.841]:Active Directory ST: Evaluating selection criteria for rule '00031200 - Account Create By Entitlement Grant'.
  2078. [03/20/12 07:50:27.841]:Active Directory ST: (if-operation equal "status") = TRUE.
  2079. [03/20/12 07:50:27.841]:Active Directory ST: (if-op-property 'accountAction' equal "accountCreateByEntitlementGrant") = FALSE.
  2080. [03/20/12 07:50:27.841]:Active Directory ST: Rule rejected.
  2081. [03/20/12 07:50:27.841]:Active Directory ST: Evaluating selection criteria for rule '00031201 - Account Delete By Entitlement Revoke'.
  2082. [03/20/12 07:50:27.841]:Active Directory ST: (if-operation equal "status") = TRUE.
  2083. [03/20/12 07:50:27.841]:Active Directory ST: (if-xpath true "./operation-data/entitlement-impl/@state = '0'") = FALSE.
  2084. [03/20/12 07:50:27.842]:Active Directory ST: (if-operation equal "status") = TRUE.
  2085. [03/20/12 07:50:27.842]:Active Directory ST: (if-op-property 'accountAction' equal "accountDeleteByEntitlementRevoke") = FALSE.
  2086. [03/20/12 07:50:27.842]:Active Directory ST: Rule rejected.
  2087. [03/20/12 07:50:27.842]:Active Directory ST: Evaluating selection criteria for rule '00031202 - Account Disable By Entitlement Revoke'.
  2088. [03/20/12 07:50:27.842]:Active Directory ST: (if-operation equal "status") = TRUE.
  2089. [03/20/12 07:50:27.842]:Active Directory ST: (if-op-property 'accountAction' equal "accountDisableByEntitlementRevoke") = FALSE.
  2090. [03/20/12 07:50:27.842]:Active Directory ST: Rule rejected.
  2091. [03/20/12 07:50:27.842]:Active Directory ST: Evaluating selection criteria for rule '00031203 - Account Enable By Entitlement Grant'.
  2092. [03/20/12 07:50:27.843]:Active Directory ST: (if-operation equal "status") = TRUE.
  2093. [03/20/12 07:50:27.843]:Active Directory ST: (if-op-property 'accountAction' equal "accountEnableByEntitlementGrant") = FALSE.
  2094. [03/20/12 07:50:27.843]:Active Directory ST: Rule rejected.
  2095. [03/20/12 07:50:27.843]:Active Directory ST: Evaluating selection criteria for rule 'Generate Audit Event'.
  2096. [03/20/12 07:50:27.843]:Active Directory ST: (if-operation equal "status") = TRUE.
  2097. [03/20/12 07:50:27.843]:Active Directory ST: (if-local-variable 'auditEventID' available) = FALSE.
  2098. [03/20/12 07:50:27.843]:Active Directory ST: Rule rejected.
  2099. [03/20/12 07:50:27.843]:Active Directory ST: Policy returned:
  2100. [03/20/12 07:50:27.844]:Active Directory ST:
  2101. <nds dtdversion="1.1" ndsversion="8.7">
  2102. <source>
  2103. <product asn1id="" build="20090313_120000" instance="\EDIR2ADLAB\fdny\AD-TEST\Active Directory" version="3.5.5">AD</product>
  2104. <contact>Novell, Inc.</contact>
  2105. </source>
  2106. <output>
  2107. <status event-id="0" level="success"/>
  2108. </output>
  2109. </nds>
  2110. [03/20/12 07:50:27.844]:Active Directory ST: Applying schema mapping policies to input.
  2111. [03/20/12 07:50:27.844]:Active Directory ST: Applying policy: %+C%14Csmp%-C.
  2112. [03/20/12 07:50:27.844]:Active Directory ST: Resolving association references.
  2113. [03/20/12 07:50:27.845]:Active Directory :Remote Interface Driver: Waiting for receive...
  2114. [03/20/12 07:50:27.845]:Active Directory ST: Query from policy result
  2115. [03/20/12 07:50:27.845]:Active Directory ST:
  2116. <nds dtdversion="1.1" ndsversion="8.7">
  2117. <source>
  2118. <product asn1id="" build="20090313_120000" instance="\EDIR2ADLAB\fdny\AD-TEST\Active Directory" version="3.5.5">AD</product>
  2119. <contact>Novell, Inc.</contact>
  2120. </source>
  2121. <output>
  2122. <status event-id="0" level="success"/>
  2123. </output>
  2124. </nds>
  2125. [03/20/12 07:50:27.845]:Active Directory ST: No matches found.
  2126. [03/20/12 07:50:27.845]:Active Directory ST: Evaluating selection criteria for rule 'match users based on full name'.
  2127. [03/20/12 07:50:27.845]:Active Directory ST: (if-class-name equal "User") = TRUE.
  2128. [03/20/12 07:50:27.846]:Active Directory ST: (if-global-variable 'FullNameMap' equal "true") = TRUE.
  2129. [03/20/12 07:50:27.846]:Active Directory ST: (if-op-attr 'Full Name' available) = TRUE.
  2130. [03/20/12 07:50:27.846]:Active Directory ST: Rule selected.
  2131. [03/20/12 07:50:27.846]:Active Directory ST: Applying rule 'match users based on full name'.
  2132. [03/20/12 07:50:27.846]:Active Directory ST: Action: do-if().
  2133. [03/20/12 07:50:27.846]:Active Directory ST: Evaluating conditions.
  2134. [03/20/12 07:50:27.846]:Active Directory ST: (if-global-variable 'drv.subPlacementType' equal "flat") = FALSE.
  2135. [03/20/12 07:50:27.846]:Active Directory ST: Performing else actions.
  2136. [03/20/12 07:50:27.846]:Active Directory ST: Action: do-find-matching-object(scope="entry",arg-dn("CN="+token-escape-for-dest-dn(token-attr("Full Name"))+","+token-replace-first("(.+)","$1,",token-parse-dn(length="-2",src-dn-format="dest-dn",token-op-property("unmatched-src-dn")))+token-global-variable("drv.user.container"))).
  2137. [03/20/12 07:50:27.847]:Active Directory ST: arg-dn("CN="+token-escape-for-dest-dn(token-attr("Full Name"))+","+token-replace-first("(.+)","$1,",token-parse-dn(length="-2",src-dn-format="dest-dn",token-op-property("unmatched-src-dn")))+token-global-variable("drv.user.container"))
  2138. [03/20/12 07:50:27.847]:Active Directory ST: token-text("CN=")
  2139. [03/20/12 07:50:27.847]:Active Directory ST: token-escape-for-dest-dn(token-attr("Full Name"))
  2140. [03/20/12 07:50:27.847]:Active Directory ST: token-escape-for-dest-dn(token-attr("Full Name"))
  2141. [03/20/12 07:50:27.847]:Active Directory ST: token-attr("Full Name")
  2142. [03/20/12 07:50:27.847]:Active Directory ST: Token Value: "Philip Goldwasser".
  2143. [03/20/12 07:50:27.847]:Active Directory ST: Arg Value: "Philip Goldwasser".
  2144. [03/20/12 07:50:27.848]:Active Directory ST: Token Value: "Philip Goldwasser".
  2145. [03/20/12 07:50:27.848]:Active Directory ST: token-text(",")
  2146. [03/20/12 07:50:27.848]:Active Directory ST: token-replace-first("(.+)","$1,",token-parse-dn(length="-2",src-dn-format="dest-dn",token-op-property("unmatched-src-dn")))
  2147. [03/20/12 07:50:27.848]:Active Directory ST: token-replace-first("(.+)","$1,",token-parse-dn(length="-2",src-dn-format="dest-dn",token-op-property("unmatched-src-dn")))
  2148. [03/20/12 07:50:27.848]:Active Directory ST: token-parse-dn(length="-2",src-dn-format="dest-dn",token-op-property("unmatched-src-dn"))
  2149. [03/20/12 07:50:27.848]:Active Directory ST: token-parse-dn(length="-2",src-dn-format="dest-dn",token-op-property("unmatched-src-dn"))
  2150. [03/20/12 07:50:27.848]:Active Directory ST: token-op-property("unmatched-src-dn")
  2151. [03/20/12 07:50:27.848]:Active Directory ST: Token Value: "CN=goldwap,OU=LAN,OU=BTDS,OU=Support".
  2152. [03/20/12 07:50:27.849]:Active Directory ST: Arg Value: "CN=goldwap,OU=LAN,OU=BTDS,OU=Support".
  2153. [03/20/12 07:50:27.849]:Active Directory ST: Token Value: "OU=LAN,OU=BTDS,OU=Support".
  2154. [03/20/12 07:50:27.849]:Active Directory ST: Arg Value: "OU=LAN,OU=BTDS,OU=Support".
  2155. [03/20/12 07:50:27.849]:Active Directory ST: Token Value: "OU=LAN,OU=BTDS,OU=Support,".
  2156. [03/20/12 07:50:27.849]:Active Directory ST: token-global-variable("drv.user.container")
  2157. [03/20/12 07:50:27.849]:Active Directory ST: Token Value: "OU=FDNY,dc=edir2adlab,dc=local".
  2158. [03/20/12 07:50:27.849]:Active Directory ST: Arg Value: "CN=Philip Goldwasser,OU=LAN,OU=BTDS,OU=Support,OU=FDNY,dc=edir2adlab,dc=local".
  2159. [03/20/12 07:50:27.849]:Active Directory ST: Query from policy
  2160. [03/20/12 07:50:27.850]:Active Directory ST:
  2161. <nds dtdversion="3.5" ndsversion="8.x">
  2162. <source>
  2163. <product version="3.6.10.4747">DirXML</product>
  2164. <contact>Novell, Inc.</contact>
  2165. </source>
  2166. <input>
  2167. <query class-name="User" dest-dn="CN=Philip Goldwasser,OU=LAN,OU=BTDS,OU=Support,OU=FDNY,dc=edir2adlab,dc=local" scope="entry">
  2168. <search-class class-name="User"/>
  2169. <read-attr/>
  2170. </query>
  2171. </input>
  2172. </nds>
  2173. [03/20/12 07:50:27.850]:Active Directory ST: Fixing up association references.
  2174. [03/20/12 07:50:27.850]:Active Directory ST: Applying schema mapping policies to output.
  2175. [03/20/12 07:50:27.850]:Active Directory ST: Applying policy: %+C%14Csmp%-C.
  2176. [03/20/12 07:50:27.850]:Active Directory ST: Mapping class-name 'User' to 'user'.
  2177. [03/20/12 07:50:27.850]:Active Directory ST: Mapping class-name 'User' to 'user'.
  2178. [03/20/12 07:50:27.851]:Active Directory ST: Applying output transformation policies.
  2179. [03/20/12 07:50:27.851]:Active Directory ST: Applying policy: %+C%14Cotp%-C.
  2180. [03/20/12 07:50:27.851]:Active Directory ST: Applying to query #1.
  2181. [03/20/12 07:50:27.851]:Active Directory ST: Evaluating selection criteria for rule 'Street Address: Convert LF to CR-LF'.
  2182. [03/20/12 07:50:27.851]:Active Directory ST: Rule selected.
  2183. [03/20/12 07:50:27.851]:Active Directory ST: Applying rule 'Street Address: Convert LF to CR-LF'.
  2184. [03/20/12 07:50:27.851]:Active Directory ST: Action: do-reformat-op-attr("streetAddress",token-replace-all("[^\r]\n","\r\n",token-local-variable("current-value"))).
  2185. [03/20/12 07:50:27.852]:Active Directory ST: Evaluating selection criteria for rule 'logonHours: Convert to Active Directory form'.
  2186. [03/20/12 07:50:27.852]:Active Directory ST: Rule selected.
  2187. [03/20/12 07:50:27.852]:Active Directory ST: Applying rule 'logonHours: Convert to Active Directory form'.
  2188. [03/20/12 07:50:27.852]:Active Directory ST: Action: do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2ADLenient($current-value)")).
  2189. [03/20/12 07:50:27.852]:Active Directory ST: Evaluating selection criteria for rule 'accountExpires: Convert to Active Directory form'.
  2190. [03/20/12 07:50:27.852]:Active Directory ST: (if-op-attr 'accountExpires' changing) = FALSE.
  2191. [03/20/12 07:50:27.852]:Active Directory ST: Rule rejected.
  2192. [03/20/12 07:50:27.853]:Active Directory ST: Evaluating selection criteria for rule 'lockoutTime: Convert to Active Directory form'.
  2193. [03/20/12 07:50:27.853]:Active Directory ST: Rule selected.
  2194. [03/20/12 07:50:27.853]:Active Directory ST: Applying rule 'lockoutTime: Convert to Active Directory form'.
  2195. [03/20/12 07:50:27.853]:Active Directory ST: Action: do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateEpoch2FileTime($current-value)")).
  2196. [03/20/12 07:50:27.853]:Active Directory ST: Evaluating selection criteria for rule 'Add: User - convert multi-valued Telephone to single value'.
  2197. [03/20/12 07:50:27.853]:Active Directory ST: (if-operation equal "add") = FALSE.
  2198. [03/20/12 07:50:27.853]:Active Directory ST: Rule rejected.
  2199. [03/20/12 07:50:27.853]:Active Directory ST: Evaluating selection criteria for rule 'update Active Directory logon name'.
  2200. [03/20/12 07:50:27.854]:Active Directory ST: (if-xpath true "self::status[@level = 'success']/operation-data/windows-2000-logon-name") = FALSE.
  2201. [03/20/12 07:50:27.854]:Active Directory ST: Rule rejected.
  2202. [03/20/12 07:50:27.854]:Active Directory ST: Evaluating selection criteria for rule 'Exchange: Remove HomeMDB when disabled'.
  2203. [03/20/12 07:50:27.854]:Active Directory ST: (if-global-variable 'drv.exchMailboxMethod' equal "disabled") = TRUE.
  2204. [03/20/12 07:50:27.854]:Active Directory ST: Rule selected.
  2205. [03/20/12 07:50:27.854]:Active Directory ST: Applying rule 'Exchange: Remove HomeMDB when disabled'.
  2206. [03/20/12 07:50:27.854]:Active Directory ST: Action: do-strip-op-attr("homeMDB").
  2207. [03/20/12 07:50:27.854]:Active Directory ST: Policy returned:
  2208. [03/20/12 07:50:27.855]:Active Directory ST:
  2209. <nds dtdversion="3.5" ndsversion="8.x">
  2210. <source>
  2211. <product version="3.6.10.4747">DirXML</product>
  2212. <contact>Novell, Inc.</contact>
  2213. </source>
  2214. <input>
  2215. <query class-name="user" dest-dn="CN=Philip Goldwasser,OU=LAN,OU=BTDS,OU=Support,OU=FDNY,dc=edir2adlab,dc=local" event-id="0" scope="entry">
  2216. <search-class class-name="user"/>
  2217. <read-attr/>
  2218. </query>
  2219. </input>
  2220. </nds>
  2221. [03/20/12 07:50:27.855]:Active Directory ST: Applying policy: %+C%14CPassword(Sub)-Pub Email Notifications%-C.
  2222. [03/20/12 07:50:27.855]:Active Directory ST: Applying to query #1.
  2223. [03/20/12 07:50:27.855]:Active Directory ST: Evaluating selection criteria for rule 'Send e-mail for a failed publish password operation'.
  2224. [03/20/12 07:50:27.855]:Active Directory ST: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  2225. [03/20/12 07:50:27.856]:Active Directory ST: (if-operation equal "status") = FALSE.
  2226. [03/20/12 07:50:27.856]:Active Directory ST: Rule rejected.
  2227. [03/20/12 07:50:27.856]:Active Directory ST: Policy returned:
  2228. [03/20/12 07:50:27.856]:Active Directory ST:
  2229. <nds dtdversion="3.5" ndsversion="8.x">
  2230. <source>
  2231. <product version="3.6.10.4747">DirXML</product>
  2232. <contact>Novell, Inc.</contact>
  2233. </source>
  2234. <input>
  2235. <query class-name="user" dest-dn="CN=Philip Goldwasser,OU=LAN,OU=BTDS,OU=Support,OU=FDNY,dc=edir2adlab,dc=local" event-id="0" scope="entry">
  2236. <search-class class-name="user"/>
  2237. <read-attr/>
  2238. </query>
  2239. </input>
  2240. </nds>
  2241. [03/20/12 07:50:27.856]:Active Directory ST: Applying policy: %+C%14Clib-CredProv-ConvertPayload-otp-V1%-C.
  2242. [03/20/12 07:50:27.856]:Active Directory ST: Applying to query #1.
  2243. [03/20/12 07:50:27.857]:Active Directory ST: Evaluating selection criteria for rule 'Is credential provisioning enabled? Are there any custom payloads?'.
  2244. [03/20/12 07:50:27.857]:Active Directory ST: Rule selected.
  2245. [03/20/12 07:50:27.857]:Active Directory ST: Applying rule 'Is credential provisioning enabled? Are there any custom payloads?'.
  2246. [03/20/12 07:50:27.857]:Active Directory ST: Action: do-if().
  2247. [03/20/12 07:50:27.857]:Active Directory ST: Evaluating conditions.
  2248. [03/20/12 07:50:27.857]:Active Directory ST: (if-global-variable 'credprov.enable' not-equal "true") = TRUE.
  2249. [03/20/12 07:50:27.857]:Active Directory ST: Performing if actions.
  2250. [03/20/12 07:50:27.857]:Active Directory ST: Action: do-break().
  2251. [03/20/12 07:50:27.857]:Active Directory ST: Policy returned:
  2252. [03/20/12 07:50:27.858]:Active Directory ST:
  2253. <nds dtdversion="3.5" ndsversion="8.x">
  2254. <source>
  2255. <product version="3.6.10.4747">DirXML</product>
  2256. <contact>Novell, Inc.</contact>
  2257. </source>
  2258. <input>
  2259. <query class-name="user" dest-dn="CN=Philip Goldwasser,OU=LAN,OU=BTDS,OU=Support,OU=FDNY,dc=edir2adlab,dc=local" event-id="0" scope="entry">
  2260. <search-class class-name="user"/>
  2261. <read-attr/>
  2262. </query>
  2263. </input>
  2264. </nds>
  2265. [03/20/12 07:50:27.858]:Active Directory ST: Applying policy: %+C%14Clib-AccountTracking-Subscribe-otp-V1%-C.
  2266. [03/20/12 07:50:27.858]:Active Directory ST: Applying to query #1.
  2267. [03/20/12 07:50:27.858]:Active Directory ST: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled or wrong object class'.
  2268. [03/20/12 07:50:27.858]:Active Directory ST: Rule selected.
  2269. [03/20/12 07:50:27.858]:Active Directory ST: Applying rule 'AccountTracking - disregard if disabled or wrong object class'.
  2270. [03/20/12 07:50:27.859]:Active Directory ST: Action: do-if().
  2271. [03/20/12 07:50:27.859]:Active Directory ST: Evaluating conditions.
  2272. [03/20/12 07:50:27.859]:Active Directory ST: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  2273. [03/20/12 07:50:27.859]:Active Directory ST: Performing else actions.
  2274. [03/20/12 07:50:27.859]:Active Directory ST: Action: do-for-each(arg-node-set(token-global-variable("drv.acctTrk.objectClass"))).
  2275. [03/20/12 07:50:27.859]:Active Directory ST: arg-node-set(token-global-variable("drv.acctTrk.objectClass"))
  2276. [03/20/12 07:50:27.859]:Active Directory ST: token-global-variable("drv.acctTrk.objectClass")
  2277. [03/20/12 07:50:27.860]:Active Directory ST: Token Value: {"user"}.
  2278. [03/20/12 07:50:27.860]:Active Directory ST: Arg Value: {"user"}.
  2279. [03/20/12 07:50:27.860]:Active Directory ST: Performing actions for local-variable(current-node) = "user".
  2280. [03/20/12 07:50:27.860]:Active Directory ST: Action: do-if().
  2281. [03/20/12 07:50:27.860]:Active Directory ST: Evaluating conditions.
  2282. [03/20/12 07:50:27.860]:Active Directory ST: Expanded variable reference '$current-node$' to 'user'.
  2283. [03/20/12 07:50:27.860]:Active Directory ST: (if-class-name equal "$current-node$") = TRUE.
  2284. [03/20/12 07:50:27.860]:Active Directory ST: Performing if actions.
  2285. [03/20/12 07:50:27.860]:Active Directory ST: Action: do-set-local-variable("pass",scope="policy","true").
  2286. [03/20/12 07:50:27.861]:Active Directory ST: arg-string("true")
  2287. [03/20/12 07:50:27.861]:Active Directory ST: token-text("true")
  2288. [03/20/12 07:50:27.861]:Active Directory ST: Arg Value: "true".
  2289. [03/20/12 07:50:27.861]:Active Directory ST: Action: do-if().
  2290. [03/20/12 07:50:27.861]:Active Directory ST: Evaluating conditions.
  2291. [03/20/12 07:50:27.861]:Active Directory ST: (if-local-variable 'pass' not-available) = FALSE.
  2292. [03/20/12 07:50:27.861]:Active Directory ST: Performing else actions.
  2293. [03/20/12 07:50:27.861]:Active Directory ST: Evaluating selection criteria for rule 'AccountTracking - include desired attribute values in operation-data'.
  2294. [03/20/12 07:50:27.861]:Active Directory ST: (if-operation match "add|modify|delete|rename|move") = FALSE.
  2295. [03/20/12 07:50:27.862]:Active Directory ST: Rule rejected.
  2296. [03/20/12 07:50:27.862]:Active Directory ST: Evaluating selection criteria for rule 'Account-Tracking-StripAccountTrackingAccountStatus Attribute'.
  2297. [03/20/12 07:50:27.862]:Active Directory ST: (if-op-attr 'AccountTrackingAccountStatus' available) = FALSE.
  2298. [03/20/12 07:50:27.862]:Active Directory ST: Rule rejected.
  2299. [03/20/12 07:50:27.862]:Active Directory ST: Policy returned:
  2300. [03/20/12 07:50:27.862]:Active Directory ST:
  2301. <nds dtdversion="3.5" ndsversion="8.x">
  2302. <source>
  2303. <product version="3.6.10.4747">DirXML</product>
  2304. <contact>Novell, Inc.</contact>
  2305. </source>
  2306. <input>
  2307. <query class-name="user" dest-dn="CN=Philip Goldwasser,OU=LAN,OU=BTDS,OU=Support,OU=FDNY,dc=edir2adlab,dc=local" event-id="0" scope="entry">
  2308. <search-class class-name="user"/>
  2309. <read-attr/>
  2310. </query>
  2311. </input>
  2312. </nds>
  2313. [03/20/12 07:50:27.863]:Active Directory ST: Submitting document to subscriber shim:
  2314. [03/20/12 07:50:27.863]:Active Directory ST:
  2315. <nds dtdversion="3.5" ndsversion="8.x">
  2316. <source>
  2317. <product version="3.6.10.4747">DirXML</product>
  2318. <contact>Novell, Inc.</contact>
  2319. </source>
  2320. <input>
  2321. <query class-name="user" dest-dn="CN=Philip Goldwasser,OU=LAN,OU=BTDS,OU=Support,OU=FDNY,dc=edir2adlab,dc=local" event-id="0" scope="entry">
  2322. <search-class class-name="user"/>
  2323. <read-attr/>
  2324. </query>
  2325. </input>
  2326. </nds>
  2327. [03/20/12 07:50:27.863]:Active Directory ST: Remote Interface Driver: Sending...
  2328. [03/20/12 07:50:27.863]:Active Directory ST:
  2329. <nds dtdversion="3.5" ndsversion="8.x">
  2330. <source>
  2331. <product version="3.6.10.4747">DirXML</product>
  2332. <contact>Novell, Inc.</contact>
  2333. </source>
  2334. <input>
  2335. <query class-name="user" dest-dn="CN=Philip Goldwasser,OU=LAN,OU=BTDS,OU=Support,OU=FDNY,dc=edir2adlab,dc=local" event-id="0" scope="entry">
  2336. <search-class class-name="user"/>
  2337. <read-attr/>
  2338. </query>
  2339. </input>
  2340. </nds>
  2341. [03/20/12 07:50:27.864]:Active Directory ST: Remote Interface Driver: Document sent.
  2342. [03/20/12 07:50:27.894]:Active Directory :Remote Interface Driver: Received.
  2343. [03/20/12 07:50:27.894]:Active Directory :
  2344. <nds dtdversion="1.1" ndsversion="8.7">
  2345. <source>
  2346. <product asn1id="" build="20090313_120000" instance="\EDIR2ADLAB\fdny\AD-TEST\Active Directory" version="3.5.5">AD</product>
  2347. <contact>Novell, Inc.</contact>
  2348. </source>
  2349. <output>
  2350. <status event-id="0" level="success"/>
  2351. </output>
  2352. </nds>
  2353. [03/20/12 07:50:27.895]:Active Directory :Remote Interface Driver: Received document for subscriber channel
  2354. [03/20/12 07:50:27.895]:Active Directory ST: SubscriptionShim.execute() returned:
  2355. [03/20/12 07:50:27.895]:Active Directory ST:
  2356. <nds dtdversion="1.1" ndsversion="8.7">
  2357. <source>
  2358. <product asn1id="" build="20090313_120000" instance="\EDIR2ADLAB\fdny\AD-TEST\Active Directory" version="3.5.5">AD</product>
  2359. <contact>Novell, Inc.</contact>
  2360. </source>
  2361. <output>
  2362. <status event-id="0" level="success"/>
  2363. </output>
  2364. </nds>
  2365. [03/20/12 07:50:27.895]:Active Directory ST: Applying input transformation policies.
  2366. [03/20/12 07:50:27.896]:Active Directory ST: Applying policy: %+C%14Clib-AccountTracking-Publish-itp-V1%-C.
  2367. [03/20/12 07:50:27.896]:Active Directory ST: Applying to status #1.
  2368. [03/20/12 07:50:27.896]:Active Directory ST: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled or wrong object class'.
  2369. [03/20/12 07:50:27.896]:Active Directory ST: Rule selected.
  2370. [03/20/12 07:50:27.896]:Active Directory ST: Applying rule 'AccountTracking - disregard if disabled or wrong object class'.
  2371. [03/20/12 07:50:27.896]:Active Directory ST: Action: do-if().
  2372. [03/20/12 07:50:27.896]:Active Directory ST: Evaluating conditions.
  2373. [03/20/12 07:50:27.896]:Active Directory ST: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  2374. [03/20/12 07:50:27.896]:Active Directory ST: Performing else actions.
  2375. [03/20/12 07:50:27.897]:Active Directory ST: Action: do-if().
  2376. [03/20/12 07:50:27.897]:Active Directory ST: Evaluating conditions.
  2377. [03/20/12 07:50:27.897]:Active Directory ST: (if-class-name available) = FALSE.
  2378. [03/20/12 07:50:27.897]:Active Directory ST: Performing else actions.
  2379. [03/20/12 07:50:27.897]:Active Directory ST: Evaluating selection criteria for rule 'AccountTracking - on add-association sync the operation-properties to status operations'.
  2380. [03/20/12 07:50:27.897]:Active Directory ST: (if-operation equal "add-association") = FALSE.
  2381. [03/20/12 07:50:27.897]:Active Directory ST: Rule rejected.
  2382. [03/20/12 07:50:27.897]:Active Directory ST: Evaluating selection criteria for rule 'AccountTracking - Query for destination DN using Association'.
  2383. [03/20/12 07:50:27.898]:Active Directory ST: (if-operation match "modify|delete|move|rename") = FALSE.
  2384. [03/20/12 07:50:27.898]:Active Directory ST: Rule rejected.
  2385. [03/20/12 07:50:27.898]:Active Directory ST: Evaluating selection criteria for rule 'AccountTracking - add interested properties to current doc for future use.'.
  2386. [03/20/12 07:50:27.898]:Active Directory ST: (if-operation match "add|modify|delete|rename|move|status") = TRUE.
  2387. [03/20/12 07:50:27.898]:Active Directory ST: Rule selected.
  2388. [03/20/12 07:50:27.898]:Active Directory ST: Applying rule 'AccountTracking - add interested properties to current doc for future use.'.
  2389. [03/20/12 07:50:27.898]:Active Directory ST: Action: do-for-each(arg-node-set(token-global-variable("drv.acctTrk.identifiers"))).
  2390. [03/20/12 07:50:27.898]:Active Directory ST: arg-node-set(token-global-variable("drv.acctTrk.identifiers"))
  2391. [03/20/12 07:50:27.899]:Active Directory ST: token-global-variable("drv.acctTrk.identifiers")
  2392. [03/20/12 07:50:27.899]:Active Directory ST: Token Value: {"sAMAccountName","userPrincipalName","LDAPDN","association"}.
  2393. [03/20/12 07:50:27.899]:Active Directory ST: Arg Value: {"sAMAccountName","userPrincipalName","LDAPDN","association"}.
  2394. [03/20/12 07:50:27.899]:Active Directory ST: Performing actions for local-variable(current-node) = "sAMAccountName".
  2395. [03/20/12 07:50:27.899]:Active Directory ST: Action: do-if().
  2396. [03/20/12 07:50:27.900]:Active Directory ST: Evaluating conditions.
  2397. [03/20/12 07:50:27.900]:Active Directory ST: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  2398. [03/20/12 07:50:27.900]:Active Directory ST: Performing else actions.
  2399. [03/20/12 07:50:27.900]:Active Directory ST: Action: do-if().
  2400. [03/20/12 07:50:27.900]:Active Directory ST: Evaluating conditions.
  2401. [03/20/12 07:50:27.900]:Active Directory ST: (if-local-variable 'current-node' equal "association") = FALSE.
  2402. [03/20/12 07:50:27.900]:Active Directory ST: Performing else actions.
  2403. [03/20/12 07:50:27.900]:Active Directory ST: Action: do-if().
  2404. [03/20/12 07:50:27.900]:Active Directory ST: Evaluating conditions.
  2405. [03/20/12 07:50:27.901]:Active Directory ST: Expanded variable reference '$current-node$' to 'sAMAccountName'.
  2406. [03/20/12 07:50:27.901]:Active Directory ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  2407. [03/20/12 07:50:27.901]:Active Directory ST: Expanded variable reference '$current-node$' to 'sAMAccountName'.
  2408. [03/20/12 07:50:27.901]:Active Directory ST: (if-op-attr '$current-node$' available) = FALSE.
  2409. [03/20/12 07:50:27.901]:Active Directory ST: Performing else actions.
  2410. [03/20/12 07:50:27.901]:Active Directory ST: Performing actions for local-variable(current-node) = "userPrincipalName".
  2411. [03/20/12 07:50:27.901]:Active Directory ST: Action: do-if().
  2412. [03/20/12 07:50:27.901]:Active Directory ST: Evaluating conditions.
  2413. [03/20/12 07:50:27.902]:Active Directory ST: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  2414. [03/20/12 07:50:27.902]:Active Directory ST: Performing else actions.
  2415. [03/20/12 07:50:27.902]:Active Directory ST: Action: do-if().
  2416. [03/20/12 07:50:27.902]:Active Directory ST: Evaluating conditions.
  2417. [03/20/12 07:50:27.902]:Active Directory ST: (if-local-variable 'current-node' equal "association") = FALSE.
  2418. [03/20/12 07:50:27.902]:Active Directory ST: Performing else actions.
  2419. [03/20/12 07:50:27.902]:Active Directory ST: Action: do-if().
  2420. [03/20/12 07:50:27.902]:Active Directory ST: Evaluating conditions.
  2421. [03/20/12 07:50:27.902]:Active Directory ST: Expanded variable reference '$current-node$' to 'userPrincipalName'.
  2422. [03/20/12 07:50:27.903]:Active Directory ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  2423. [03/20/12 07:50:27.903]:Active Directory ST: Expanded variable reference '$current-node$' to 'userPrincipalName'.
  2424. [03/20/12 07:50:27.903]:Active Directory ST: (if-op-attr '$current-node$' available) = FALSE.
  2425. [03/20/12 07:50:27.903]:Active Directory ST: Performing else actions.
  2426. [03/20/12 07:50:27.903]:Active Directory ST: Performing actions for local-variable(current-node) = "LDAPDN".
  2427. [03/20/12 07:50:27.903]:Active Directory ST: Action: do-if().
  2428. [03/20/12 07:50:27.903]:Active Directory ST: Evaluating conditions.
  2429. [03/20/12 07:50:27.903]:Active Directory ST: (if-local-variable 'current-node' equal "LDAPDN") = TRUE.
  2430. [03/20/12 07:50:27.904]:Active Directory ST: Expanded variable reference '$current-node$' to 'LDAPDN'.
  2431. [03/20/12 07:50:27.904]:Active Directory ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  2432. [03/20/12 07:50:27.904]:Active Directory ST: (if-src-dn available) = FALSE.
  2433. [03/20/12 07:50:27.904]:Active Directory ST: Performing else actions.
  2434. [03/20/12 07:50:27.904]:Active Directory ST: Action: do-if().
  2435. [03/20/12 07:50:27.904]:Active Directory ST: Evaluating conditions.
  2436. [03/20/12 07:50:27.904]:Active Directory ST: (if-local-variable 'current-node' equal "association") = FALSE.
  2437. [03/20/12 07:50:27.904]:Active Directory ST: Performing else actions.
  2438. [03/20/12 07:50:27.905]:Active Directory ST: Action: do-if().
  2439. [03/20/12 07:50:27.905]:Active Directory ST: Evaluating conditions.
  2440. [03/20/12 07:50:27.905]:Active Directory ST: Expanded variable reference '$current-node$' to 'LDAPDN'.
  2441. [03/20/12 07:50:27.905]:Active Directory ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  2442. [03/20/12 07:50:27.905]:Active Directory ST: Expanded variable reference '$current-node$' to 'LDAPDN'.
  2443. [03/20/12 07:50:27.905]:Active Directory ST: (if-op-attr '$current-node$' available) = FALSE.
  2444. [03/20/12 07:50:27.905]:Active Directory ST: Performing else actions.
  2445. [03/20/12 07:50:27.905]:Active Directory ST: Performing actions for local-variable(current-node) = "association".
  2446. [03/20/12 07:50:27.906]:Active Directory ST: Action: do-if().
  2447. [03/20/12 07:50:27.906]:Active Directory ST: Evaluating conditions.
  2448. [03/20/12 07:50:27.906]:Active Directory ST: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  2449. [03/20/12 07:50:27.906]:Active Directory ST: Performing else actions.
  2450. [03/20/12 07:50:27.906]:Active Directory ST: Action: do-if().
  2451. [03/20/12 07:50:27.906]:Active Directory ST: Evaluating conditions.
  2452. [03/20/12 07:50:27.906]:Active Directory ST: (if-local-variable 'current-node' equal "association") = TRUE.
  2453. [03/20/12 07:50:27.906]:Active Directory ST: Expanded variable reference '$current-node$' to 'association'.
  2454. [03/20/12 07:50:27.906]:Active Directory ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  2455. [03/20/12 07:50:27.907]:Active Directory ST: (if-association available) = FALSE.
  2456. [03/20/12 07:50:27.907]:Active Directory ST: Performing else actions.
  2457. [03/20/12 07:50:27.907]:Active Directory ST: Action: do-if().
  2458. [03/20/12 07:50:27.907]:Active Directory ST: Evaluating conditions.
  2459. [03/20/12 07:50:27.907]:Active Directory ST: Expanded variable reference '$current-node$' to 'association'.
  2460. [03/20/12 07:50:27.907]:Active Directory ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  2461. [03/20/12 07:50:27.907]:Active Directory ST: Expanded variable reference '$current-node$' to 'association'.
  2462. [03/20/12 07:50:27.908]:Active Directory ST: (if-op-attr '$current-node$' available) = FALSE.
  2463. [03/20/12 07:50:27.908]:Active Directory ST: Performing else actions.
  2464. [03/20/12 07:50:27.908]:Active Directory ST: Evaluating selection criteria for rule 'AccountTracking - Initialize status properties on published events'.
  2465. [03/20/12 07:50:27.908]:Active Directory ST: (if-operation match "add|modify|delete|rename|move") = FALSE.
  2466. [03/20/12 07:50:27.908]:Active Directory ST: Rule rejected.
  2467. [03/20/12 07:50:27.908]:Active Directory ST: Policy returned:
  2468. [03/20/12 07:50:27.908]:Active Directory ST:
  2469. <nds dtdversion="1.1" ndsversion="8.7">
  2470. <source>
  2471. <product asn1id="" build="20090313_120000" instance="\EDIR2ADLAB\fdny\AD-TEST\Active Directory" version="3.5.5">AD</product>
  2472. <contact>Novell, Inc.</contact>
  2473. </source>
  2474. <output>
  2475. <status event-id="0" level="success"/>
  2476. </output>
  2477. </nds>
  2478. [03/20/12 07:50:27.909]:Active Directory ST: Applying policy: %+C%14Clib-AccountTracking-WriteAccounts-itp-V1%-C.
  2479. [03/20/12 07:50:27.909]:Active Directory ST: Applying to status #1.
  2480. [03/20/12 07:50:27.909]:Active Directory ST: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled'.
  2481. [03/20/12 07:50:27.909]:Active Directory ST: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  2482. [03/20/12 07:50:27.909]:Active Directory ST: Rule rejected.
  2483. [03/20/12 07:50:27.909]:Active Directory ST: Evaluating selection criteria for rule 'AccountTracking - query DirXML-Accounts Attribute'.
  2484. [03/20/12 07:50:27.910]:Active Directory ST: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  2485. [03/20/12 07:50:27.910]:Active Directory ST: Rule rejected.
  2486. [03/20/12 07:50:27.910]:Active Directory ST: Evaluating selection criteria for rule 'AccountTracking - remove Dirxml-Account values on delete operation'.
  2487. [03/20/12 07:50:27.910]:Active Directory ST: (if-operation match "delete|remove-association") = FALSE.
  2488. [03/20/12 07:50:27.910]:Active Directory ST: (if-operation equal "status") = TRUE.
  2489. [03/20/12 07:50:27.910]:Active Directory ST: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  2490. [03/20/12 07:50:27.910]:Active Directory ST: Rule rejected.
  2491. [03/20/12 07:50:27.910]:Active Directory ST: Evaluating selection criteria for rule 'AccountTracking - update DirXMLAccounts attribute'.
  2492. [03/20/12 07:50:27.910]:Active Directory ST: (if-op-property 'AccountTracking-Operation' not-available) = TRUE.
  2493. [03/20/12 07:50:27.911]:Active Directory ST: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  2494. [03/20/12 07:50:27.911]:Active Directory ST: (if-operation equal "status") = TRUE.
  2495. [03/20/12 07:50:27.911]:Active Directory ST: (if-xpath true "./@level='success'") = TRUE.
  2496. [03/20/12 07:50:27.911]:Active Directory ST: (if-op-property 'AccountTracking-Operation' available) = FALSE.
  2497. [03/20/12 07:50:27.911]:Active Directory ST: Rule rejected.
  2498. [03/20/12 07:50:27.911]:Active Directory ST: Policy returned:
  2499. [03/20/12 07:50:27.911]:Active Directory ST:
  2500. <nds dtdversion="1.1" ndsversion="8.7">
  2501. <source>
  2502. <product asn1id="" build="20090313_120000" instance="\EDIR2ADLAB\fdny\AD-TEST\Active Directory" version="3.5.5">AD</product>
  2503. <contact>Novell, Inc.</contact>
  2504. </source>
  2505. <output>
  2506. <status event-id="0" level="success"/>
  2507. </output>
  2508. </nds>
  2509. [03/20/12 07:50:27.912]:Active Directory ST: Applying policy: %+C%14Citp%-C.
  2510. [03/20/12 07:50:27.912]:Active Directory ST: Applying to status #1.
  2511. [03/20/12 07:50:27.912]:Active Directory ST: Evaluating selection criteria for rule 'streetAddress: Convert CR-LF to LF'.
  2512. [03/20/12 07:50:27.912]:Active Directory ST: Rule selected.
  2513. [03/20/12 07:50:27.912]:Active Directory ST: Applying rule 'streetAddress: Convert CR-LF to LF'.
  2514. [03/20/12 07:50:27.912]:Active Directory ST: Action: do-reformat-op-attr("streetAddress",token-replace-all("\r\n","\r",token-local-variable("current-value"))).
  2515. [03/20/12 07:50:27.913]:Active Directory ST: Evaluating selection criteria for rule 'logonHours: Convert to Login Allowed Time Map form'.
  2516. [03/20/12 07:50:27.913]:Active Directory ST: Rule selected.
  2517. [03/20/12 07:50:27.913]:Active Directory ST: Applying rule 'logonHours: Convert to Login Allowed Time Map form'.
  2518. [03/20/12 07:50:27.913]:Active Directory ST: Action: do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2eDir($current-value)")).
  2519. [03/20/12 07:50:27.913]:Active Directory ST: Evaluating selection criteria for rule 'accountExpires: Convert to Identity Vault time format'.
  2520. [03/20/12 07:50:27.913]:Active Directory ST: Rule selected.
  2521. [03/20/12 07:50:27.913]:Active Directory ST: Applying rule 'accountExpires: Convert to Identity Vault time format'.
  2522. [03/20/12 07:50:27.914]:Active Directory ST: Action: do-reformat-op-attr("accountExpires",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
  2523. [03/20/12 07:50:27.914]:Active Directory ST: Evaluating selection criteria for rule 'lockoutTime: Convert to Identity Vault time format'.
  2524. [03/20/12 07:50:27.914]:Active Directory ST: Rule selected.
  2525. [03/20/12 07:50:27.914]:Active Directory ST: Applying rule 'lockoutTime: Convert to Identity Vault time format'.
  2526. [03/20/12 07:50:27.914]:Active Directory ST: Action: do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
  2527. [03/20/12 07:50:27.914]:Active Directory ST: Policy returned:
  2528. [03/20/12 07:50:27.914]:Active Directory ST:
  2529. <nds dtdversion="1.1" ndsversion="8.7">
  2530. <source>
  2531. <product asn1id="" build="20090313_120000" instance="\EDIR2ADLAB\fdny\AD-TEST\Active Directory" version="3.5.5">AD</product>
  2532. <contact>Novell, Inc.</contact>
  2533. </source>
  2534. <output>
  2535. <status event-id="0" level="success"/>
  2536. </output>
  2537. </nds>
  2538. [03/20/12 07:50:27.915]:Active Directory ST: Applying policy: %+C%14Citp-EntitlementsImpl%-C.
  2539. [03/20/12 07:50:27.915]:Active Directory ST: Applying to status #1.
  2540. [03/20/12 07:50:27.915]:Active Directory ST: Evaluating selection criteria for rule 'Check target of add-association for group membership entitlements'.
  2541. [03/20/12 07:50:27.915]:Active Directory ST: (if-global-variable 'drv.entitlement.Group' equal "true") = FALSE.
  2542. [03/20/12 07:50:27.915]:Active Directory ST: Rule rejected.
  2543. [03/20/12 07:50:27.915]:Active Directory ST: Evaluating selection criteria for rule 'Check target of add-association for Exchange mailbox entitlements'.
  2544. [03/20/12 07:50:27.916]:Active Directory ST: (if-global-variable 'drv.exchMailboxMethod' equal "entitlement") = FALSE.
  2545. [03/20/12 07:50:27.916]:Active Directory ST: Rule rejected.
  2546. [03/20/12 07:50:27.916]:Active Directory ST: Policy returned:
  2547. [03/20/12 07:50:27.916]:Active Directory ST:
  2548. <nds dtdversion="1.1" ndsversion="8.7">
  2549. <source>
  2550. <product asn1id="" build="20090313_120000" instance="\EDIR2ADLAB\fdny\AD-TEST\Active Directory" version="3.5.5">AD</product>
  2551. <contact>Novell, Inc.</contact>
  2552. </source>
  2553. <output>
  2554. <status event-id="0" level="success"/>
  2555. </output>
  2556. </nds>
  2557. [03/20/12 07:50:27.916]:Active Directory ST: Applying policy: %+C%14CPassword(Pub)-Sub Email Notifications%-C.
  2558. [03/20/12 07:50:27.916]:Active Directory ST: Applying to status #1.
  2559. [03/20/12 07:50:27.916]:Active Directory ST: Evaluating selection criteria for rule 'Send e-mail on a failure when subscribing to passwords'.
  2560. [03/20/12 07:50:27.917]:Active Directory ST: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  2561. [03/20/12 07:50:27.917]:Active Directory ST: (if-operation equal "status") = TRUE.
  2562. [03/20/12 07:50:27.917]:Active Directory ST: (if-xpath true "self::status[@level != 'success'][text() != '']/operation-data/password-subscribe-status/association[text() != '']") = FALSE.
  2563. [03/20/12 07:50:27.917]:Active Directory ST: Rule rejected.
  2564. [03/20/12 07:50:27.917]:Active Directory ST: Evaluating selection criteria for rule 'Send e-mail on failure to reset connected system password using the Identity Manager data store password'.
  2565. [03/20/12 07:50:27.917]:Active Directory ST: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  2566. [03/20/12 07:50:27.918]:Active Directory ST: (if-operation equal "status") = TRUE.
  2567. [03/20/12 07:50:27.918]:Active Directory ST: (if-xpath true "self::status[@level != 'success']/operation-data/password-reset-status") = FALSE.
  2568. [03/20/12 07:50:27.918]:Active Directory ST: Rule rejected.
  2569. [03/20/12 07:50:27.918]:Active Directory ST: Policy returned:
  2570. [03/20/12 07:50:27.918]:Active Directory ST:
  2571. <nds dtdversion="1.1" ndsversion="8.7">
  2572. <source>
  2573. <product asn1id="" build="20090313_120000" instance="\EDIR2ADLAB\fdny\AD-TEST\Active Directory" version="3.5.5">AD</product>
  2574. <contact>Novell, Inc.</contact>
  2575. </source>
  2576. <output>
  2577. <status event-id="0" level="success"/>
  2578. </output>
  2579. </nds>
  2580. [03/20/12 07:50:27.918]:Active Directory ST: Applying policy: %+C%14Clib-Audit-SendEntitlementsEvents-itp-V1%-C.
  2581. [03/20/12 07:50:27.918]:Active Directory ST: Applying to status #1.
  2582. [03/20/12 07:50:27.919]:Active Directory ST: Evaluating selection criteria for rule '00031200 - Account Create By Entitlement Grant'.
  2583. [03/20/12 07:50:27.919]:Active Directory ST: (if-operation equal "status") = TRUE.
  2584. [03/20/12 07:50:27.919]:Active Directory ST: (if-op-property 'accountAction' equal "accountCreateByEntitlementGrant") = FALSE.
  2585. [03/20/12 07:50:27.919]:Active Directory ST: Rule rejected.
  2586. [03/20/12 07:50:27.919]:Active Directory ST: Evaluating selection criteria for rule '00031201 - Account Delete By Entitlement Revoke'.
  2587. [03/20/12 07:50:27.919]:Active Directory ST: (if-operation equal "status") = TRUE.
  2588. [03/20/12 07:50:27.919]:Active Directory ST: (if-xpath true "./operation-data/entitlement-impl/@state = '0'") = FALSE.
  2589. [03/20/12 07:50:27.912]:Active Directory :Remote Interface Driver: Waiting for receive...
  2590. [03/20/12 07:50:27.920]:Active Directory ST: (if-operation equal "status") = TRUE.
  2591. [03/20/12 07:50:27.920]:Active Directory ST: (if-op-property 'accountAction' equal "accountDeleteByEntitlementRevoke") = FALSE.
  2592. [03/20/12 07:50:27.920]:Active Directory ST: Rule rejected.
  2593. [03/20/12 07:50:27.920]:Active Directory ST: Evaluating selection criteria for rule '00031202 - Account Disable By Entitlement Revoke'.
  2594. [03/20/12 07:50:27.920]:Active Directory ST: (if-operation equal "status") = TRUE.
  2595. [03/20/12 07:50:27.920]:Active Directory ST: (if-op-property 'accountAction' equal "accountDisableByEntitlementRevoke") = FALSE.
  2596. [03/20/12 07:50:27.920]:Active Directory ST: Rule rejected.
  2597. [03/20/12 07:50:27.920]:Active Directory ST: Evaluating selection criteria for rule '00031203 - Account Enable By Entitlement Grant'.
  2598. [03/20/12 07:50:27.921]:Active Directory ST: (if-operation equal "status") = TRUE.
  2599. [03/20/12 07:50:27.921]:Active Directory ST: (if-op-property 'accountAction' equal "accountEnableByEntitlementGrant") = FALSE.
  2600. [03/20/12 07:50:27.921]:Active Directory ST: Rule rejected.
  2601. [03/20/12 07:50:27.921]:Active Directory ST: Evaluating selection criteria for rule 'Generate Audit Event'.
  2602. [03/20/12 07:50:27.921]:Active Directory ST: (if-operation equal "status") = TRUE.
  2603. [03/20/12 07:50:27.921]:Active Directory ST: (if-local-variable 'auditEventID' available) = FALSE.
  2604. [03/20/12 07:50:27.921]:Active Directory ST: Rule rejected.
  2605. [03/20/12 07:50:27.921]:Active Directory ST: Policy returned:
  2606. [03/20/12 07:50:27.921]:Active Directory ST:
  2607. <nds dtdversion="1.1" ndsversion="8.7">
  2608. <source>
  2609. <product asn1id="" build="20090313_120000" instance="\EDIR2ADLAB\fdny\AD-TEST\Active Directory" version="3.5.5">AD</product>
  2610. <contact>Novell, Inc.</contact>
  2611. </source>
  2612. <output>
  2613. <status event-id="0" level="success"/>
  2614. </output>
  2615. </nds>
  2616. [03/20/12 07:50:27.922]:Active Directory ST: Applying schema mapping policies to input.
  2617. [03/20/12 07:50:27.922]:Active Directory ST: Applying policy: %+C%14Csmp%-C.
  2618. [03/20/12 07:50:27.922]:Active Directory ST: Resolving association references.
  2619. [03/20/12 07:50:27.922]:Active Directory ST: Query from policy result
  2620. [03/20/12 07:50:27.922]:Active Directory ST:
  2621. <nds dtdversion="1.1" ndsversion="8.7">
  2622. <source>
  2623. <product asn1id="" build="20090313_120000" instance="\EDIR2ADLAB\fdny\AD-TEST\Active Directory" version="3.5.5">AD</product>
  2624. <contact>Novell, Inc.</contact>
  2625. </source>
  2626. <output>
  2627. <status event-id="0" level="success"/>
  2628. </output>
  2629. </nds>
  2630. [03/20/12 07:50:27.923]:Active Directory ST: No matches found.
  2631. [03/20/12 07:50:27.923]:Active Directory ST: Evaluating selection criteria for rule 'match everything else'.
  2632. [03/20/12 07:50:27.923]:Active Directory ST: Rule selected.
  2633. [03/20/12 07:50:27.923]:Active Directory ST: Applying rule 'match everything else'.
  2634. [03/20/12 07:50:27.923]:Active Directory ST: Action: do-if().
  2635. [03/20/12 07:50:27.923]:Active Directory ST: Evaluating conditions.
  2636. [03/20/12 07:50:27.923]:Active Directory ST: (if-global-variable 'drv.subPlacementType' equal "flat") = FALSE.
  2637. [03/20/12 07:50:27.923]:Active Directory ST: Performing else actions.
  2638. [03/20/12 07:50:27.924]:Active Directory ST: Action: do-find-matching-object(scope="entry",arg-dn(token-op-property("unmatched-src-dn")+","+token-global-variable("drv.user.container"))).
  2639. [03/20/12 07:50:27.924]:Active Directory ST: arg-dn(token-op-property("unmatched-src-dn")+","+token-global-variable("drv.user.container"))
  2640. [03/20/12 07:50:27.924]:Active Directory ST: token-op-property("unmatched-src-dn")
  2641. [03/20/12 07:50:27.924]:Active Directory ST: Token Value: "CN=goldwap,OU=LAN,OU=BTDS,OU=Support".
  2642. [03/20/12 07:50:27.924]:Active Directory ST: token-text(",")
  2643. [03/20/12 07:50:27.924]:Active Directory ST: token-global-variable("drv.user.container")
  2644. [03/20/12 07:50:27.924]:Active Directory ST: Token Value: "OU=FDNY,dc=edir2adlab,dc=local".
  2645. [03/20/12 07:50:27.924]:Active Directory ST: Arg Value: "CN=goldwap,OU=LAN,OU=BTDS,OU=Support,OU=FDNY,dc=edir2adlab,dc=local".
  2646. [03/20/12 07:50:27.925]:Active Directory ST: Query from policy
  2647. [03/20/12 07:50:27.925]:Active Directory ST:
  2648. <nds dtdversion="3.5" ndsversion="8.x">
  2649. <source>
  2650. <product version="3.6.10.4747">DirXML</product>
  2651. <contact>Novell, Inc.</contact>
  2652. </source>
  2653. <input>
  2654. <query class-name="User" dest-dn="CN=goldwap,OU=LAN,OU=BTDS,OU=Support,OU=FDNY,dc=edir2adlab,dc=local" scope="entry">
  2655. <search-class class-name="User"/>
  2656. <read-attr/>
  2657. </query>
  2658. </input>
  2659. </nds>
  2660. [03/20/12 07:50:27.925]:Active Directory ST: Fixing up association references.
  2661. [03/20/12 07:50:27.925]:Active Directory ST: Applying schema mapping policies to output.
  2662. [03/20/12 07:50:27.925]:Active Directory ST: Applying policy: %+C%14Csmp%-C.
  2663. [03/20/12 07:50:27.925]:Active Directory ST: Mapping class-name 'User' to 'user'.
  2664. [03/20/12 07:50:27.926]:Active Directory ST: Mapping class-name 'User' to 'user'.
  2665. [03/20/12 07:50:27.926]:Active Directory ST: Applying output transformation policies.
  2666. [03/20/12 07:50:27.926]:Active Directory ST: Applying policy: %+C%14Cotp%-C.
  2667. [03/20/12 07:50:27.926]:Active Directory ST: Applying to query #1.
  2668. [03/20/12 07:50:27.926]:Active Directory ST: Evaluating selection criteria for rule 'Street Address: Convert LF to CR-LF'.
  2669. [03/20/12 07:50:27.926]:Active Directory ST: Rule selected.
  2670. [03/20/12 07:50:27.926]:Active Directory ST: Applying rule 'Street Address: Convert LF to CR-LF'.
  2671. [03/20/12 07:50:27.926]:Active Directory ST: Action: do-reformat-op-attr("streetAddress",token-replace-all("[^\r]\n","\r\n",token-local-variable("current-value"))).
  2672. [03/20/12 07:50:27.927]:Active Directory ST: Evaluating selection criteria for rule 'logonHours: Convert to Active Directory form'.
  2673. [03/20/12 07:50:27.927]:Active Directory ST: Rule selected.
  2674. [03/20/12 07:50:27.927]:Active Directory ST: Applying rule 'logonHours: Convert to Active Directory form'.
  2675. [03/20/12 07:50:27.927]:Active Directory ST: Action: do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2ADLenient($current-value)")).
  2676. [03/20/12 07:50:27.927]:Active Directory ST: Evaluating selection criteria for rule 'accountExpires: Convert to Active Directory form'.
  2677. [03/20/12 07:50:27.927]:Active Directory ST: (if-op-attr 'accountExpires' changing) = FALSE.
  2678. [03/20/12 07:50:27.927]:Active Directory ST: Rule rejected.
  2679. [03/20/12 07:50:27.927]:Active Directory ST: Evaluating selection criteria for rule 'lockoutTime: Convert to Active Directory form'.
  2680. [03/20/12 07:50:27.928]:Active Directory ST: Rule selected.
  2681. [03/20/12 07:50:27.928]:Active Directory ST: Applying rule 'lockoutTime: Convert to Active Directory form'.
  2682. [03/20/12 07:50:27.928]:Active Directory ST: Action: do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateEpoch2FileTime($current-value)")).
  2683. [03/20/12 07:50:27.928]:Active Directory ST: Evaluating selection criteria for rule 'Add: User - convert multi-valued Telephone to single value'.
  2684. [03/20/12 07:50:27.928]:Active Directory ST: (if-operation equal "add") = FALSE.
  2685. [03/20/12 07:50:27.928]:Active Directory ST: Rule rejected.
  2686. [03/20/12 07:50:27.928]:Active Directory ST: Evaluating selection criteria for rule 'update Active Directory logon name'.
  2687. [03/20/12 07:50:27.928]:Active Directory ST: (if-xpath true "self::status[@level = 'success']/operation-data/windows-2000-logon-name") = FALSE.
  2688. [03/20/12 07:50:27.929]:Active Directory ST: Rule rejected.
  2689. [03/20/12 07:50:27.929]:Active Directory ST: Evaluating selection criteria for rule 'Exchange: Remove HomeMDB when disabled'.
  2690. [03/20/12 07:50:27.929]:Active Directory ST: (if-global-variable 'drv.exchMailboxMethod' equal "disabled") = TRUE.
  2691. [03/20/12 07:50:27.929]:Active Directory ST: Rule selected.
  2692. [03/20/12 07:50:27.929]:Active Directory ST: Applying rule 'Exchange: Remove HomeMDB when disabled'.
  2693. [03/20/12 07:50:27.929]:Active Directory ST: Action: do-strip-op-attr("homeMDB").
  2694. [03/20/12 07:50:27.929]:Active Directory ST: Policy returned:
  2695. [03/20/12 07:50:27.929]:Active Directory ST:
  2696. <nds dtdversion="3.5" ndsversion="8.x">
  2697. <source>
  2698. <product version="3.6.10.4747">DirXML</product>
  2699. <contact>Novell, Inc.</contact>
  2700. </source>
  2701. <input>
  2702. <query class-name="user" dest-dn="CN=goldwap,OU=LAN,OU=BTDS,OU=Support,OU=FDNY,dc=edir2adlab,dc=local" event-id="0" scope="entry">
  2703. <search-class class-name="user"/>
  2704. <read-attr/>
  2705. </query>
  2706. </input>
  2707. </nds>
  2708. [03/20/12 07:50:27.930]:Active Directory ST: Applying policy: %+C%14CPassword(Sub)-Pub Email Notifications%-C.
  2709. [03/20/12 07:50:27.930]:Active Directory ST: Applying to query #1.
  2710. [03/20/12 07:50:27.930]:Active Directory ST: Evaluating selection criteria for rule 'Send e-mail for a failed publish password operation'.
  2711. [03/20/12 07:50:27.930]:Active Directory ST: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  2712. [03/20/12 07:50:27.930]:Active Directory ST: (if-operation equal "status") = FALSE.
  2713. [03/20/12 07:50:27.930]:Active Directory ST: Rule rejected.
  2714. [03/20/12 07:50:27.931]:Active Directory ST: Policy returned:
  2715. [03/20/12 07:50:27.931]:Active Directory ST:
  2716. <nds dtdversion="3.5" ndsversion="8.x">
  2717. <source>
  2718. <product version="3.6.10.4747">DirXML</product>
  2719. <contact>Novell, Inc.</contact>
  2720. </source>
  2721. <input>
  2722. <query class-name="user" dest-dn="CN=goldwap,OU=LAN,OU=BTDS,OU=Support,OU=FDNY,dc=edir2adlab,dc=local" event-id="0" scope="entry">
  2723. <search-class class-name="user"/>
  2724. <read-attr/>
  2725. </query>
  2726. </input>
  2727. </nds>
  2728. [03/20/12 07:50:27.931]:Active Directory ST: Applying policy: %+C%14Clib-CredProv-ConvertPayload-otp-V1%-C.
  2729. [03/20/12 07:50:27.931]:Active Directory ST: Applying to query #1.
  2730. [03/20/12 07:50:27.931]:Active Directory ST: Evaluating selection criteria for rule 'Is credential provisioning enabled? Are there any custom payloads?'.
  2731. [03/20/12 07:50:27.932]:Active Directory ST: Rule selected.
  2732. [03/20/12 07:50:27.932]:Active Directory ST: Applying rule 'Is credential provisioning enabled? Are there any custom payloads?'.
  2733. [03/20/12 07:50:27.932]:Active Directory ST: Action: do-if().
  2734. [03/20/12 07:50:27.932]:Active Directory ST: Evaluating conditions.
  2735. [03/20/12 07:50:27.932]:Active Directory ST: (if-global-variable 'credprov.enable' not-equal "true") = TRUE.
  2736. [03/20/12 07:50:27.932]:Active Directory ST: Performing if actions.
  2737. [03/20/12 07:50:27.932]:Active Directory ST: Action: do-break().
  2738. [03/20/12 07:50:27.932]:Active Directory ST: Policy returned:
  2739. [03/20/12 07:50:27.932]:Active Directory ST:
  2740. <nds dtdversion="3.5" ndsversion="8.x">
  2741. <source>
  2742. <product version="3.6.10.4747">DirXML</product>
  2743. <contact>Novell, Inc.</contact>
  2744. </source>
  2745. <input>
  2746. <query class-name="user" dest-dn="CN=goldwap,OU=LAN,OU=BTDS,OU=Support,OU=FDNY,dc=edir2adlab,dc=local" event-id="0" scope="entry">
  2747. <search-class class-name="user"/>
  2748. <read-attr/>
  2749. </query>
  2750. </input>
  2751. </nds>
  2752. [03/20/12 07:50:27.933]:Active Directory ST: Applying policy: %+C%14Clib-AccountTracking-Subscribe-otp-V1%-C.
  2753. [03/20/12 07:50:27.933]:Active Directory ST: Applying to query #1.
  2754. [03/20/12 07:50:27.933]:Active Directory ST: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled or wrong object class'.
  2755. [03/20/12 07:50:27.933]:Active Directory ST: Rule selected.
  2756. [03/20/12 07:50:27.933]:Active Directory ST: Applying rule 'AccountTracking - disregard if disabled or wrong object class'.
  2757. [03/20/12 07:50:27.933]:Active Directory ST: Action: do-if().
  2758. [03/20/12 07:50:27.934]:Active Directory ST: Evaluating conditions.
  2759. [03/20/12 07:50:27.934]:Active Directory ST: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  2760. [03/20/12 07:50:27.934]:Active Directory ST: Performing else actions.
  2761. [03/20/12 07:50:27.934]:Active Directory ST: Action: do-for-each(arg-node-set(token-global-variable("drv.acctTrk.objectClass"))).
  2762. [03/20/12 07:50:27.934]:Active Directory ST: arg-node-set(token-global-variable("drv.acctTrk.objectClass"))
  2763. [03/20/12 07:50:27.934]:Active Directory ST: token-global-variable("drv.acctTrk.objectClass")
  2764. [03/20/12 07:50:27.934]:Active Directory ST: Token Value: {"user"}.
  2765. [03/20/12 07:50:27.934]:Active Directory ST: Arg Value: {"user"}.
  2766. [03/20/12 07:50:27.934]:Active Directory ST: Performing actions for local-variable(current-node) = "user".
  2767. [03/20/12 07:50:27.935]:Active Directory ST: Action: do-if().
  2768. [03/20/12 07:50:27.935]:Active Directory ST: Evaluating conditions.
  2769. [03/20/12 07:50:27.935]:Active Directory ST: Expanded variable reference '$current-node$' to 'user'.
  2770. [03/20/12 07:50:27.935]:Active Directory ST: (if-class-name equal "$current-node$") = TRUE.
  2771. [03/20/12 07:50:27.935]:Active Directory ST: Performing if actions.
  2772. [03/20/12 07:50:27.935]:Active Directory ST: Action: do-set-local-variable("pass",scope="policy","true").
  2773. [03/20/12 07:50:27.935]:Active Directory ST: arg-string("true")
  2774. [03/20/12 07:50:27.935]:Active Directory ST: token-text("true")
  2775. [03/20/12 07:50:27.936]:Active Directory ST: Arg Value: "true".
  2776. [03/20/12 07:50:27.936]:Active Directory ST: Action: do-if().
  2777. [03/20/12 07:50:27.936]:Active Directory ST: Evaluating conditions.
  2778. [03/20/12 07:50:27.936]:Active Directory ST: (if-local-variable 'pass' not-available) = FALSE.
  2779. [03/20/12 07:50:27.936]:Active Directory ST: Performing else actions.
  2780. [03/20/12 07:50:27.936]:Active Directory ST: Evaluating selection criteria for rule 'AccountTracking - include desired attribute values in operation-data'.
  2781. [03/20/12 07:50:27.936]:Active Directory ST: (if-operation match "add|modify|delete|rename|move") = FALSE.
  2782. [03/20/12 07:50:27.936]:Active Directory ST: Rule rejected.
  2783. [03/20/12 07:50:27.936]:Active Directory ST: Evaluating selection criteria for rule 'Account-Tracking-StripAccountTrackingAccountStatus Attribute'.
  2784. [03/20/12 07:50:27.937]:Active Directory ST: (if-op-attr 'AccountTrackingAccountStatus' available) = FALSE.
  2785. [03/20/12 07:50:27.937]:Active Directory ST: Rule rejected.
  2786. [03/20/12 07:50:27.937]:Active Directory ST: Policy returned:
  2787. [03/20/12 07:50:27.937]:Active Directory ST:
  2788. <nds dtdversion="3.5" ndsversion="8.x">
  2789. <source>
  2790. <product version="3.6.10.4747">DirXML</product>
  2791. <contact>Novell, Inc.</contact>
  2792. </source>
  2793. <input>
  2794. <query class-name="user" dest-dn="CN=goldwap,OU=LAN,OU=BTDS,OU=Support,OU=FDNY,dc=edir2adlab,dc=local" event-id="0" scope="entry">
  2795. <search-class class-name="user"/>
  2796. <read-attr/>
  2797. </query>
  2798. </input>
  2799. </nds>
  2800. [03/20/12 07:50:27.937]:Active Directory ST: Submitting document to subscriber shim:
  2801. [03/20/12 07:50:27.938]:Active Directory ST:
  2802. <nds dtdversion="3.5" ndsversion="8.x">
  2803. <source>
  2804. <product version="3.6.10.4747">DirXML</product>
  2805. <contact>Novell, Inc.</contact>
  2806. </source>
  2807. <input>
  2808. <query class-name="user" dest-dn="CN=goldwap,OU=LAN,OU=BTDS,OU=Support,OU=FDNY,dc=edir2adlab,dc=local" event-id="0" scope="entry">
  2809. <search-class class-name="user"/>
  2810. <read-attr/>
  2811. </query>
  2812. </input>
  2813. </nds>
  2814. [03/20/12 07:50:27.938]:Active Directory ST: Remote Interface Driver: Sending...
  2815. [03/20/12 07:50:27.938]:Active Directory ST:
  2816. <nds dtdversion="3.5" ndsversion="8.x">
  2817. <source>
  2818. <product version="3.6.10.4747">DirXML</product>
  2819. <contact>Novell, Inc.</contact>
  2820. </source>
  2821. <input>
  2822. <query class-name="user" dest-dn="CN=goldwap,OU=LAN,OU=BTDS,OU=Support,OU=FDNY,dc=edir2adlab,dc=local" event-id="0" scope="entry">
  2823. <search-class class-name="user"/>
  2824. <read-attr/>
  2825. </query>
  2826. </input>
  2827. </nds>
  2828. [03/20/12 07:50:27.939]:Active Directory ST: Remote Interface Driver: Document sent.
  2829. [03/20/12 07:50:27.971]:Active Directory :Remote Interface Driver: Received.
  2830. [03/20/12 07:50:27.972]:Active Directory :
  2831. <nds dtdversion="1.1" ndsversion="8.7">
  2832. <source>
  2833. <product asn1id="" build="20090313_120000" instance="\EDIR2ADLAB\fdny\AD-TEST\Active Directory" version="3.5.5">AD</product>
  2834. <contact>Novell, Inc.</contact>
  2835. </source>
  2836. <output>
  2837. <status event-id="0" level="success"/>
  2838. </output>
  2839. </nds>
  2840. [03/20/12 07:50:27.972]:Active Directory :Remote Interface Driver: Received document for subscriber channel
  2841. [03/20/12 07:50:27.973]:Active Directory :Remote Interface Driver: Waiting for receive...
  2842. [03/20/12 07:50:27.973]:Active Directory ST: SubscriptionShim.execute() returned:
  2843. [03/20/12 07:50:27.973]:Active Directory ST:
  2844. <nds dtdversion="1.1" ndsversion="8.7">
  2845. <source>
  2846. <product asn1id="" build="20090313_120000" instance="\EDIR2ADLAB\fdny\AD-TEST\Active Directory" version="3.5.5">AD</product>
  2847. <contact>Novell, Inc.</contact>
  2848. </source>
  2849. <output>
  2850. <status event-id="0" level="success"/>
  2851. </output>
  2852. </nds>
  2853. [03/20/12 07:50:27.973]:Active Directory ST: Applying input transformation policies.
  2854. [03/20/12 07:50:27.973]:Active Directory ST: Applying policy: %+C%14Clib-AccountTracking-Publish-itp-V1%-C.
  2855. [03/20/12 07:50:27.974]:Active Directory ST: Applying to status #1.
  2856. [03/20/12 07:50:27.974]:Active Directory ST: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled or wrong object class'.
  2857. [03/20/12 07:50:27.974]:Active Directory ST: Rule selected.
  2858. [03/20/12 07:50:27.974]:Active Directory ST: Applying rule 'AccountTracking - disregard if disabled or wrong object class'.
  2859. [03/20/12 07:50:27.974]:Active Directory ST: Action: do-if().
  2860. [03/20/12 07:50:27.974]:Active Directory ST: Evaluating conditions.
  2861. [03/20/12 07:50:27.974]:Active Directory ST: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  2862. [03/20/12 07:50:27.975]:Active Directory ST: Performing else actions.
  2863. [03/20/12 07:50:27.975]:Active Directory ST: Action: do-if().
  2864. [03/20/12 07:50:27.975]:Active Directory ST: Evaluating conditions.
  2865. [03/20/12 07:50:27.975]:Active Directory ST: (if-class-name available) = FALSE.
  2866. [03/20/12 07:50:27.975]:Active Directory ST: Performing else actions.
  2867. [03/20/12 07:50:27.975]:Active Directory ST: Evaluating selection criteria for rule 'AccountTracking - on add-association sync the operation-properties to status operations'.
  2868. [03/20/12 07:50:27.975]:Active Directory ST: (if-operation equal "add-association") = FALSE.
  2869. [03/20/12 07:50:27.975]:Active Directory ST: Rule rejected.
  2870. [03/20/12 07:50:27.975]:Active Directory ST: Evaluating selection criteria for rule 'AccountTracking - Query for destination DN using Association'.
  2871. [03/20/12 07:50:27.976]:Active Directory ST: (if-operation match "modify|delete|move|rename") = FALSE.
  2872. [03/20/12 07:50:27.976]:Active Directory ST: Rule rejected.
  2873. [03/20/12 07:50:27.976]:Active Directory ST: Evaluating selection criteria for rule 'AccountTracking - add interested properties to current doc for future use.'.
  2874. [03/20/12 07:50:27.976]:Active Directory ST: (if-operation match "add|modify|delete|rename|move|status") = TRUE.
  2875. [03/20/12 07:50:27.976]:Active Directory ST: Rule selected.
  2876. [03/20/12 07:50:27.976]:Active Directory ST: Applying rule 'AccountTracking - add interested properties to current doc for future use.'.
  2877. [03/20/12 07:50:27.976]:Active Directory ST: Action: do-for-each(arg-node-set(token-global-variable("drv.acctTrk.identifiers"))).
  2878. [03/20/12 07:50:27.976]:Active Directory ST: arg-node-set(token-global-variable("drv.acctTrk.identifiers"))
  2879. [03/20/12 07:50:27.977]:Active Directory ST: token-global-variable("drv.acctTrk.identifiers")
  2880. [03/20/12 07:50:27.977]:Active Directory ST: Token Value: {"sAMAccountName","userPrincipalName","LDAPDN","association"}.
  2881. [03/20/12 07:50:27.977]:Active Directory ST: Arg Value: {"sAMAccountName","userPrincipalName","LDAPDN","association"}.
  2882. [03/20/12 07:50:27.977]:Active Directory ST: Performing actions for local-variable(current-node) = "sAMAccountName".
  2883. [03/20/12 07:50:27.977]:Active Directory ST: Action: do-if().
  2884. [03/20/12 07:50:27.977]:Active Directory ST: Evaluating conditions.
  2885. [03/20/12 07:50:27.977]:Active Directory ST: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  2886. [03/20/12 07:50:27.978]:Active Directory ST: Performing else actions.
  2887. [03/20/12 07:50:27.978]:Active Directory ST: Action: do-if().
  2888. [03/20/12 07:50:27.978]:Active Directory ST: Evaluating conditions.
  2889. [03/20/12 07:50:27.978]:Active Directory ST: (if-local-variable 'current-node' equal "association") = FALSE.
  2890. [03/20/12 07:50:27.978]:Active Directory ST: Performing else actions.
  2891. [03/20/12 07:50:27.978]:Active Directory ST: Action: do-if().
  2892. [03/20/12 07:50:27.978]:Active Directory ST: Evaluating conditions.
  2893. [03/20/12 07:50:27.978]:Active Directory ST: Expanded variable reference '$current-node$' to 'sAMAccountName'.
  2894. [03/20/12 07:50:27.978]:Active Directory ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  2895. [03/20/12 07:50:27.979]:Active Directory ST: Expanded variable reference '$current-node$' to 'sAMAccountName'.
  2896. [03/20/12 07:50:27.979]:Active Directory ST: (if-op-attr '$current-node$' available) = FALSE.
  2897. [03/20/12 07:50:27.979]:Active Directory ST: Performing else actions.
  2898. [03/20/12 07:50:27.979]:Active Directory ST: Performing actions for local-variable(current-node) = "userPrincipalName".
  2899. [03/20/12 07:50:27.979]:Active Directory ST: Action: do-if().
  2900. [03/20/12 07:50:27.979]:Active Directory ST: Evaluating conditions.
  2901. [03/20/12 07:50:27.979]:Active Directory ST: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  2902. [03/20/12 07:50:27.979]:Active Directory ST: Performing else actions.
  2903. [03/20/12 07:50:27.980]:Active Directory ST: Action: do-if().
  2904. [03/20/12 07:50:27.980]:Active Directory ST: Evaluating conditions.
  2905. [03/20/12 07:50:27.980]:Active Directory ST: (if-local-variable 'current-node' equal "association") = FALSE.
  2906. [03/20/12 07:50:27.980]:Active Directory ST: Performing else actions.
  2907. [03/20/12 07:50:27.980]:Active Directory ST: Action: do-if().
  2908. [03/20/12 07:50:27.980]:Active Directory ST: Evaluating conditions.
  2909. [03/20/12 07:50:27.980]:Active Directory ST: Expanded variable reference '$current-node$' to 'userPrincipalName'.
  2910. [03/20/12 07:50:27.980]:Active Directory ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  2911. [03/20/12 07:50:27.981]:Active Directory ST: Expanded variable reference '$current-node$' to 'userPrincipalName'.
  2912. [03/20/12 07:50:27.981]:Active Directory ST: (if-op-attr '$current-node$' available) = FALSE.
  2913. [03/20/12 07:50:27.981]:Active Directory ST: Performing else actions.
  2914. [03/20/12 07:50:27.981]:Active Directory ST: Performing actions for local-variable(current-node) = "LDAPDN".
  2915. [03/20/12 07:50:27.981]:Active Directory ST: Action: do-if().
  2916. [03/20/12 07:50:27.981]:Active Directory ST: Evaluating conditions.
  2917. [03/20/12 07:50:27.981]:Active Directory ST: (if-local-variable 'current-node' equal "LDAPDN") = TRUE.
  2918. [03/20/12 07:50:27.981]:Active Directory ST: Expanded variable reference '$current-node$' to 'LDAPDN'.
  2919. [03/20/12 07:50:27.981]:Active Directory ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  2920. [03/20/12 07:50:27.982]:Active Directory ST: (if-src-dn available) = FALSE.
  2921. [03/20/12 07:50:27.982]:Active Directory ST: Performing else actions.
  2922. [03/20/12 07:50:27.982]:Active Directory ST: Action: do-if().
  2923. [03/20/12 07:50:27.982]:Active Directory ST: Evaluating conditions.
  2924. [03/20/12 07:50:27.982]:Active Directory ST: (if-local-variable 'current-node' equal "association") = FALSE.
  2925. [03/20/12 07:50:27.982]:Active Directory ST: Performing else actions.
  2926. [03/20/12 07:50:27.982]:Active Directory ST: Action: do-if().
  2927. [03/20/12 07:50:27.982]:Active Directory ST: Evaluating conditions.
  2928. [03/20/12 07:50:27.982]:Active Directory ST: Expanded variable reference '$current-node$' to 'LDAPDN'.
  2929. [03/20/12 07:50:27.983]:Active Directory ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  2930. [03/20/12 07:50:27.983]:Active Directory ST: Expanded variable reference '$current-node$' to 'LDAPDN'.
  2931. [03/20/12 07:50:27.983]:Active Directory ST: (if-op-attr '$current-node$' available) = FALSE.
  2932. [03/20/12 07:50:27.983]:Active Directory ST: Performing else actions.
  2933. [03/20/12 07:50:27.983]:Active Directory ST: Performing actions for local-variable(current-node) = "association".
  2934. [03/20/12 07:50:27.983]:Active Directory ST: Action: do-if().
  2935. [03/20/12 07:50:27.983]:Active Directory ST: Evaluating conditions.
  2936. [03/20/12 07:50:27.984]:Active Directory ST: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  2937. [03/20/12 07:50:27.984]:Active Directory ST: Performing else actions.
  2938. [03/20/12 07:50:27.984]:Active Directory ST: Action: do-if().
  2939. [03/20/12 07:50:27.984]:Active Directory ST: Evaluating conditions.
  2940. [03/20/12 07:50:27.984]:Active Directory ST: (if-local-variable 'current-node' equal "association") = TRUE.
  2941. [03/20/12 07:50:27.984]:Active Directory ST: Expanded variable reference '$current-node$' to 'association'.
  2942. [03/20/12 07:50:27.984]:Active Directory ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  2943. [03/20/12 07:50:27.984]:Active Directory ST: (if-association available) = FALSE.
  2944. [03/20/12 07:50:27.985]:Active Directory ST: Performing else actions.
  2945. [03/20/12 07:50:27.985]:Active Directory ST: Action: do-if().
  2946. [03/20/12 07:50:27.985]:Active Directory ST: Evaluating conditions.
  2947. [03/20/12 07:50:27.985]:Active Directory ST: Expanded variable reference '$current-node$' to 'association'.
  2948. [03/20/12 07:50:27.985]:Active Directory ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  2949. [03/20/12 07:50:27.985]:Active Directory ST: Expanded variable reference '$current-node$' to 'association'.
  2950. [03/20/12 07:50:27.985]:Active Directory ST: (if-op-attr '$current-node$' available) = FALSE.
  2951. [03/20/12 07:50:27.985]:Active Directory ST: Performing else actions.
  2952. [03/20/12 07:50:27.986]:Active Directory ST: Evaluating selection criteria for rule 'AccountTracking - Initialize status properties on published events'.
  2953. [03/20/12 07:50:27.986]:Active Directory ST: (if-operation match "add|modify|delete|rename|move") = FALSE.
  2954. [03/20/12 07:50:27.986]:Active Directory ST: Rule rejected.
  2955. [03/20/12 07:50:27.986]:Active Directory ST: Policy returned:
  2956. [03/20/12 07:50:27.986]:Active Directory ST:
  2957. <nds dtdversion="1.1" ndsversion="8.7">
  2958. <source>
  2959. <product asn1id="" build="20090313_120000" instance="\EDIR2ADLAB\fdny\AD-TEST\Active Directory" version="3.5.5">AD</product>
  2960. <contact>Novell, Inc.</contact>
  2961. </source>
  2962. <output>
  2963. <status event-id="0" level="success"/>
  2964. </output>
  2965. </nds>
  2966. [03/20/12 07:50:27.986]:Active Directory ST: Applying policy: %+C%14Clib-AccountTracking-WriteAccounts-itp-V1%-C.
  2967. [03/20/12 07:50:27.987]:Active Directory ST: Applying to status #1.
  2968. [03/20/12 07:50:27.987]:Active Directory ST: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled'.
  2969. [03/20/12 07:50:27.987]:Active Directory ST: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  2970. [03/20/12 07:50:27.987]:Active Directory ST: Rule rejected.
  2971. [03/20/12 07:50:27.987]:Active Directory ST: Evaluating selection criteria for rule 'AccountTracking - query DirXML-Accounts Attribute'.
  2972. [03/20/12 07:50:27.987]:Active Directory ST: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  2973. [03/20/12 07:50:27.987]:Active Directory ST: Rule rejected.
  2974. [03/20/12 07:50:27.987]:Active Directory ST: Evaluating selection criteria for rule 'AccountTracking - remove Dirxml-Account values on delete operation'.
  2975. [03/20/12 07:50:27.988]:Active Directory ST: (if-operation match "delete|remove-association") = FALSE.
  2976. [03/20/12 07:50:27.988]:Active Directory ST: (if-operation equal "status") = TRUE.
  2977. [03/20/12 07:50:27.988]:Active Directory ST: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  2978. [03/20/12 07:50:27.988]:Active Directory ST: Rule rejected.
  2979. [03/20/12 07:50:27.988]:Active Directory ST: Evaluating selection criteria for rule 'AccountTracking - update DirXMLAccounts attribute'.
  2980. [03/20/12 07:50:27.988]:Active Directory ST: (if-op-property 'AccountTracking-Operation' not-available) = TRUE.
  2981. [03/20/12 07:50:27.988]:Active Directory ST: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  2982. [03/20/12 07:50:27.988]:Active Directory ST: (if-operation equal "status") = TRUE.
  2983. [03/20/12 07:50:27.989]:Active Directory ST: (if-xpath true "./@level='success'") = TRUE.
  2984. [03/20/12 07:50:27.989]:Active Directory ST: (if-op-property 'AccountTracking-Operation' available) = FALSE.
  2985. [03/20/12 07:50:27.989]:Active Directory ST: Rule rejected.
  2986. [03/20/12 07:50:27.989]:Active Directory ST: Policy returned:
  2987. [03/20/12 07:50:27.989]:Active Directory ST:
  2988. <nds dtdversion="1.1" ndsversion="8.7">
  2989. <source>
  2990. <product asn1id="" build="20090313_120000" instance="\EDIR2ADLAB\fdny\AD-TEST\Active Directory" version="3.5.5">AD</product>
  2991. <contact>Novell, Inc.</contact>
  2992. </source>
  2993. <output>
  2994. <status event-id="0" level="success"/>
  2995. </output>
  2996. </nds>
  2997. [03/20/12 07:50:27.989]:Active Directory ST: Applying policy: %+C%14Citp%-C.
  2998. [03/20/12 07:50:27.989]:Active Directory ST: Applying to status #1.
  2999. [03/20/12 07:50:27.990]:Active Directory ST: Evaluating selection criteria for rule 'streetAddress: Convert CR-LF to LF'.
  3000. [03/20/12 07:50:27.990]:Active Directory ST: Rule selected.
  3001. [03/20/12 07:50:27.990]:Active Directory ST: Applying rule 'streetAddress: Convert CR-LF to LF'.
  3002. [03/20/12 07:50:27.990]:Active Directory ST: Action: do-reformat-op-attr("streetAddress",token-replace-all("\r\n","\r",token-local-variable("current-value"))).
  3003. [03/20/12 07:50:27.990]:Active Directory ST: Evaluating selection criteria for rule 'logonHours: Convert to Login Allowed Time Map form'.
  3004. [03/20/12 07:50:27.990]:Active Directory ST: Rule selected.
  3005. [03/20/12 07:50:27.990]:Active Directory ST: Applying rule 'logonHours: Convert to Login Allowed Time Map form'.
  3006. [03/20/12 07:50:27.990]:Active Directory ST: Action: do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2eDir($current-value)")).
  3007. [03/20/12 07:50:27.991]:Active Directory ST: Evaluating selection criteria for rule 'accountExpires: Convert to Identity Vault time format'.
  3008. [03/20/12 07:50:27.991]:Active Directory ST: Rule selected.
  3009. [03/20/12 07:50:27.991]:Active Directory ST: Applying rule 'accountExpires: Convert to Identity Vault time format'.
  3010. [03/20/12 07:50:27.991]:Active Directory ST: Action: do-reformat-op-attr("accountExpires",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
  3011. [03/20/12 07:50:27.991]:Active Directory ST: Evaluating selection criteria for rule 'lockoutTime: Convert to Identity Vault time format'.
  3012. [03/20/12 07:50:27.991]:Active Directory ST: Rule selected.
  3013. [03/20/12 07:50:27.991]:Active Directory ST: Applying rule 'lockoutTime: Convert to Identity Vault time format'.
  3014. [03/20/12 07:50:27.992]:Active Directory ST: Action: do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
  3015. [03/20/12 07:50:27.992]:Active Directory ST: Policy returned:
  3016. [03/20/12 07:50:27.992]:Active Directory ST:
  3017. <nds dtdversion="1.1" ndsversion="8.7">
  3018. <source>
  3019. <product asn1id="" build="20090313_120000" instance="\EDIR2ADLAB\fdny\AD-TEST\Active Directory" version="3.5.5">AD</product>
  3020. <contact>Novell, Inc.</contact>
  3021. </source>
  3022. <output>
  3023. <status event-id="0" level="success"/>
  3024. </output>
  3025. </nds>
  3026. [03/20/12 07:50:27.992]:Active Directory ST: Applying policy: %+C%14Citp-EntitlementsImpl%-C.
  3027. [03/20/12 07:50:27.992]:Active Directory ST: Applying to status #1.
  3028. [03/20/12 07:50:27.992]:Active Directory ST: Evaluating selection criteria for rule 'Check target of add-association for group membership entitlements'.
  3029. [03/20/12 07:50:27.993]:Active Directory ST: (if-global-variable 'drv.entitlement.Group' equal "true") = FALSE.
  3030. [03/20/12 07:50:27.993]:Active Directory ST: Rule rejected.
  3031. [03/20/12 07:50:27.993]:Active Directory ST: Evaluating selection criteria for rule 'Check target of add-association for Exchange mailbox entitlements'.
  3032. [03/20/12 07:50:27.993]:Active Directory ST: (if-global-variable 'drv.exchMailboxMethod' equal "entitlement") = FALSE.
  3033. [03/20/12 07:50:27.993]:Active Directory ST: Rule rejected.
  3034. [03/20/12 07:50:27.993]:Active Directory ST: Policy returned:
  3035. [03/20/12 07:50:27.993]:Active Directory ST:
  3036. <nds dtdversion="1.1" ndsversion="8.7">
  3037. <source>
  3038. <product asn1id="" build="20090313_120000" instance="\EDIR2ADLAB\fdny\AD-TEST\Active Directory" version="3.5.5">AD</product>
  3039. <contact>Novell, Inc.</contact>
  3040. </source>
  3041. <output>
  3042. <status event-id="0" level="success"/>
  3043. </output>
  3044. </nds>
  3045. [03/20/12 07:50:27.994]:Active Directory ST: Applying policy: %+C%14CPassword(Pub)-Sub Email Notifications%-C.
  3046. [03/20/12 07:50:27.994]:Active Directory ST: Applying to status #1.
  3047. [03/20/12 07:50:27.994]:Active Directory ST: Evaluating selection criteria for rule 'Send e-mail on a failure when subscribing to passwords'.
  3048. [03/20/12 07:50:27.994]:Active Directory ST: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  3049. [03/20/12 07:50:27.994]:Active Directory ST: (if-operation equal "status") = TRUE.
  3050. [03/20/12 07:50:27.994]:Active Directory ST: (if-xpath true "self::status[@level != 'success'][text() != '']/operation-data/password-subscribe-status/association[text() != '']") = FALSE.
  3051. [03/20/12 07:50:27.994]:Active Directory ST: Rule rejected.
  3052. [03/20/12 07:50:27.995]:Active Directory ST: Evaluating selection criteria for rule 'Send e-mail on failure to reset connected system password using the Identity Manager data store password'.
  3053. [03/20/12 07:50:27.995]:Active Directory ST: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  3054. [03/20/12 07:50:27.995]:Active Directory ST: (if-operation equal "status") = TRUE.
  3055. [03/20/12 07:50:27.995]:Active Directory ST: (if-xpath true "self::status[@level != 'success']/operation-data/password-reset-status") = FALSE.
  3056. [03/20/12 07:50:27.995]:Active Directory ST: Rule rejected.
  3057. [03/20/12 07:50:27.995]:Active Directory ST: Policy returned:
  3058. [03/20/12 07:50:27.995]:Active Directory ST:
  3059. <nds dtdversion="1.1" ndsversion="8.7">
  3060. <source>
  3061. <product asn1id="" build="20090313_120000" instance="\EDIR2ADLAB\fdny\AD-TEST\Active Directory" version="3.5.5">AD</product>
  3062. <contact>Novell, Inc.</contact>
  3063. </source>
  3064. <output>
  3065. <status event-id="0" level="success"/>
  3066. </output>
  3067. </nds>
  3068. [03/20/12 07:50:27.996]:Active Directory ST: Applying policy: %+C%14Clib-Audit-SendEntitlementsEvents-itp-V1%-C.
  3069. [03/20/12 07:50:27.996]:Active Directory ST: Applying to status #1.
  3070. [03/20/12 07:50:27.996]:Active Directory ST: Evaluating selection criteria for rule '00031200 - Account Create By Entitlement Grant'.
  3071. [03/20/12 07:50:27.996]:Active Directory ST: (if-operation equal "status") = TRUE.
  3072. [03/20/12 07:50:27.996]:Active Directory ST: (if-op-property 'accountAction' equal "accountCreateByEntitlementGrant") = FALSE.
  3073. [03/20/12 07:50:27.996]:Active Directory ST: Rule rejected.
  3074. [03/20/12 07:50:27.997]:Active Directory ST: Evaluating selection criteria for rule '00031201 - Account Delete By Entitlement Revoke'.
  3075. [03/20/12 07:50:27.997]:Active Directory ST: (if-operation equal "status") = TRUE.
  3076. [03/20/12 07:50:27.997]:Active Directory ST: (if-xpath true "./operation-data/entitlement-impl/@state = '0'") = FALSE.
  3077. [03/20/12 07:50:27.997]:Active Directory ST: (if-operation equal "status") = TRUE.
  3078. [03/20/12 07:50:27.997]:Active Directory ST: (if-op-property 'accountAction' equal "accountDeleteByEntitlementRevoke") = FALSE.
  3079. [03/20/12 07:50:27.997]:Active Directory ST: Rule rejected.
  3080. [03/20/12 07:50:27.997]:Active Directory ST: Evaluating selection criteria for rule '00031202 - Account Disable By Entitlement Revoke'.
  3081. [03/20/12 07:50:27.997]:Active Directory ST: (if-operation equal "status") = TRUE.
  3082. [03/20/12 07:50:27.998]:Active Directory ST: (if-op-property 'accountAction' equal "accountDisableByEntitlementRevoke") = FALSE.
  3083. [03/20/12 07:50:27.998]:Active Directory ST: Rule rejected.
  3084. [03/20/12 07:50:27.998]:Active Directory ST: Evaluating selection criteria for rule '00031203 - Account Enable By Entitlement Grant'.
  3085. [03/20/12 07:50:27.998]:Active Directory ST: (if-operation equal "status") = TRUE.
  3086. [03/20/12 07:50:27.998]:Active Directory ST: (if-op-property 'accountAction' equal "accountEnableByEntitlementGrant") = FALSE.
  3087. [03/20/12 07:50:27.998]:Active Directory ST: Rule rejected.
  3088. [03/20/12 07:50:27.998]:Active Directory ST: Evaluating selection criteria for rule 'Generate Audit Event'.
  3089. [03/20/12 07:50:27.998]:Active Directory ST: (if-operation equal "status") = TRUE.
  3090. [03/20/12 07:50:27.999]:Active Directory ST: (if-local-variable 'auditEventID' available) = FALSE.
  3091. [03/20/12 07:50:27.999]:Active Directory ST: Rule rejected.
  3092. [03/20/12 07:50:27.999]:Active Directory ST: Policy returned:
  3093. [03/20/12 07:50:27.999]:Active Directory ST:
  3094. <nds dtdversion="1.1" ndsversion="8.7">
  3095. <source>
  3096. <product asn1id="" build="20090313_120000" instance="\EDIR2ADLAB\fdny\AD-TEST\Active Directory" version="3.5.5">AD</product>
  3097. <contact>Novell, Inc.</contact>
  3098. </source>
  3099. <output>
  3100. <status event-id="0" level="success"/>
  3101. </output>
  3102. </nds>
  3103. [03/20/12 07:50:27.999]:Active Directory ST: Applying schema mapping policies to input.
  3104. [03/20/12 07:50:27.999]:Active Directory ST: Applying policy: %+C%14Csmp%-C.
  3105. [03/20/12 07:50:27.999]:Active Directory ST: Resolving association references.
  3106. [03/20/12 07:50:28.000]:Active Directory ST: Query from policy result
  3107. [03/20/12 07:50:28.000]:Active Directory ST:
  3108. <nds dtdversion="1.1" ndsversion="8.7">
  3109. <source>
  3110. <product asn1id="" build="20090313_120000" instance="\EDIR2ADLAB\fdny\AD-TEST\Active Directory" version="3.5.5">AD</product>
  3111. <contact>Novell, Inc.</contact>
  3112. </source>
  3113. <output>
  3114. <status event-id="0" level="success"/>
  3115. </output>
  3116. </nds>
  3117. [03/20/12 07:50:28.000]:Active Directory ST: No matches found.
  3118. [03/20/12 07:50:28.000]:Active Directory ST: Direct command from policy
  3119. [03/20/12 07:50:28.000]:Active Directory ST:
  3120. <nds dtdversion="3.5" ndsversion="8.x">
  3121. <source>
  3122. <product version="3.6.10.4747">DirXML</product>
  3123. <contact>Novell, Inc.</contact>
  3124. </source>
  3125. <input>
  3126. <modify class-name="User" dest-dn="\EDIR2ADLAB\fdny\Support\BTDS\LAN\goldwap" dest-entry-id="32938" event-id="edir2adlab-idm361#20120320115027#1#1">
  3127. <modify-attr attr-name="Full Name">
  3128. <remove-all-values/>
  3129. <add-value>
  3130. <value>Philip Goldwasser</value>
  3131. </add-value>
  3132. </modify-attr>
  3133. </modify>
  3134. </input>
  3135. </nds>
  3136. [03/20/12 07:50:28.001]:Active Directory ST: Pumping XDS to eDirectory.
  3137. [03/20/12 07:50:28.001]:Active Directory ST: Performing operation modify for \EDIR2ADLAB\fdny\Support\BTDS\LAN\goldwap.
  3138. [03/20/12 07:50:28.014]:Active Directory ST: Processing returned document.
  3139. [03/20/12 07:50:28.014]:Active Directory ST: Processing operation <status> for .
  3140. [03/20/12 07:50:28.014]:Active Directory ST:
  3141. DirXML Log Event -------------------
  3142. Driver: \EDIR2ADLAB\fdny\AD-TEST\Active Directory
  3143. Channel: Subscriber
  3144. Object: \EDIR2ADLAB\fdny\Support\BTDS\LAN\goldwap
  3145. Status: Error
  3146. Message: Code(-9010) An exception occurred: novell.jclient.JCException: modifyEntry -672 ERR_NO_ACCESS
  3147. [03/20/12 07:50:28.020]:Active Directory ST: Direct command from policy result
  3148. [03/20/12 07:50:28.020]:Active Directory ST:
  3149. <nds dtdversion="3.5" ndsversion="8.x">
  3150. <source>
  3151. <product version="3.6.10.4747">DirXML</product>
  3152. <contact>Novell, Inc.</contact>
  3153. </source>
  3154. <output>
  3155. <status event-id="edir2adlab-idm361#20120320115027#1#1" level="error">Code(-9010) An exception occurred: novell.jclient.JCException: modifyEntry -672 ERR_NO_ACCESS<application>DirXML</application>
  3156. <module>Active Directory</module>
  3157. <object-dn>\EDIR2ADLAB\fdny\Support\BTDS\LAN\goldwap</object-dn>
  3158. <component>Subscriber</component>
  3159. </status>
  3160. </output>
  3161. </nds>
  3162. [03/20/12 07:50:28.021]:Active Directory ST:Policy returned:
  3163. [03/20/12 07:50:28.021]:Active Directory ST:
  3164. <nds dtdversion="3.5" ndsversion="8.x">
  3165. <source>
  3166. <product version="3.6.10.4747">DirXML</product>
  3167. <contact>Novell, Inc.</contact>
  3168. </source>
  3169. <input>
  3170. <add class-name="User" event-id="edir2adlab-idm361#20120320115027#1#1" qualified-src-dn="O=fdny\OU=Support\OU=BTDS\OU=LAN\CN=goldwap" src-dn="\EDIR2ADLAB\fdny\Support\BTDS\LAN\goldwap" src-entry-id="32938">
  3171. <add-attr attr-name="Given Name">
  3172. <value timestamp="1332166853#1" type="string">Philip</value>
  3173. </add-attr>
  3174. <add-attr attr-name="Surname">
  3175. <value timestamp="1332164807#3" type="string">Goldwasser</value>
  3176. </add-attr>
  3177. <add-attr attr-name="Full Name">
  3178. <value>Philip Goldwasser</value>
  3179. </add-attr>
  3180. <operation-data attempt-to-match="true" unmatched-src-dn="CN=goldwap,OU=LAN,OU=BTDS,OU=Support"/>
  3181. </add>
  3182. </input>
  3183. </nds>
  3184. [03/20/12 07:50:28.022]:Active Directory ST:No match found.
  3185. [03/20/12 07:50:28.022]:Active Directory ST:Applying object creation policies.
  3186. [03/20/12 07:50:28.022]:Active Directory ST:Applying policy: %+C%14Csub-cp-EntitlementsImpl%-C.
  3187. [03/20/12 07:50:28.022]:Active Directory ST: Applying to add #1.
  3188. [03/20/12 07:50:28.022]:Active Directory ST: Evaluating selection criteria for rule 'UserAccount entitlement: Veto account creation when entitlement not granted'.
  3189. [03/20/12 07:50:28.022]:Active Directory ST: (if-global-variable 'drv.entitlement.UserAccount' equal "true") = FALSE.
  3190. [03/20/12 07:50:28.023]:Active Directory ST: Rule rejected.
  3191. [03/20/12 07:50:28.023]:Active Directory ST: Evaluating selection criteria for rule 'Prepare to check group entitlements after add'.
  3192. [03/20/12 07:50:28.023]:Active Directory ST: (if-global-variable 'drv.entitlement.Group' equal "true") = FALSE.
  3193. [03/20/12 07:50:28.023]:Active Directory ST: Rule rejected.
  3194. [03/20/12 07:50:28.023]:Active Directory ST: Evaluating selection criteria for rule 'Prepare to check Exchange entitlements after the add'.
  3195. [03/20/12 07:50:28.023]:Active Directory ST: (if-global-variable 'drv.exchMailboxMethod' equal "entitlement") = FALSE.
  3196. [03/20/12 07:50:28.023]:Active Directory ST: Rule rejected.
  3197. [03/20/12 07:50:28.023]:Active Directory ST:Policy returned:
  3198. [03/20/12 07:50:28.024]:Active Directory ST:
  3199. <nds dtdversion="3.5" ndsversion="8.x">
  3200. <source>
  3201. <product version="3.6.10.4747">DirXML</product>
  3202. <contact>Novell, Inc.</contact>
  3203. </source>
  3204. <input>
  3205. <add class-name="User" event-id="edir2adlab-idm361#20120320115027#1#1" qualified-src-dn="O=fdny\OU=Support\OU=BTDS\OU=LAN\CN=goldwap" src-dn="\EDIR2ADLAB\fdny\Support\BTDS\LAN\goldwap" src-entry-id="32938">
  3206. <add-attr attr-name="Given Name">
  3207. <value timestamp="1332166853#1" type="string">Philip</value>
  3208. </add-attr>
  3209. <add-attr attr-name="Surname">
  3210. <value timestamp="1332164807#3" type="string">Goldwasser</value>
  3211. </add-attr>
  3212. <add-attr attr-name="Full Name">
  3213. <value>Philip Goldwasser</value>
  3214. </add-attr>
  3215. <operation-data attempt-to-match="true" unmatched-src-dn="CN=goldwap,OU=LAN,OU=BTDS,OU=Support"/>
  3216. </add>
  3217. </input>
  3218. </nds>
  3219. [03/20/12 07:50:28.025]:Active Directory ST:Applying policy: %+C%14Csub-cp-Users%-C.
  3220. [03/20/12 07:50:28.025]:Active Directory ST: Applying to add #1.
  3221. [03/20/12 07:50:28.025]:Active Directory ST: Evaluating selection criteria for rule 'Break if not a User'.
  3222. [03/20/12 07:50:28.025]:Active Directory ST: (if-class-name not-equal "User") = FALSE.
  3223. [03/20/12 07:50:28.025]:Active Directory ST: Rule rejected.
  3224. [03/20/12 07:50:28.025]:Active Directory ST: Evaluating selection criteria for rule 'Veto if nspmDistributionPassword is not available'.
  3225. [03/20/12 07:50:28.025]:Active Directory ST: Rule selected.
  3226. [03/20/12 07:50:28.025]:Active Directory ST: Applying rule 'Veto if nspmDistributionPassword is not available'.
  3227. [03/20/12 07:50:28.025]:Active Directory ST: Action: do-veto-if-op-attr-not-available("nspmDistributionPassword").
  3228. [03/20/12 07:50:28.026]:Active Directory ST:Policy returned:
  3229. [03/20/12 07:50:28.026]:Active Directory ST:
  3230. <nds dtdversion="3.5" ndsversion="8.x">
  3231. <source>
  3232. <product version="3.6.10.4747">DirXML</product>
  3233. <contact>Novell, Inc.</contact>
  3234. </source>
  3235. <input/>
  3236. </nds>
  3237. [03/20/12 07:50:28.026]:Active Directory ST:Applying policy: %+C%14Csub-cp-ExchMailboxPolicy%-C.
  3238. [03/20/12 07:50:28.026]:Active Directory ST:Policy returned:
  3239. [03/20/12 07:50:28.026]:Active Directory ST:
  3240. <nds dtdversion="3.5" ndsversion="8.x">
  3241. <source>
  3242. <product version="3.6.10.4747">DirXML</product>
  3243. <contact>Novell, Inc.</contact>
  3244. </source>
  3245. <input/>
  3246. </nds>
  3247. [03/20/12 07:50:28.026]:Active Directory ST:Applying policy: %+C%14Clib-CredProv-RequiredAttributes-sub-cp-V1%-C.
  3248. [03/20/12 07:50:28.026]:Active Directory ST:Policy returned:
  3249. [03/20/12 07:50:28.026]:Active Directory ST:
  3250. <nds dtdversion="3.5" ndsversion="8.x">
  3251. <source>
  3252. <product version="3.6.10.4747">DirXML</product>
  3253. <contact>Novell, Inc.</contact>
  3254. </source>
  3255. <input/>
  3256. </nds>
  3257. [03/20/12 07:50:28.027]:Active Directory ST:Processing returned document.
  3258. [03/20/12 07:50:28.027]:Active Directory ST:Processing operation <status> for .
  3259. [03/20/12 07:50:28.027]:Active Directory ST:
  3260. DirXML Log Event -------------------
  3261. Driver: \EDIR2ADLAB\fdny\AD-TEST\Active Directory
  3262. Channel: Subscriber
  3263. Object: \EDIR2ADLAB\fdny\Support\BTDS\LAN\goldwap
  3264. Status: Warning
  3265. Message: Code(-8017) Operation vetoed by object creation policy.
  3266. [03/20/12 07:50:28.027]:Active Directory ST:End transaction.
  3267. [03/20/12 07:50:46.892]:Active Directory :Remote Interface Driver: Received.
  3268. [03/20/12 07:50:46.892]:Active Directory :
  3269. <nds dtdversion="2.2">
  3270. <source>
  3271. <product version="3.6.10.4747">DirXML</product>
  3272. <contact>Novell, Inc.</contact>
  3273. </source>
  3274. <input>
  3275. <status level="success" type="heartbeat"/>
  3276. </input>
  3277. </nds>
  3278. [03/20/12 07:50:46.893]:Active Directory :Remote Interface Driver: Received document for publisher channel
  3279. [03/20/12 07:50:46.893]:Active Directory :Remote Interface Driver: Waiting for receive...
  3280. [03/20/12 07:50:46.893]:Active Directory PT:Receiving DOM document from application.
  3281. [03/20/12 07:50:46.893]:Active Directory PT:
  3282. <nds dtdversion="2.2">
  3283. <source>
  3284. <product version="3.6.10.4747">DirXML</product>
  3285. <contact>Novell, Inc.</contact>
  3286. </source>
  3287. <input>
  3288. <status level="success" type="heartbeat"/>
  3289. </input>
  3290. </nds>
  3291. [03/20/12 07:50:46.894]:Active Directory PT:Applying input transformation policies.
  3292. [03/20/12 07:50:46.894]:Active Directory PT:Applying policy: %+C%14Clib-AccountTracking-Publish-itp-V1%-C.
  3293. [03/20/12 07:50:46.894]:Active Directory PT: Applying to status #1.
  3294. [03/20/12 07:50:46.894]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled or wrong object class'.
  3295. [03/20/12 07:50:46.895]:Active Directory PT: Rule selected.
  3296. [03/20/12 07:50:46.895]:Active Directory PT: Applying rule 'AccountTracking - disregard if disabled or wrong object class'.
  3297. [03/20/12 07:50:46.895]:Active Directory PT: Action: do-if().
  3298. [03/20/12 07:50:46.895]:Active Directory PT: Evaluating conditions.
  3299. [03/20/12 07:50:46.895]:Active Directory PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  3300. [03/20/12 07:50:46.895]:Active Directory PT: Performing else actions.
  3301. [03/20/12 07:50:46.896]:Active Directory PT: Action: do-if().
  3302. [03/20/12 07:50:46.896]:Active Directory PT: Evaluating conditions.
  3303. [03/20/12 07:50:46.896]:Active Directory PT: (if-class-name available) = FALSE.
  3304. [03/20/12 07:50:46.896]:Active Directory PT: Performing else actions.
  3305. [03/20/12 07:50:46.896]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - on add-association sync the operation-properties to status operations'.
  3306. [03/20/12 07:50:46.896]:Active Directory PT: (if-operation equal "add-association") = FALSE.
  3307. [03/20/12 07:50:46.897]:Active Directory PT: Rule rejected.
  3308. [03/20/12 07:50:46.897]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - Query for destination DN using Association'.
  3309. [03/20/12 07:50:46.897]:Active Directory PT: (if-operation match "modify|delete|move|rename") = FALSE.
  3310. [03/20/12 07:50:46.898]:Active Directory PT: Rule rejected.
  3311. [03/20/12 07:50:46.898]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - add interested properties to current doc for future use.'.
  3312. [03/20/12 07:50:46.898]:Active Directory PT: (if-operation match "add|modify|delete|rename|move|status") = TRUE.
  3313. [03/20/12 07:50:46.898]:Active Directory PT: Rule selected.
  3314. [03/20/12 07:50:46.898]:Active Directory PT: Applying rule 'AccountTracking - add interested properties to current doc for future use.'.
  3315. [03/20/12 07:50:46.898]:Active Directory PT: Action: do-for-each(arg-node-set(token-global-variable("drv.acctTrk.identifiers"))).
  3316. [03/20/12 07:50:46.899]:Active Directory PT: arg-node-set(token-global-variable("drv.acctTrk.identifiers"))
  3317. [03/20/12 07:50:46.899]:Active Directory PT: token-global-variable("drv.acctTrk.identifiers")
  3318. [03/20/12 07:50:46.899]:Active Directory PT: Token Value: {"sAMAccountName","userPrincipalName","LDAPDN","association"}.
  3319. [03/20/12 07:50:46.899]:Active Directory PT: Arg Value: {"sAMAccountName","userPrincipalName","LDAPDN","association"}.
  3320. [03/20/12 07:50:46.900]:Active Directory PT: Performing actions for local-variable(current-node) = "sAMAccountName".
  3321. [03/20/12 07:50:46.900]:Active Directory PT: Action: do-if().
  3322. [03/20/12 07:50:46.900]:Active Directory PT: Evaluating conditions.
  3323. [03/20/12 07:50:46.900]:Active Directory PT: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  3324. [03/20/12 07:50:46.900]:Active Directory PT: Performing else actions.
  3325. [03/20/12 07:50:46.900]:Active Directory PT: Action: do-if().
  3326. [03/20/12 07:50:46.900]:Active Directory PT: Evaluating conditions.
  3327. [03/20/12 07:50:46.901]:Active Directory PT: (if-local-variable 'current-node' equal "association") = FALSE.
  3328. [03/20/12 07:50:46.901]:Active Directory PT: Performing else actions.
  3329. [03/20/12 07:50:46.901]:Active Directory PT: Action: do-if().
  3330. [03/20/12 07:50:46.901]:Active Directory PT: Evaluating conditions.
  3331. [03/20/12 07:50:46.901]:Active Directory PT: Expanded variable reference '$current-node$' to 'sAMAccountName'.
  3332. [03/20/12 07:50:46.902]:Active Directory PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  3333. [03/20/12 07:50:46.902]:Active Directory PT: Expanded variable reference '$current-node$' to 'sAMAccountName'.
  3334. [03/20/12 07:50:46.902]:Active Directory PT: (if-op-attr '$current-node$' available) = FALSE.
  3335. [03/20/12 07:50:46.902]:Active Directory PT: Performing else actions.
  3336. [03/20/12 07:50:46.902]:Active Directory PT: Performing actions for local-variable(current-node) = "userPrincipalName".
  3337. [03/20/12 07:50:46.903]:Active Directory PT: Action: do-if().
  3338. [03/20/12 07:50:46.903]:Active Directory PT: Evaluating conditions.
  3339. [03/20/12 07:50:46.903]:Active Directory PT: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  3340. [03/20/12 07:50:46.903]:Active Directory PT: Performing else actions.
  3341. [03/20/12 07:50:46.903]:Active Directory PT: Action: do-if().
  3342. [03/20/12 07:50:46.903]:Active Directory PT: Evaluating conditions.
  3343. [03/20/12 07:50:46.903]:Active Directory PT: (if-local-variable 'current-node' equal "association") = FALSE.
  3344. [03/20/12 07:50:46.904]:Active Directory PT: Performing else actions.
  3345. [03/20/12 07:50:46.904]:Active Directory PT: Action: do-if().
  3346. [03/20/12 07:50:46.904]:Active Directory PT: Evaluating conditions.
  3347. [03/20/12 07:50:46.904]:Active Directory PT: Expanded variable reference '$current-node$' to 'userPrincipalName'.
  3348. [03/20/12 07:50:46.904]:Active Directory PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  3349. [03/20/12 07:50:46.905]:Active Directory PT: Expanded variable reference '$current-node$' to 'userPrincipalName'.
  3350. [03/20/12 07:50:46.905]:Active Directory PT: (if-op-attr '$current-node$' available) = FALSE.
  3351. [03/20/12 07:50:46.905]:Active Directory PT: Performing else actions.
  3352. [03/20/12 07:50:46.905]:Active Directory PT: Performing actions for local-variable(current-node) = "LDAPDN".
  3353. [03/20/12 07:50:46.905]:Active Directory PT: Action: do-if().
  3354. [03/20/12 07:50:46.906]:Active Directory PT: Evaluating conditions.
  3355. [03/20/12 07:50:46.906]:Active Directory PT: (if-local-variable 'current-node' equal "LDAPDN") = TRUE.
  3356. [03/20/12 07:50:46.906]:Active Directory PT: Expanded variable reference '$current-node$' to 'LDAPDN'.
  3357. [03/20/12 07:50:46.906]:Active Directory PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  3358. [03/20/12 07:50:46.906]:Active Directory PT: (if-src-dn available) = FALSE.
  3359. [03/20/12 07:50:46.906]:Active Directory PT: Performing else actions.
  3360. [03/20/12 07:50:46.907]:Active Directory PT: Action: do-if().
  3361. [03/20/12 07:50:46.907]:Active Directory PT: Evaluating conditions.
  3362. [03/20/12 07:50:46.907]:Active Directory PT: (if-local-variable 'current-node' equal "association") = FALSE.
  3363. [03/20/12 07:50:46.907]:Active Directory PT: Performing else actions.
  3364. [03/20/12 07:50:46.907]:Active Directory PT: Action: do-if().
  3365. [03/20/12 07:50:46.907]:Active Directory PT: Evaluating conditions.
  3366. [03/20/12 07:50:46.907]:Active Directory PT: Expanded variable reference '$current-node$' to 'LDAPDN'.
  3367. [03/20/12 07:50:46.908]:Active Directory PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  3368. [03/20/12 07:50:46.908]:Active Directory PT: Expanded variable reference '$current-node$' to 'LDAPDN'.
  3369. [03/20/12 07:50:46.908]:Active Directory PT: (if-op-attr '$current-node$' available) = FALSE.
  3370. [03/20/12 07:50:46.908]:Active Directory PT: Performing else actions.
  3371. [03/20/12 07:50:46.908]:Active Directory PT: Performing actions for local-variable(current-node) = "association".
  3372. [03/20/12 07:50:46.909]:Active Directory PT: Action: do-if().
  3373. [03/20/12 07:50:46.909]:Active Directory PT: Evaluating conditions.
  3374. [03/20/12 07:50:46.909]:Active Directory PT: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  3375. [03/20/12 07:50:46.909]:Active Directory PT: Performing else actions.
  3376. [03/20/12 07:50:46.909]:Active Directory PT: Action: do-if().
  3377. [03/20/12 07:50:46.909]:Active Directory PT: Evaluating conditions.
  3378. [03/20/12 07:50:46.910]:Active Directory PT: (if-local-variable 'current-node' equal "association") = TRUE.
  3379. [03/20/12 07:50:46.910]:Active Directory PT: Expanded variable reference '$current-node$' to 'association'.
  3380. [03/20/12 07:50:46.910]:Active Directory PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  3381. [03/20/12 07:50:46.910]:Active Directory PT: (if-association available) = FALSE.
  3382. [03/20/12 07:50:46.910]:Active Directory PT: Performing else actions.
  3383. [03/20/12 07:50:46.911]:Active Directory PT: Action: do-if().
  3384. [03/20/12 07:50:46.911]:Active Directory PT: Evaluating conditions.
  3385. [03/20/12 07:50:46.911]:Active Directory PT: Expanded variable reference '$current-node$' to 'association'.
  3386. [03/20/12 07:50:46.911]:Active Directory PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  3387. [03/20/12 07:50:46.911]:Active Directory PT: Expanded variable reference '$current-node$' to 'association'.
  3388. [03/20/12 07:50:46.911]:Active Directory PT: (if-op-attr '$current-node$' available) = FALSE.
  3389. [03/20/12 07:50:46.912]:Active Directory PT: Performing else actions.
  3390. [03/20/12 07:50:46.912]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - Initialize status properties on published events'.
  3391. [03/20/12 07:50:46.912]:Active Directory PT: (if-operation match "add|modify|delete|rename|move") = FALSE.
  3392. [03/20/12 07:50:46.912]:Active Directory PT: Rule rejected.
  3393. [03/20/12 07:50:46.912]:Active Directory PT:Policy returned:
  3394. [03/20/12 07:50:46.912]:Active Directory PT:
  3395. <nds dtdversion="2.2">
  3396. <source>
  3397. <product version="3.6.10.4747">DirXML</product>
  3398. <contact>Novell, Inc.</contact>
  3399. </source>
  3400. <input>
  3401. <status level="success" type="heartbeat"/>
  3402. </input>
  3403. </nds>
  3404. [03/20/12 07:50:46.913]:Active Directory PT:Applying policy: %+C%14Clib-AccountTracking-WriteAccounts-itp-V1%-C.
  3405. [03/20/12 07:50:46.913]:Active Directory PT: Applying to status #1.
  3406. [03/20/12 07:50:46.913]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled'.
  3407. [03/20/12 07:50:46.914]:Active Directory PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  3408. [03/20/12 07:50:46.914]:Active Directory PT: Rule rejected.
  3409. [03/20/12 07:50:46.914]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - query DirXML-Accounts Attribute'.
  3410. [03/20/12 07:50:46.914]:Active Directory PT: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  3411. [03/20/12 07:50:46.914]:Active Directory PT: Rule rejected.
  3412. [03/20/12 07:50:46.914]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - remove Dirxml-Account values on delete operation'.
  3413. [03/20/12 07:50:46.915]:Active Directory PT: (if-operation match "delete|remove-association") = FALSE.
  3414. [03/20/12 07:50:46.915]:Active Directory PT: (if-operation equal "status") = TRUE.
  3415. [03/20/12 07:50:46.915]:Active Directory PT: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  3416. [03/20/12 07:50:46.915]:Active Directory PT: Rule rejected.
  3417. [03/20/12 07:50:46.915]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - update DirXMLAccounts attribute'.
  3418. [03/20/12 07:50:46.916]:Active Directory PT: (if-op-property 'AccountTracking-Operation' not-available) = TRUE.
  3419. [03/20/12 07:50:46.916]:Active Directory PT: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  3420. [03/20/12 07:50:46.916]:Active Directory PT: (if-operation equal "status") = TRUE.
  3421. [03/20/12 07:50:46.916]:Active Directory PT: (if-xpath true "./@level='success'") = TRUE.
  3422. [03/20/12 07:50:46.916]:Active Directory PT: (if-op-property 'AccountTracking-Operation' available) = FALSE.
  3423. [03/20/12 07:50:46.916]:Active Directory PT: Rule rejected.
  3424. [03/20/12 07:50:46.917]:Active Directory PT:Policy returned:
  3425. [03/20/12 07:50:46.917]:Active Directory PT:
  3426. <nds dtdversion="2.2">
  3427. <source>
  3428. <product version="3.6.10.4747">DirXML</product>
  3429. <contact>Novell, Inc.</contact>
  3430. </source>
  3431. <input>
  3432. <status level="success" type="heartbeat"/>
  3433. </input>
  3434. </nds>
  3435. [03/20/12 07:50:46.917]:Active Directory PT:Applying policy: %+C%14Citp%-C.
  3436. [03/20/12 07:50:46.917]:Active Directory PT: Applying to status #1.
  3437. [03/20/12 07:50:46.917]:Active Directory PT: Evaluating selection criteria for rule 'streetAddress: Convert CR-LF to LF'.
  3438. [03/20/12 07:50:46.918]:Active Directory PT: Rule selected.
  3439. [03/20/12 07:50:46.918]:Active Directory PT: Applying rule 'streetAddress: Convert CR-LF to LF'.
  3440. [03/20/12 07:50:46.918]:Active Directory PT: Action: do-reformat-op-attr("streetAddress",token-replace-all("\r\n","\r",token-local-variable("current-value"))).
  3441. [03/20/12 07:50:46.918]:Active Directory PT: Evaluating selection criteria for rule 'logonHours: Convert to Login Allowed Time Map form'.
  3442. [03/20/12 07:50:46.918]:Active Directory PT: Rule selected.
  3443. [03/20/12 07:50:46.918]:Active Directory PT: Applying rule 'logonHours: Convert to Login Allowed Time Map form'.
  3444. [03/20/12 07:50:46.919]:Active Directory PT: Action: do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2eDir($current-value)")).
  3445. [03/20/12 07:50:46.919]:Active Directory PT: Evaluating selection criteria for rule 'accountExpires: Convert to Identity Vault time format'.
  3446. [03/20/12 07:50:46.919]:Active Directory PT: Rule selected.
  3447. [03/20/12 07:50:46.919]:Active Directory PT: Applying rule 'accountExpires: Convert to Identity Vault time format'.
  3448. [03/20/12 07:50:46.919]:Active Directory PT: Action: do-reformat-op-attr("accountExpires",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
  3449. [03/20/12 07:50:46.920]:Active Directory PT: Evaluating selection criteria for rule 'lockoutTime: Convert to Identity Vault time format'.
  3450. [03/20/12 07:50:46.920]:Active Directory PT: Rule selected.
  3451. [03/20/12 07:50:46.920]:Active Directory PT: Applying rule 'lockoutTime: Convert to Identity Vault time format'.
  3452. [03/20/12 07:50:46.920]:Active Directory PT: Action: do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
  3453. [03/20/12 07:50:46.920]:Active Directory PT:Policy returned:
  3454. [03/20/12 07:50:46.921]:Active Directory PT:
  3455. <nds dtdversion="2.2">
  3456. <source>
  3457. <product version="3.6.10.4747">DirXML</product>
  3458. <contact>Novell, Inc.</contact>
  3459. </source>
  3460. <input>
  3461. <status level="success" type="heartbeat"/>
  3462. </input>
  3463. </nds>
  3464. [03/20/12 07:50:46.921]:Active Directory PT:Applying policy: %+C%14Citp-EntitlementsImpl%-C.
  3465. [03/20/12 07:50:46.921]:Active Directory PT: Applying to status #1.
  3466. [03/20/12 07:50:46.921]:Active Directory PT: Evaluating selection criteria for rule 'Check target of add-association for group membership entitlements'.
  3467. [03/20/12 07:50:46.922]:Active Directory PT: (if-global-variable 'drv.entitlement.Group' equal "true") = FALSE.
  3468. [03/20/12 07:50:46.922]:Active Directory PT: Rule rejected.
  3469. [03/20/12 07:50:46.922]:Active Directory PT: Evaluating selection criteria for rule 'Check target of add-association for Exchange mailbox entitlements'.
  3470. [03/20/12 07:50:46.922]:Active Directory PT: (if-global-variable 'drv.exchMailboxMethod' equal "entitlement") = FALSE.
  3471. [03/20/12 07:50:46.922]:Active Directory PT: Rule rejected.
  3472. [03/20/12 07:50:46.923]:Active Directory PT:Policy returned:
  3473. [03/20/12 07:50:46.923]:Active Directory PT:
  3474. <nds dtdversion="2.2">
  3475. <source>
  3476. <product version="3.6.10.4747">DirXML</product>
  3477. <contact>Novell, Inc.</contact>
  3478. </source>
  3479. <input>
  3480. <status level="success" type="heartbeat"/>
  3481. </input>
  3482. </nds>
  3483. [03/20/12 07:50:46.923]:Active Directory PT:Applying policy: %+C%14CPassword(Pub)-Sub Email Notifications%-C.
  3484. [03/20/12 07:50:46.923]:Active Directory PT: Applying to status #1.
  3485. [03/20/12 07:50:46.925]:Active Directory PT: Evaluating selection criteria for rule 'Send e-mail on a failure when subscribing to passwords'.
  3486. [03/20/12 07:50:46.925]:Active Directory PT: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  3487. [03/20/12 07:50:46.925]:Active Directory PT: (if-operation equal "status") = TRUE.
  3488. [03/20/12 07:50:46.926]:Active Directory PT: (if-xpath true "self::status[@level != 'success'][text() != '']/operation-data/password-subscribe-status/association[text() != '']") = FALSE.
  3489. [03/20/12 07:50:46.926]:Active Directory PT: Rule rejected.
  3490. [03/20/12 07:50:46.926]:Active Directory PT: Evaluating selection criteria for rule 'Send e-mail on failure to reset connected system password using the Identity Manager data store password'.
  3491. [03/20/12 07:50:46.926]:Active Directory PT: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  3492. [03/20/12 07:50:46.927]:Active Directory PT: (if-operation equal "status") = TRUE.
  3493. [03/20/12 07:50:46.927]:Active Directory PT: (if-xpath true "self::status[@level != 'success']/operation-data/password-reset-status") = FALSE.
  3494. [03/20/12 07:50:46.927]:Active Directory PT: Rule rejected.
  3495. [03/20/12 07:50:46.927]:Active Directory PT:Policy returned:
  3496. [03/20/12 07:50:46.927]:Active Directory PT:
  3497. <nds dtdversion="2.2">
  3498. <source>
  3499. <product version="3.6.10.4747">DirXML</product>
  3500. <contact>Novell, Inc.</contact>
  3501. </source>
  3502. <input>
  3503. <status level="success" type="heartbeat"/>
  3504. </input>
  3505. </nds>
  3506. [03/20/12 07:50:46.928]:Active Directory PT:Applying policy: %+C%14Clib-Audit-SendEntitlementsEvents-itp-V1%-C.
  3507. [03/20/12 07:50:46.928]:Active Directory PT: Applying to status #1.
  3508. [03/20/12 07:50:46.928]:Active Directory PT: Evaluating selection criteria for rule '00031200 - Account Create By Entitlement Grant'.
  3509. [03/20/12 07:50:46.928]:Active Directory PT: (if-operation equal "status") = TRUE.
  3510. [03/20/12 07:50:46.928]:Active Directory PT: (if-op-property 'accountAction' equal "accountCreateByEntitlementGrant") = FALSE.
  3511. [03/20/12 07:50:46.928]:Active Directory PT: Rule rejected.
  3512. [03/20/12 07:50:46.929]:Active Directory PT: Evaluating selection criteria for rule '00031201 - Account Delete By Entitlement Revoke'.
  3513. [03/20/12 07:50:46.929]:Active Directory PT: (if-operation equal "status") = TRUE.
  3514. [03/20/12 07:50:46.929]:Active Directory PT: (if-xpath true "./operation-data/entitlement-impl/@state = '0'") = FALSE.
  3515. [03/20/12 07:50:46.929]:Active Directory PT: (if-operation equal "status") = TRUE.
  3516. [03/20/12 07:50:46.930]:Active Directory PT: (if-op-property 'accountAction' equal "accountDeleteByEntitlementRevoke") = FALSE.
  3517. [03/20/12 07:50:46.930]:Active Directory PT: Rule rejected.
  3518. [03/20/12 07:50:46.930]:Active Directory PT: Evaluating selection criteria for rule '00031202 - Account Disable By Entitlement Revoke'.
  3519. [03/20/12 07:50:46.930]:Active Directory PT: (if-operation equal "status") = TRUE.
  3520. [03/20/12 07:50:46.930]:Active Directory PT: (if-op-property 'accountAction' equal "accountDisableByEntitlementRevoke") = FALSE.
  3521. [03/20/12 07:50:46.930]:Active Directory PT: Rule rejected.
  3522. [03/20/12 07:50:46.931]:Active Directory PT: Evaluating selection criteria for rule '00031203 - Account Enable By Entitlement Grant'.
  3523. [03/20/12 07:50:46.931]:Active Directory PT: (if-operation equal "status") = TRUE.
  3524. [03/20/12 07:50:46.931]:Active Directory PT: (if-op-property 'accountAction' equal "accountEnableByEntitlementGrant") = FALSE.
  3525. [03/20/12 07:50:46.931]:Active Directory PT: Rule rejected.
  3526. [03/20/12 07:50:46.931]:Active Directory PT: Evaluating selection criteria for rule 'Generate Audit Event'.
  3527. [03/20/12 07:50:46.931]:Active Directory PT: (if-operation equal "status") = TRUE.
  3528. [03/20/12 07:50:46.932]:Active Directory PT: (if-local-variable 'auditEventID' available) = FALSE.
  3529. [03/20/12 07:50:46.932]:Active Directory PT: Rule rejected.
  3530. [03/20/12 07:50:46.932]:Active Directory PT:Policy returned:
  3531. [03/20/12 07:50:46.932]:Active Directory PT:
  3532. <nds dtdversion="2.2">
  3533. <source>
  3534. <product version="3.6.10.4747">DirXML</product>
  3535. <contact>Novell, Inc.</contact>
  3536. </source>
  3537. <input>
  3538. <status level="success" type="heartbeat"/>
  3539. </input>
  3540. </nds>
  3541. [03/20/12 07:50:46.932]:Active Directory PT:Applying schema mapping policies to input.
  3542. [03/20/12 07:50:46.933]:Active Directory PT:Applying policy: %+C%14Csmp%-C.
  3543. [03/20/12 07:50:46.933]:Active Directory PT:Resolving association references.
  3544. [03/20/12 07:50:46.933]:Active Directory PT:Applying event transformation policies.
  3545. [03/20/12 07:50:46.933]:Active Directory PT:Applying policy: %+C%14Cpub-etp-EntitlementsImpl%-C.
  3546. [03/20/12 07:50:46.934]:Active Directory PT: Applying to status #1.
  3547. [03/20/12 07:50:46.934]:Active Directory PT: Evaluating selection criteria for rule 'Disallow user account delete when using entitlements'.
  3548. [03/20/12 07:50:46.934]:Active Directory PT: (if-operation equal "delete") = FALSE.
  3549. [03/20/12 07:50:46.934]:Active Directory PT: Rule rejected.
  3550. [03/20/12 07:50:46.934]:Active Directory PT: Evaluating selection criteria for rule 'Strip Login Disabled from operation (Disable Option)'.
  3551. [03/20/12 07:50:46.935]:Active Directory PT: (if-global-variable 'drv.entitlement.UserAccount' equal "true") = FALSE.
  3552. [03/20/12 07:50:46.935]:Active Directory PT: Rule rejected.
  3553. [03/20/12 07:50:46.935]:Active Directory PT:Policy returned:
  3554. [03/20/12 07:50:46.935]:Active Directory PT:
  3555. <nds dtdversion="2.2">
  3556. <source>
  3557. <product version="3.6.10.4747">DirXML</product>
  3558. <contact>Novell, Inc.</contact>
  3559. </source>
  3560. <input>
  3561. <status level="success" type="heartbeat"/>
  3562. </input>
  3563. </nds>
  3564. [03/20/12 07:50:46.935]:Active Directory PT:Applying policy: %+C%14Cpub-etp-HandleMovesAndRenames%-C.
  3565. [03/20/12 07:50:46.936]:Active Directory PT: Applying to status #1.
  3566. [03/20/12 07:50:46.936]:Active Directory PT: Evaluating selection criteria for rule 'break if not a move or rename'.
  3567. [03/20/12 07:50:46.936]:Active Directory PT: (if-operation not-match "move|rename") = TRUE.
  3568. [03/20/12 07:50:46.936]:Active Directory PT: Rule selected.
  3569. [03/20/12 07:50:46.936]:Active Directory PT: Applying rule 'break if not a move or rename'.
  3570. [03/20/12 07:50:46.936]:Active Directory PT: Action: do-break().
  3571. [03/20/12 07:50:46.936]:Active Directory PT:Policy returned:
  3572. [03/20/12 07:50:46.937]:Active Directory PT:
  3573. <nds dtdversion="2.2">
  3574. <source>
  3575. <product version="3.6.10.4747">DirXML</product>
  3576. <contact>Novell, Inc.</contact>
  3577. </source>
  3578. <input>
  3579. <status level="success" type="heartbeat"/>
  3580. </input>
  3581. </nds>
  3582. [03/20/12 07:50:46.937]:Active Directory PT:Applying publisher filter.
  3583. [03/20/12 07:50:46.937]:Active Directory PT:Publisher processing status for .
  3584. [03/20/12 07:50:46.938]:Active Directory PT:Applying command transformation policies.
  3585. [03/20/12 07:50:46.938]:Active Directory PT:Applying policy: %+C%14Cpub-ctp-UserNameMap%-C.
  3586. [03/20/12 07:50:46.938]:Active Directory PT: Applying to status #1.
  3587. [03/20/12 07:50:46.938]:Active Directory PT: Evaluating selection criteria for rule 'consider user objects when name mapping is enabled'.
  3588. [03/20/12 07:50:46.938]:Active Directory PT: (if-class-name not-equal "User") = TRUE.
  3589. [03/20/12 07:50:46.938]:Active Directory PT: Rule selected.
  3590. [03/20/12 07:50:46.939]:Active Directory PT: Applying rule 'consider user objects when name mapping is enabled'.
  3591. [03/20/12 07:50:46.939]:Active Directory PT: Action: do-break().
  3592. [03/20/12 07:50:46.939]:Active Directory PT:Policy returned:
  3593. [03/20/12 07:50:46.939]:Active Directory PT:
  3594. <nds dtdversion="2.2">
  3595. <source>
  3596. <product version="3.6.10.4747">DirXML</product>
  3597. <contact>Novell, Inc.</contact>
  3598. </source>
  3599. <input>
  3600. <status level="success" type="heartbeat"/>
  3601. </input>
  3602. </nds>
  3603. [03/20/12 07:50:46.939]:Active Directory PT:Applying policy: %+C%14Cpub-ctp%-C.
  3604. [03/20/12 07:50:46.940]:Active Directory PT: Applying to status #1.
  3605. [03/20/12 07:50:46.940]:Active Directory PT: Evaluating selection criteria for rule 'set cached context value on merge'.
  3606. [03/20/12 07:50:46.940]:Active Directory PT: (if-operation equal "modify") = FALSE.
  3607. [03/20/12 07:50:46.940]:Active Directory PT: Rule rejected.
  3608. [03/20/12 07:50:46.940]:Active Directory PT: Evaluating selection criteria for rule 'Set Equivalent To Me when adding object to a group'.
  3609. [03/20/12 07:50:46.940]:Active Directory PT: (if-class-name equal "Group") = FALSE.
  3610. [03/20/12 07:50:46.941]:Active Directory PT: Rule rejected.
  3611. [03/20/12 07:50:46.941]:Active Directory PT: Evaluating selection criteria for rule 'Remove Equivalent To Me when removing object from a group'.
  3612. [03/20/12 07:50:46.941]:Active Directory PT: (if-class-name equal "Group") = FALSE.
  3613. [03/20/12 07:50:46.941]:Active Directory PT: Rule rejected.
  3614. [03/20/12 07:50:46.941]:Active Directory PT: Evaluating selection criteria for rule 'remove managed attributes when object disassociated'.
  3615. [03/20/12 07:50:46.942]:Active Directory PT: (if-operation equal "remove-association") = FALSE.
  3616. [03/20/12 07:50:46.942]:Active Directory PT: Rule rejected.
  3617. [03/20/12 07:50:46.942]:Active Directory PT: Evaluating selection criteria for rule 'Prevent unassociated users from being removed from groups'.
  3618. [03/20/12 07:50:46.942]:Active Directory PT: (if-operation equal "modify") = FALSE.
  3619. [03/20/12 07:50:46.942]:Active Directory PT: Rule rejected.
  3620. [03/20/12 07:50:46.942]:Active Directory PT:Policy returned:
  3621. [03/20/12 07:50:46.943]:Active Directory PT:
  3622. <nds dtdversion="2.2">
  3623. <source>
  3624. <product version="3.6.10.4747">DirXML</product>
  3625. <contact>Novell, Inc.</contact>
  3626. </source>
  3627. <input>
  3628. <status level="success" type="heartbeat"/>
  3629. </input>
  3630. </nds>
  3631. [03/20/12 07:50:46.943]:Active Directory PT:Applying XSLT policy: %+C%14Cpub-cts%-C.
  3632. [03/20/12 07:50:46.944]:Active Directory PT:Policy returned:
  3633. [03/20/12 07:50:46.944]:Active Directory PT:
  3634. <nds dtdversion="2.2">
  3635. <source>
  3636. <product version="3.6.10.4747">DirXML</product>
  3637. <contact>Novell, Inc.</contact>
  3638. </source>
  3639. <input>
  3640. <status level="success" type="heartbeat"/>
  3641. </input>
  3642. </nds>
  3643. [03/20/12 07:50:46.944]:Active Directory PT:Applying policy: %+C%14CPassword(Pub)-Default Password Policy%-C.
  3644. [03/20/12 07:50:46.945]:Active Directory PT: Applying to status #1.
  3645. [03/20/12 07:50:46.945]:Active Directory PT: Evaluating selection criteria for rule 'On User add, provide default password of @Dirxml1 if no password exists'.
  3646. [03/20/12 07:50:46.945]:Active Directory PT: (if-operation equal "add") = FALSE.
  3647. [03/20/12 07:50:46.945]:Active Directory PT: Rule rejected.
  3648. [03/20/12 07:50:46.945]:Active Directory PT:Policy returned:
  3649. [03/20/12 07:50:46.945]:Active Directory PT:
  3650. <nds dtdversion="2.2">
  3651. <source>
  3652. <product version="3.6.10.4747">DirXML</product>
  3653. <contact>Novell, Inc.</contact>
  3654. </source>
  3655. <input>
  3656. <status level="success" type="heartbeat"/>
  3657. </input>
  3658. </nds>
  3659. [03/20/12 07:50:46.946]:Active Directory PT:Applying policy: %+C%14CPassword(Pub)-Check Password GCV%-C.
  3660. [03/20/12 07:50:46.946]:Active Directory PT: Applying to status #1.
  3661. [03/20/12 07:50:46.946]:Active Directory PT: Evaluating selection criteria for rule 'Block publishing passwords to Identity Manager data store when adding a object'.
  3662. [03/20/12 07:50:46.946]:Active Directory PT: (if-global-variable 'enable-password-publish' equal "false") = FALSE.
  3663. [03/20/12 07:50:46.947]:Active Directory PT: Rule rejected.
  3664. [03/20/12 07:50:46.947]:Active Directory PT: Evaluating selection criteria for rule 'Block sending modify-password changes to the Identity Manager data store'.
  3665. [03/20/12 07:50:46.947]:Active Directory PT: (if-global-variable 'enable-password-publish' equal "false") = FALSE.
  3666. [03/20/12 07:50:46.947]:Active Directory PT: Rule rejected.
  3667. [03/20/12 07:50:46.947]:Active Directory PT:Policy returned:
  3668. [03/20/12 07:50:46.947]:Active Directory PT:
  3669. <nds dtdversion="2.2">
  3670. <source>
  3671. <product version="3.6.10.4747">DirXML</product>
  3672. <contact>Novell, Inc.</contact>
  3673. </source>
  3674. <input>
  3675. <status level="success" type="heartbeat"/>
  3676. </input>
  3677. </nds>
  3678. [03/20/12 07:50:46.948]:Active Directory PT:Applying policy: %+C%14CPassword(Pub)-Publish Distribution Password%-C.
  3679. [03/20/12 07:50:46.948]:Active Directory PT: Applying to status #1.
  3680. [03/20/12 07:50:46.948]:Active Directory PT: Evaluating selection criteria for rule 'Add nspmDistributionAttribute attribute to add operation'.
  3681. [03/20/12 07:50:46.948]:Active Directory PT: (if-global-variable 'publish-password-to-dp' equal "true") = FALSE.
  3682. [03/20/12 07:50:46.949]:Active Directory PT: Rule rejected.
  3683. [03/20/12 07:50:46.949]:Active Directory PT: Evaluating selection criteria for rule 'Change modify-password operations to a modify'.
  3684. [03/20/12 07:50:46.949]:Active Directory PT: (if-global-variable 'publish-password-to-dp' equal "true") = FALSE.
  3685. [03/20/12 07:50:46.949]:Active Directory PT: Rule rejected.
  3686. [03/20/12 07:50:46.949]:Active Directory PT:Policy returned:
  3687. [03/20/12 07:50:46.949]:Active Directory PT:
  3688. <nds dtdversion="2.2">
  3689. <source>
  3690. <product version="3.6.10.4747">DirXML</product>
  3691. <contact>Novell, Inc.</contact>
  3692. </source>
  3693. <input>
  3694. <status level="success" type="heartbeat"/>
  3695. </input>
  3696. </nds>
  3697. [03/20/12 07:50:46.950]:Active Directory PT:Applying policy: %+C%14CPassword(Pub)-Publish NDS Password%-C.
  3698. [03/20/12 07:50:46.950]:Active Directory PT: Applying to status #1.
  3699. [03/20/12 07:50:46.950]:Active Directory PT: Evaluating selection criteria for rule 'Block publishing passwords to NDS password'.
  3700. [03/20/12 07:50:46.950]:Active Directory PT: (if-global-variable 'publish-password-to-nds' equal "false") = FALSE.
  3701. [03/20/12 07:50:46.950]:Active Directory PT: Rule rejected.
  3702. [03/20/12 07:50:46.951]:Active Directory PT: Evaluating selection criteria for rule 'Block sending modify-password changes to the NDS password'.
  3703. [03/20/12 07:50:46.951]:Active Directory PT: (if-global-variable 'publish-password-to-nds' equal "false") = FALSE.
  3704. [03/20/12 07:50:46.951]:Active Directory PT: Rule rejected.
  3705. [03/20/12 07:50:46.951]:Active Directory PT:Policy returned:
  3706. [03/20/12 07:50:46.951]:Active Directory PT:
  3707. <nds dtdversion="2.2">
  3708. <source>
  3709. <product version="3.6.10.4747">DirXML</product>
  3710. <contact>Novell, Inc.</contact>
  3711. </source>
  3712. <input>
  3713. <status level="success" type="heartbeat"/>
  3714. </input>
  3715. </nds>
  3716. [03/20/12 07:50:46.952]:Active Directory PT:Applying policy: %+C%14CPassword(Pub)-Add Password Payload%-C.
  3717. [03/20/12 07:50:46.952]:Active Directory PT: Applying to status #1.
  3718. [03/20/12 07:50:46.952]:Active Directory PT: Evaluating selection criteria for rule 'Add operation-data element to password operations'.
  3719. [03/20/12 07:50:46.952]:Active Directory PT: (if-operation equal "add") = FALSE.
  3720. [03/20/12 07:50:46.952]:Active Directory PT: (if-operation equal "add") = FALSE.
  3721. [03/20/12 07:50:46.952]:Active Directory PT: (if-operation equal "modify-password") = FALSE.
  3722. [03/20/12 07:50:46.953]:Active Directory PT: (if-operation equal "modify") = FALSE.
  3723. [03/20/12 07:50:46.953]:Active Directory PT: Rule rejected.
  3724. [03/20/12 07:50:46.953]:Active Directory PT: Evaluating selection criteria for rule 'Add payload data to password operations'.
  3725. [03/20/12 07:50:46.953]:Active Directory PT: (if-operation equal "addPayloadToPassword") = FALSE.
  3726. [03/20/12 07:50:46.954]:Active Directory PT: (if-operation equal "add") = FALSE.
  3727. [03/20/12 07:50:46.954]:Active Directory PT: (if-operation equal "modify-password") = FALSE.
  3728. [03/20/12 07:50:46.954]:Active Directory PT: (if-operation equal "modify") = FALSE.
  3729. [03/20/12 07:50:46.954]:Active Directory PT: Rule rejected.
  3730. [03/20/12 07:50:46.954]:Active Directory PT:Policy returned:
  3731. [03/20/12 07:50:46.954]:Active Directory PT:
  3732. <nds dtdversion="2.2">
  3733. <source>
  3734. <product version="3.6.10.4747">DirXML</product>
  3735. <contact>Novell, Inc.</contact>
  3736. </source>
  3737. <input>
  3738. <status level="success" type="heartbeat"/>
  3739. </input>
  3740. </nds>
  3741. [03/20/12 07:50:46.955]:Active Directory PT:Applying policy: %+C%14Clib-AccountTracking-WriteAccountsOnAdds-pub-ctp-V1%-C.
  3742. [03/20/12 07:50:46.955]:Active Directory PT: Applying to status #1.
  3743. [03/20/12 07:50:46.955]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - disregard policy if disabled'.
  3744. [03/20/12 07:50:46.955]:Active Directory PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  3745. [03/20/12 07:50:46.955]:Active Directory PT: Rule rejected.
  3746. [03/20/12 07:50:46.955]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - on add operation add Dirxml-Accounts'.
  3747. [03/20/12 07:50:46.956]:Active Directory PT: (if-operation equal "add") = FALSE.
  3748. [03/20/12 07:50:46.956]:Active Directory PT: Rule rejected.
  3749. [03/20/12 07:50:46.956]:Active Directory PT:Policy returned:
  3750. [03/20/12 07:50:46.956]:Active Directory PT:
  3751. <nds dtdversion="2.2">
  3752. <source>
  3753. <product version="3.6.10.4747">DirXML</product>
  3754. <contact>Novell, Inc.</contact>
  3755. </source>
  3756. <input>
  3757. <status level="success" type="heartbeat"/>
  3758. </input>
  3759. </nds>
  3760. [03/20/12 07:50:46.956]:Active Directory PT:Filtering out notification-only attributes.
  3761. [03/20/12 07:50:46.957]:Active Directory PT:Pumping XDS to eDirectory.
  3762. [03/20/12 07:50:46.957]:Active Directory PT:Performing operation status for .
  3763. [03/20/12 07:50:46.957]:Active Directory PT:
  3764. DirXML Log Event -------------------
  3765. Driver: \EDIR2ADLAB\fdny\AD-TEST\Active Directory
  3766. Channel: Publisher
  3767. Status: Success
  3768. [03/20/12 07:50:46.957]:Active Directory PT:Fixing up association references.
  3769. [03/20/12 07:50:46.958]:Active Directory PT:Applying schema mapping policies to output.
  3770. [03/20/12 07:50:46.958]:Active Directory PT:Applying policy: %+C%14Csmp%-C.
  3771. [03/20/12 07:50:46.958]:Active Directory PT:Applying output transformation policies.
  3772. [03/20/12 07:50:46.958]:Active Directory PT:Applying policy: %+C%14Cotp%-C.
  3773. [03/20/12 07:50:46.958]:Active Directory PT: Applying to status #1.
  3774. [03/20/12 07:50:46.958]:Active Directory PT: Evaluating selection criteria for rule 'Street Address: Convert LF to CR-LF'.
  3775. [03/20/12 07:50:46.959]:Active Directory PT: Rule selected.
  3776. [03/20/12 07:50:46.959]:Active Directory PT: Applying rule 'Street Address: Convert LF to CR-LF'.
  3777. [03/20/12 07:50:46.959]:Active Directory PT: Action: do-reformat-op-attr("streetAddress",token-replace-all("[^\r]\n","\r\n",token-local-variable("current-value"))).
  3778. [03/20/12 07:50:46.959]:Active Directory PT: Evaluating selection criteria for rule 'logonHours: Convert to Active Directory form'.
  3779. [03/20/12 07:50:46.959]:Active Directory PT: Rule selected.
  3780. [03/20/12 07:50:46.959]:Active Directory PT: Applying rule 'logonHours: Convert to Active Directory form'.
  3781. [03/20/12 07:50:46.960]:Active Directory PT: Action: do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2ADLenient($current-value)")).
  3782. [03/20/12 07:50:46.960]:Active Directory PT: Evaluating selection criteria for rule 'accountExpires: Convert to Active Directory form'.
  3783. [03/20/12 07:50:46.960]:Active Directory PT: (if-op-attr 'accountExpires' changing) = FALSE.
  3784. [03/20/12 07:50:46.960]:Active Directory PT: Rule rejected.
  3785. [03/20/12 07:50:46.960]:Active Directory PT: Evaluating selection criteria for rule 'lockoutTime: Convert to Active Directory form'.
  3786. [03/20/12 07:50:46.961]:Active Directory PT: Rule selected.
  3787. [03/20/12 07:50:46.961]:Active Directory PT: Applying rule 'lockoutTime: Convert to Active Directory form'.
  3788. [03/20/12 07:50:46.961]:Active Directory PT: Action: do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateEpoch2FileTime($current-value)")).
  3789. [03/20/12 07:50:46.961]:Active Directory PT: Evaluating selection criteria for rule 'Add: User - convert multi-valued Telephone to single value'.
  3790. [03/20/12 07:50:46.961]:Active Directory PT: (if-operation equal "add") = FALSE.
  3791. [03/20/12 07:50:46.962]:Active Directory PT: Rule rejected.
  3792. [03/20/12 07:50:46.962]:Active Directory PT: Evaluating selection criteria for rule 'update Active Directory logon name'.
  3793. [03/20/12 07:50:46.962]:Active Directory PT: (if-xpath true "self::status[@level = 'success']/operation-data/windows-2000-logon-name") = FALSE.
  3794. [03/20/12 07:50:46.962]:Active Directory PT: Rule rejected.
  3795. [03/20/12 07:50:46.962]:Active Directory PT: Evaluating selection criteria for rule 'Exchange: Remove HomeMDB when disabled'.
  3796. [03/20/12 07:50:46.962]:Active Directory PT: (if-global-variable 'drv.exchMailboxMethod' equal "disabled") = TRUE.
  3797. [03/20/12 07:50:46.963]:Active Directory PT: Rule selected.
  3798. [03/20/12 07:50:46.963]:Active Directory PT: Applying rule 'Exchange: Remove HomeMDB when disabled'.
  3799. [03/20/12 07:50:46.963]:Active Directory PT: Action: do-strip-op-attr("homeMDB").
  3800. [03/20/12 07:50:46.963]:Active Directory PT:Policy returned:
  3801. [03/20/12 07:50:46.963]:Active Directory PT:
  3802. <nds dtdversion="3.5" ndsversion="8.x">
  3803. <source>
  3804. <product version="3.6.10.4747">DirXML</product>
  3805. <contact>Novell, Inc.</contact>
  3806. </source>
  3807. <output>
  3808. <status event-id="0" level="success"></status>
  3809. </output>
  3810. </nds>
  3811. [03/20/12 07:50:46.964]:Active Directory PT:Applying policy: %+C%14CPassword(Sub)-Pub Email Notifications%-C.
  3812. [03/20/12 07:50:46.964]:Active Directory PT: Applying to status #1.
  3813. [03/20/12 07:50:46.964]:Active Directory PT: Evaluating selection criteria for rule 'Send e-mail for a failed publish password operation'.
  3814. [03/20/12 07:50:46.964]:Active Directory PT: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  3815. [03/20/12 07:50:46.964]:Active Directory PT: (if-operation equal "status") = TRUE.
  3816. [03/20/12 07:50:46.965]:Active Directory PT: (if-xpath true "self::status[@level != 'success']/operation-data/password-publish-status") = FALSE.
  3817. [03/20/12 07:50:46.965]:Active Directory PT: Rule rejected.
  3818. [03/20/12 07:50:46.965]:Active Directory PT:Policy returned:
  3819. [03/20/12 07:50:46.965]:Active Directory PT:
  3820. <nds dtdversion="3.5" ndsversion="8.x">
  3821. <source>
  3822. <product version="3.6.10.4747">DirXML</product>
  3823. <contact>Novell, Inc.</contact>
  3824. </source>
  3825. <output>
  3826. <status event-id="0" level="success"></status>
  3827. </output>
  3828. </nds>
  3829. [03/20/12 07:50:46.966]:Active Directory PT:Applying policy: %+C%14Clib-CredProv-ConvertPayload-otp-V1%-C.
  3830. [03/20/12 07:50:46.966]:Active Directory PT: Applying to status #1.
  3831. [03/20/12 07:50:46.966]:Active Directory PT: Evaluating selection criteria for rule 'Is credential provisioning enabled? Are there any custom payloads?'.
  3832. [03/20/12 07:50:46.966]:Active Directory PT: Rule selected.
  3833. [03/20/12 07:50:46.966]:Active Directory PT: Applying rule 'Is credential provisioning enabled? Are there any custom payloads?'.
  3834. [03/20/12 07:50:46.966]:Active Directory PT: Action: do-if().
  3835. [03/20/12 07:50:46.967]:Active Directory PT: Evaluating conditions.
  3836. [03/20/12 07:50:46.967]:Active Directory PT: (if-global-variable 'credprov.enable' not-equal "true") = TRUE.
  3837. [03/20/12 07:50:46.967]:Active Directory PT: Performing if actions.
  3838. [03/20/12 07:50:46.967]:Active Directory PT: Action: do-break().
  3839. [03/20/12 07:50:46.967]:Active Directory PT:Policy returned:
  3840. [03/20/12 07:50:46.967]:Active Directory PT:
  3841. <nds dtdversion="3.5" ndsversion="8.x">
  3842. <source>
  3843. <product version="3.6.10.4747">DirXML</product>
  3844. <contact>Novell, Inc.</contact>
  3845. </source>
  3846. <output>
  3847. <status event-id="0" level="success"></status>
  3848. </output>
  3849. </nds>
  3850. [03/20/12 07:50:46.968]:Active Directory PT:Applying policy: %+C%14Clib-AccountTracking-Subscribe-otp-V1%-C.
  3851. [03/20/12 07:50:46.968]:Active Directory PT: Applying to status #1.
  3852. [03/20/12 07:50:46.968]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled or wrong object class'.
  3853. [03/20/12 07:50:46.968]:Active Directory PT: Rule selected.
  3854. [03/20/12 07:50:46.968]:Active Directory PT: Applying rule 'AccountTracking - disregard if disabled or wrong object class'.
  3855. [03/20/12 07:50:46.969]:Active Directory PT: Action: do-if().
  3856. [03/20/12 07:50:46.969]:Active Directory PT: Evaluating conditions.
  3857. [03/20/12 07:50:46.969]:Active Directory PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  3858. [03/20/12 07:50:46.969]:Active Directory PT: Performing else actions.
  3859. [03/20/12 07:50:46.969]:Active Directory PT: Action: do-for-each(arg-node-set(token-global-variable("drv.acctTrk.objectClass"))).
  3860. [03/20/12 07:50:46.970]:Active Directory PT: arg-node-set(token-global-variable("drv.acctTrk.objectClass"))
  3861. [03/20/12 07:50:46.970]:Active Directory PT: token-global-variable("drv.acctTrk.objectClass")
  3862. [03/20/12 07:50:46.970]:Active Directory PT: Token Value: {"user"}.
  3863. [03/20/12 07:50:46.970]:Active Directory PT: Arg Value: {"user"}.
  3864. [03/20/12 07:50:46.970]:Active Directory PT: Performing actions for local-variable(current-node) = "user".
  3865. [03/20/12 07:50:46.970]:Active Directory PT: Action: do-if().
  3866. [03/20/12 07:50:46.971]:Active Directory PT: Evaluating conditions.
  3867. [03/20/12 07:50:46.971]:Active Directory PT: (if-class-name equal "$current-node$") = FALSE.
  3868. [03/20/12 07:50:46.971]:Active Directory PT: Performing else actions.
  3869. [03/20/12 07:50:46.971]:Active Directory PT: Action: do-if().
  3870. [03/20/12 07:50:46.971]:Active Directory PT: Evaluating conditions.
  3871. [03/20/12 07:50:46.971]:Active Directory PT: (if-local-variable 'pass' not-available) = TRUE.
  3872. [03/20/12 07:50:46.971]:Active Directory PT: Performing if actions.
  3873. [03/20/12 07:50:46.972]:Active Directory PT: Action: do-break().
  3874. [03/20/12 07:50:46.972]:Active Directory PT:Policy returned:
  3875. [03/20/12 07:50:46.972]:Active Directory PT:
  3876. <nds dtdversion="3.5" ndsversion="8.x">
  3877. <source>
  3878. <product version="3.6.10.4747">DirXML</product>
  3879. <contact>Novell, Inc.</contact>
  3880. </source>
  3881. <output>
  3882. <status event-id="0" level="success"></status>
  3883. </output>
  3884. </nds>
  3885. [03/20/12 07:50:46.972]:Active Directory PT:
  3886. <nds dtdversion="3.5" ndsversion="8.x">
  3887. <source>
  3888. <product version="3.6.10.4747">DirXML</product>
  3889. <contact>Novell, Inc.</contact>
  3890. </source>
  3891. <output>
  3892. <status event-id="0" level="success"></status>
  3893. </output>
  3894. </nds>
  3895. [03/20/12 07:50:46.973]:Active Directory PT:Remote Interface Driver: Sending...
  3896. [03/20/12 07:50:46.973]:Active Directory PT:
  3897. <nds dtdversion="3.5" ndsversion="8.x">
  3898. <source>
  3899. <product version="3.6.10.4747">DirXML</product>
  3900. <contact>Novell, Inc.</contact>
  3901. </source>
  3902. <output>
  3903. <status event-id="0" level="success"></status>
  3904. </output>
  3905. </nds>
  3906. [03/20/12 07:50:46.973]:Active Directory PT:Remote Interface Driver: Document sent.
  3907. [03/20/12 07:51:46.886]:Active Directory :Remote Interface Driver: Received.
  3908. [03/20/12 07:51:46.886]:Active Directory :
  3909. <nds dtdversion="2.2">
  3910. <source>
  3911. <product version="3.6.10.4747">DirXML</product>
  3912. <contact>Novell, Inc.</contact>
  3913. </source>
  3914. <input>
  3915. <status level="success" type="heartbeat"/>
  3916. </input>
  3917. </nds>
  3918. [03/20/12 07:51:46.887]:Active Directory :Remote Interface Driver: Received document for publisher channel
  3919. [03/20/12 07:51:46.887]:Active Directory :Remote Interface Driver: Waiting for receive...
  3920. [03/20/12 07:51:46.887]:Active Directory PT:Receiving DOM document from application.
  3921. [03/20/12 07:51:46.887]:Active Directory PT:
  3922. <nds dtdversion="2.2">
  3923. <source>
  3924. <product version="3.6.10.4747">DirXML</product>
  3925. <contact>Novell, Inc.</contact>
  3926. </source>
  3927. <input>
  3928. <status level="success" type="heartbeat"/>
  3929. </input>
  3930. </nds>
  3931. [03/20/12 07:51:46.888]:Active Directory PT:Applying input transformation policies.
  3932. [03/20/12 07:51:46.888]:Active Directory PT:Applying policy: %+C%14Clib-AccountTracking-Publish-itp-V1%-C.
  3933. [03/20/12 07:51:46.888]:Active Directory PT: Applying to status #1.
  3934. [03/20/12 07:51:46.888]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled or wrong object class'.
  3935. [03/20/12 07:51:46.888]:Active Directory PT: Rule selected.
  3936. [03/20/12 07:51:46.889]:Active Directory PT: Applying rule 'AccountTracking - disregard if disabled or wrong object class'.
  3937. [03/20/12 07:51:46.889]:Active Directory PT: Action: do-if().
  3938. [03/20/12 07:51:46.889]:Active Directory PT: Evaluating conditions.
  3939. [03/20/12 07:51:46.889]:Active Directory PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  3940. [03/20/12 07:51:46.889]:Active Directory PT: Performing else actions.
  3941. [03/20/12 07:51:46.889]:Active Directory PT: Action: do-if().
  3942. [03/20/12 07:51:46.889]:Active Directory PT: Evaluating conditions.
  3943. [03/20/12 07:51:46.890]:Active Directory PT: (if-class-name available) = FALSE.
  3944. [03/20/12 07:51:46.890]:Active Directory PT: Performing else actions.
  3945. [03/20/12 07:51:46.890]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - on add-association sync the operation-properties to status operations'.
  3946. [03/20/12 07:51:46.890]:Active Directory PT: (if-operation equal "add-association") = FALSE.
  3947. [03/20/12 07:51:46.890]:Active Directory PT: Rule rejected.
  3948. [03/20/12 07:51:46.890]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - Query for destination DN using Association'.
  3949. [03/20/12 07:51:46.891]:Active Directory PT: (if-operation match "modify|delete|move|rename") = FALSE.
  3950. [03/20/12 07:51:46.891]:Active Directory PT: Rule rejected.
  3951. [03/20/12 07:51:46.891]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - add interested properties to current doc for future use.'.
  3952. [03/20/12 07:51:46.891]:Active Directory PT: (if-operation match "add|modify|delete|rename|move|status") = TRUE.
  3953. [03/20/12 07:51:46.891]:Active Directory PT: Rule selected.
  3954. [03/20/12 07:51:46.891]:Active Directory PT: Applying rule 'AccountTracking - add interested properties to current doc for future use.'.
  3955. [03/20/12 07:51:46.892]:Active Directory PT: Action: do-for-each(arg-node-set(token-global-variable("drv.acctTrk.identifiers"))).
  3956. [03/20/12 07:51:46.892]:Active Directory PT: arg-node-set(token-global-variable("drv.acctTrk.identifiers"))
  3957. [03/20/12 07:51:46.892]:Active Directory PT: token-global-variable("drv.acctTrk.identifiers")
  3958. [03/20/12 07:51:46.892]:Active Directory PT: Token Value: {"sAMAccountName","userPrincipalName","LDAPDN","association"}.
  3959. [03/20/12 07:51:46.892]:Active Directory PT: Arg Value: {"sAMAccountName","userPrincipalName","LDAPDN","association"}.
  3960. [03/20/12 07:51:46.893]:Active Directory PT: Performing actions for local-variable(current-node) = "sAMAccountName".
  3961. [03/20/12 07:51:46.893]:Active Directory PT: Action: do-if().
  3962. [03/20/12 07:51:46.893]:Active Directory PT: Evaluating conditions.
  3963. [03/20/12 07:51:46.893]:Active Directory PT: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  3964. [03/20/12 07:51:46.893]:Active Directory PT: Performing else actions.
  3965. [03/20/12 07:51:46.893]:Active Directory PT: Action: do-if().
  3966. [03/20/12 07:51:46.893]:Active Directory PT: Evaluating conditions.
  3967. [03/20/12 07:51:46.894]:Active Directory PT: (if-local-variable 'current-node' equal "association") = FALSE.
  3968. [03/20/12 07:51:46.894]:Active Directory PT: Performing else actions.
  3969. [03/20/12 07:51:46.894]:Active Directory PT: Action: do-if().
  3970. [03/20/12 07:51:46.894]:Active Directory PT: Evaluating conditions.
  3971. [03/20/12 07:51:46.894]:Active Directory PT: Expanded variable reference '$current-node$' to 'sAMAccountName'.
  3972. [03/20/12 07:51:46.894]:Active Directory PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  3973. [03/20/12 07:51:46.895]:Active Directory PT: Expanded variable reference '$current-node$' to 'sAMAccountName'.
  3974. [03/20/12 07:51:46.895]:Active Directory PT: (if-op-attr '$current-node$' available) = FALSE.
  3975. [03/20/12 07:51:46.895]:Active Directory PT: Performing else actions.
  3976. [03/20/12 07:51:46.895]:Active Directory PT: Performing actions for local-variable(current-node) = "userPrincipalName".
  3977. [03/20/12 07:51:46.895]:Active Directory PT: Action: do-if().
  3978. [03/20/12 07:51:46.895]:Active Directory PT: Evaluating conditions.
  3979. [03/20/12 07:51:46.896]:Active Directory PT: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  3980. [03/20/12 07:51:46.896]:Active Directory PT: Performing else actions.
  3981. [03/20/12 07:51:46.896]:Active Directory PT: Action: do-if().
  3982. [03/20/12 07:51:46.896]:Active Directory PT: Evaluating conditions.
  3983. [03/20/12 07:51:46.896]:Active Directory PT: (if-local-variable 'current-node' equal "association") = FALSE.
  3984. [03/20/12 07:51:46.896]:Active Directory PT: Performing else actions.
  3985. [03/20/12 07:51:46.896]:Active Directory PT: Action: do-if().
  3986. [03/20/12 07:51:46.897]:Active Directory PT: Evaluating conditions.
  3987. [03/20/12 07:51:46.897]:Active Directory PT: Expanded variable reference '$current-node$' to 'userPrincipalName'.
  3988. [03/20/12 07:51:46.897]:Active Directory PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  3989. [03/20/12 07:51:46.897]:Active Directory PT: Expanded variable reference '$current-node$' to 'userPrincipalName'.
  3990. [03/20/12 07:51:46.897]:Active Directory PT: (if-op-attr '$current-node$' available) = FALSE.
  3991. [03/20/12 07:51:46.897]:Active Directory PT: Performing else actions.
  3992. [03/20/12 07:51:46.898]:Active Directory PT: Performing actions for local-variable(current-node) = "LDAPDN".
  3993. [03/20/12 07:51:46.898]:Active Directory PT: Action: do-if().
  3994. [03/20/12 07:51:46.898]:Active Directory PT: Evaluating conditions.
  3995. [03/20/12 07:51:46.898]:Active Directory PT: (if-local-variable 'current-node' equal "LDAPDN") = TRUE.
  3996. [03/20/12 07:51:46.898]:Active Directory PT: Expanded variable reference '$current-node$' to 'LDAPDN'.
  3997. [03/20/12 07:51:46.898]:Active Directory PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  3998. [03/20/12 07:51:46.899]:Active Directory PT: (if-src-dn available) = FALSE.
  3999. [03/20/12 07:51:46.899]:Active Directory PT: Performing else actions.
  4000. [03/20/12 07:51:46.899]:Active Directory PT: Action: do-if().
  4001. [03/20/12 07:51:46.899]:Active Directory PT: Evaluating conditions.
  4002. [03/20/12 07:51:46.899]:Active Directory PT: (if-local-variable 'current-node' equal "association") = FALSE.
  4003. [03/20/12 07:51:46.899]:Active Directory PT: Performing else actions.
  4004. [03/20/12 07:51:46.899]:Active Directory PT: Action: do-if().
  4005. [03/20/12 07:51:46.900]:Active Directory PT: Evaluating conditions.
  4006. [03/20/12 07:51:46.900]:Active Directory PT: Expanded variable reference '$current-node$' to 'LDAPDN'.
  4007. [03/20/12 07:51:46.900]:Active Directory PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  4008. [03/20/12 07:51:46.900]:Active Directory PT: Expanded variable reference '$current-node$' to 'LDAPDN'.
  4009. [03/20/12 07:51:46.900]:Active Directory PT: (if-op-attr '$current-node$' available) = FALSE.
  4010. [03/20/12 07:51:46.901]:Active Directory PT: Performing else actions.
  4011. [03/20/12 07:51:46.901]:Active Directory PT: Performing actions for local-variable(current-node) = "association".
  4012. [03/20/12 07:51:46.901]:Active Directory PT: Action: do-if().
  4013. [03/20/12 07:51:46.901]:Active Directory PT: Evaluating conditions.
  4014. [03/20/12 07:51:46.901]:Active Directory PT: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  4015. [03/20/12 07:51:46.901]:Active Directory PT: Performing else actions.
  4016. [03/20/12 07:51:46.901]:Active Directory PT: Action: do-if().
  4017. [03/20/12 07:51:46.902]:Active Directory PT: Evaluating conditions.
  4018. [03/20/12 07:51:46.902]:Active Directory PT: (if-local-variable 'current-node' equal "association") = TRUE.
  4019. [03/20/12 07:51:46.902]:Active Directory PT: Expanded variable reference '$current-node$' to 'association'.
  4020. [03/20/12 07:51:46.902]:Active Directory PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  4021. [03/20/12 07:51:46.902]:Active Directory PT: (if-association available) = FALSE.
  4022. [03/20/12 07:51:46.902]:Active Directory PT: Performing else actions.
  4023. [03/20/12 07:51:46.903]:Active Directory PT: Action: do-if().
  4024. [03/20/12 07:51:46.903]:Active Directory PT: Evaluating conditions.
  4025. [03/20/12 07:51:46.903]:Active Directory PT: Expanded variable reference '$current-node$' to 'association'.
  4026. [03/20/12 07:51:46.903]:Active Directory PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  4027. [03/20/12 07:51:46.903]:Active Directory PT: Expanded variable reference '$current-node$' to 'association'.
  4028. [03/20/12 07:51:46.903]:Active Directory PT: (if-op-attr '$current-node$' available) = FALSE.
  4029. [03/20/12 07:51:46.904]:Active Directory PT: Performing else actions.
  4030. [03/20/12 07:51:46.904]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - Initialize status properties on published events'.
  4031. [03/20/12 07:51:46.904]:Active Directory PT: (if-operation match "add|modify|delete|rename|move") = FALSE.
  4032. [03/20/12 07:51:46.904]:Active Directory PT: Rule rejected.
  4033. [03/20/12 07:51:46.904]:Active Directory PT:Policy returned:
  4034. [03/20/12 07:51:46.904]:Active Directory PT:
  4035. <nds dtdversion="2.2">
  4036. <source>
  4037. <product version="3.6.10.4747">DirXML</product>
  4038. <contact>Novell, Inc.</contact>
  4039. </source>
  4040. <input>
  4041. <status level="success" type="heartbeat"/>
  4042. </input>
  4043. </nds>
  4044. [03/20/12 07:51:46.905]:Active Directory PT:Applying policy: %+C%14Clib-AccountTracking-WriteAccounts-itp-V1%-C.
  4045. [03/20/12 07:51:46.905]:Active Directory PT: Applying to status #1.
  4046. [03/20/12 07:51:46.905]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled'.
  4047. [03/20/12 07:51:46.905]:Active Directory PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  4048. [03/20/12 07:51:46.905]:Active Directory PT: Rule rejected.
  4049. [03/20/12 07:51:46.906]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - query DirXML-Accounts Attribute'.
  4050. [03/20/12 07:51:46.906]:Active Directory PT: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  4051. [03/20/12 07:51:46.906]:Active Directory PT: Rule rejected.
  4052. [03/20/12 07:51:46.906]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - remove Dirxml-Account values on delete operation'.
  4053. [03/20/12 07:51:46.906]:Active Directory PT: (if-operation match "delete|remove-association") = FALSE.
  4054. [03/20/12 07:51:46.906]:Active Directory PT: (if-operation equal "status") = TRUE.
  4055. [03/20/12 07:51:46.907]:Active Directory PT: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  4056. [03/20/12 07:51:46.907]:Active Directory PT: Rule rejected.
  4057. [03/20/12 07:51:46.907]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - update DirXMLAccounts attribute'.
  4058. [03/20/12 07:51:46.907]:Active Directory PT: (if-op-property 'AccountTracking-Operation' not-available) = TRUE.
  4059. [03/20/12 07:51:46.907]:Active Directory PT: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  4060. [03/20/12 07:51:46.907]:Active Directory PT: (if-operation equal "status") = TRUE.
  4061. [03/20/12 07:51:46.908]:Active Directory PT: (if-xpath true "./@level='success'") = TRUE.
  4062. [03/20/12 07:51:46.908]:Active Directory PT: (if-op-property 'AccountTracking-Operation' available) = FALSE.
  4063. [03/20/12 07:51:46.908]:Active Directory PT: Rule rejected.
  4064. [03/20/12 07:51:46.908]:Active Directory PT:Policy returned:
  4065. [03/20/12 07:51:46.908]:Active Directory PT:
  4066. <nds dtdversion="2.2">
  4067. <source>
  4068. <product version="3.6.10.4747">DirXML</product>
  4069. <contact>Novell, Inc.</contact>
  4070. </source>
  4071. <input>
  4072. <status level="success" type="heartbeat"/>
  4073. </input>
  4074. </nds>
  4075. [03/20/12 07:51:46.908]:Active Directory PT:Applying policy: %+C%14Citp%-C.
  4076. [03/20/12 07:51:46.909]:Active Directory PT: Applying to status #1.
  4077. [03/20/12 07:51:46.909]:Active Directory PT: Evaluating selection criteria for rule 'streetAddress: Convert CR-LF to LF'.
  4078. [03/20/12 07:51:46.909]:Active Directory PT: Rule selected.
  4079. [03/20/12 07:51:46.909]:Active Directory PT: Applying rule 'streetAddress: Convert CR-LF to LF'.
  4080. [03/20/12 07:51:46.909]:Active Directory PT: Action: do-reformat-op-attr("streetAddress",token-replace-all("\r\n","\r",token-local-variable("current-value"))).
  4081. [03/20/12 07:51:46.909]:Active Directory PT: Evaluating selection criteria for rule 'logonHours: Convert to Login Allowed Time Map form'.
  4082. [03/20/12 07:51:46.910]:Active Directory PT: Rule selected.
  4083. [03/20/12 07:51:46.910]:Active Directory PT: Applying rule 'logonHours: Convert to Login Allowed Time Map form'.
  4084. [03/20/12 07:51:46.910]:Active Directory PT: Action: do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2eDir($current-value)")).
  4085. [03/20/12 07:51:46.910]:Active Directory PT: Evaluating selection criteria for rule 'accountExpires: Convert to Identity Vault time format'.
  4086. [03/20/12 07:51:46.910]:Active Directory PT: Rule selected.
  4087. [03/20/12 07:51:46.910]:Active Directory PT: Applying rule 'accountExpires: Convert to Identity Vault time format'.
  4088. [03/20/12 07:51:46.911]:Active Directory PT: Action: do-reformat-op-attr("accountExpires",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
  4089. [03/20/12 07:51:46.911]:Active Directory PT: Evaluating selection criteria for rule 'lockoutTime: Convert to Identity Vault time format'.
  4090. [03/20/12 07:51:46.911]:Active Directory PT: Rule selected.
  4091. [03/20/12 07:51:46.911]:Active Directory PT: Applying rule 'lockoutTime: Convert to Identity Vault time format'.
  4092. [03/20/12 07:51:46.911]:Active Directory PT: Action: do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
  4093. [03/20/12 07:51:46.912]:Active Directory PT:Policy returned:
  4094. [03/20/12 07:51:46.912]:Active Directory PT:
  4095. <nds dtdversion="2.2">
  4096. <source>
  4097. <product version="3.6.10.4747">DirXML</product>
  4098. <contact>Novell, Inc.</contact>
  4099. </source>
  4100. <input>
  4101. <status level="success" type="heartbeat"/>
  4102. </input>
  4103. </nds>
  4104. [03/20/12 07:51:46.912]:Active Directory PT:Applying policy: %+C%14Citp-EntitlementsImpl%-C.
  4105. [03/20/12 07:51:46.912]:Active Directory PT: Applying to status #1.
  4106. [03/20/12 07:51:46.912]:Active Directory PT: Evaluating selection criteria for rule 'Check target of add-association for group membership entitlements'.
  4107. [03/20/12 07:51:46.913]:Active Directory PT: (if-global-variable 'drv.entitlement.Group' equal "true") = FALSE.
  4108. [03/20/12 07:51:46.913]:Active Directory PT: Rule rejected.
  4109. [03/20/12 07:51:46.913]:Active Directory PT: Evaluating selection criteria for rule 'Check target of add-association for Exchange mailbox entitlements'.
  4110. [03/20/12 07:51:46.913]:Active Directory PT: (if-global-variable 'drv.exchMailboxMethod' equal "entitlement") = FALSE.
  4111. [03/20/12 07:51:46.913]:Active Directory PT: Rule rejected.
  4112. [03/20/12 07:51:46.913]:Active Directory PT:Policy returned:
  4113. [03/20/12 07:51:46.913]:Active Directory PT:
  4114. <nds dtdversion="2.2">
  4115. <source>
  4116. <product version="3.6.10.4747">DirXML</product>
  4117. <contact>Novell, Inc.</contact>
  4118. </source>
  4119. <input>
  4120. <status level="success" type="heartbeat"/>
  4121. </input>
  4122. </nds>
  4123. [03/20/12 07:51:46.914]:Active Directory PT:Applying policy: %+C%14CPassword(Pub)-Sub Email Notifications%-C.
  4124. [03/20/12 07:51:46.914]:Active Directory PT: Applying to status #1.
  4125. [03/20/12 07:51:46.914]:Active Directory PT: Evaluating selection criteria for rule 'Send e-mail on a failure when subscribing to passwords'.
  4126. [03/20/12 07:51:46.914]:Active Directory PT: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  4127. [03/20/12 07:51:46.915]:Active Directory PT: (if-operation equal "status") = TRUE.
  4128. [03/20/12 07:51:46.915]:Active Directory PT: (if-xpath true "self::status[@level != 'success'][text() != '']/operation-data/password-subscribe-status/association[text() != '']") = FALSE.
  4129. [03/20/12 07:51:46.915]:Active Directory PT: Rule rejected.
  4130. [03/20/12 07:51:46.915]:Active Directory PT: Evaluating selection criteria for rule 'Send e-mail on failure to reset connected system password using the Identity Manager data store password'.
  4131. [03/20/12 07:51:46.915]:Active Directory PT: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  4132. [03/20/12 07:51:46.916]:Active Directory PT: (if-operation equal "status") = TRUE.
  4133. [03/20/12 07:51:46.916]:Active Directory PT: (if-xpath true "self::status[@level != 'success']/operation-data/password-reset-status") = FALSE.
  4134. [03/20/12 07:51:46.916]:Active Directory PT: Rule rejected.
  4135. [03/20/12 07:51:46.916]:Active Directory PT:Policy returned:
  4136. [03/20/12 07:51:46.916]:Active Directory PT:
  4137. <nds dtdversion="2.2">
  4138. <source>
  4139. <product version="3.6.10.4747">DirXML</product>
  4140. <contact>Novell, Inc.</contact>
  4141. </source>
  4142. <input>
  4143. <status level="success" type="heartbeat"/>
  4144. </input>
  4145. </nds>
  4146. [03/20/12 07:51:46.916]:Active Directory PT:Applying policy: %+C%14Clib-Audit-SendEntitlementsEvents-itp-V1%-C.
  4147. [03/20/12 07:51:46.917]:Active Directory PT: Applying to status #1.
  4148. [03/20/12 07:51:46.917]:Active Directory PT: Evaluating selection criteria for rule '00031200 - Account Create By Entitlement Grant'.
  4149. [03/20/12 07:51:46.917]:Active Directory PT: (if-operation equal "status") = TRUE.
  4150. [03/20/12 07:51:46.917]:Active Directory PT: (if-op-property 'accountAction' equal "accountCreateByEntitlementGrant") = FALSE.
  4151. [03/20/12 07:51:46.917]:Active Directory PT: Rule rejected.
  4152. [03/20/12 07:51:46.917]:Active Directory PT: Evaluating selection criteria for rule '00031201 - Account Delete By Entitlement Revoke'.
  4153. [03/20/12 07:51:46.918]:Active Directory PT: (if-operation equal "status") = TRUE.
  4154. [03/20/12 07:51:46.918]:Active Directory PT: (if-xpath true "./operation-data/entitlement-impl/@state = '0'") = FALSE.
  4155. [03/20/12 07:51:46.918]:Active Directory PT: (if-operation equal "status") = TRUE.
  4156. [03/20/12 07:51:46.918]:Active Directory PT: (if-op-property 'accountAction' equal "accountDeleteByEntitlementRevoke") = FALSE.
  4157. [03/20/12 07:51:46.918]:Active Directory PT: Rule rejected.
  4158. [03/20/12 07:51:46.918]:Active Directory PT: Evaluating selection criteria for rule '00031202 - Account Disable By Entitlement Revoke'.
  4159. [03/20/12 07:51:46.919]:Active Directory PT: (if-operation equal "status") = TRUE.
  4160. [03/20/12 07:51:46.919]:Active Directory PT: (if-op-property 'accountAction' equal "accountDisableByEntitlementRevoke") = FALSE.
  4161. [03/20/12 07:51:46.919]:Active Directory PT: Rule rejected.
  4162. [03/20/12 07:51:46.919]:Active Directory PT: Evaluating selection criteria for rule '00031203 - Account Enable By Entitlement Grant'.
  4163. [03/20/12 07:51:46.919]:Active Directory PT: (if-operation equal "status") = TRUE.
  4164. [03/20/12 07:51:46.919]:Active Directory PT: (if-op-property 'accountAction' equal "accountEnableByEntitlementGrant") = FALSE.
  4165. [03/20/12 07:51:46.920]:Active Directory PT: Rule rejected.
  4166. [03/20/12 07:51:46.920]:Active Directory PT: Evaluating selection criteria for rule 'Generate Audit Event'.
  4167. [03/20/12 07:51:46.920]:Active Directory PT: (if-operation equal "status") = TRUE.
  4168. [03/20/12 07:51:46.920]:Active Directory PT: (if-local-variable 'auditEventID' available) = FALSE.
  4169. [03/20/12 07:51:46.920]:Active Directory PT: Rule rejected.
  4170. [03/20/12 07:51:46.920]:Active Directory PT:Policy returned:
  4171. [03/20/12 07:51:46.920]:Active Directory PT:
  4172. <nds dtdversion="2.2">
  4173. <source>
  4174. <product version="3.6.10.4747">DirXML</product>
  4175. <contact>Novell, Inc.</contact>
  4176. </source>
  4177. <input>
  4178. <status level="success" type="heartbeat"/>
  4179. </input>
  4180. </nds>
  4181. [03/20/12 07:51:46.921]:Active Directory PT:Applying schema mapping policies to input.
  4182. [03/20/12 07:51:46.921]:Active Directory PT:Applying policy: %+C%14Csmp%-C.
  4183. [03/20/12 07:51:46.921]:Active Directory PT:Resolving association references.
  4184. [03/20/12 07:51:46.921]:Active Directory PT:Applying event transformation policies.
  4185. [03/20/12 07:51:46.921]:Active Directory PT:Applying policy: %+C%14Cpub-etp-EntitlementsImpl%-C.
  4186. [03/20/12 07:51:46.922]:Active Directory PT: Applying to status #1.
  4187. [03/20/12 07:51:46.922]:Active Directory PT: Evaluating selection criteria for rule 'Disallow user account delete when using entitlements'.
  4188. [03/20/12 07:51:46.922]:Active Directory PT: (if-operation equal "delete") = FALSE.
  4189. [03/20/12 07:51:46.922]:Active Directory PT: Rule rejected.
  4190. [03/20/12 07:51:46.922]:Active Directory PT: Evaluating selection criteria for rule 'Strip Login Disabled from operation (Disable Option)'.
  4191. [03/20/12 07:51:46.922]:Active Directory PT: (if-global-variable 'drv.entitlement.UserAccount' equal "true") = FALSE.
  4192. [03/20/12 07:51:46.923]:Active Directory PT: Rule rejected.
  4193. [03/20/12 07:51:46.923]:Active Directory PT:Policy returned:
  4194. [03/20/12 07:51:46.923]:Active Directory PT:
  4195. <nds dtdversion="2.2">
  4196. <source>
  4197. <product version="3.6.10.4747">DirXML</product>
  4198. <contact>Novell, Inc.</contact>
  4199. </source>
  4200. <input>
  4201. <status level="success" type="heartbeat"/>
  4202. </input>
  4203. </nds>
  4204. [03/20/12 07:51:46.923]:Active Directory PT:Applying policy: %+C%14Cpub-etp-HandleMovesAndRenames%-C.
  4205. [03/20/12 07:51:46.923]:Active Directory PT: Applying to status #1.
  4206. [03/20/12 07:51:46.923]:Active Directory PT: Evaluating selection criteria for rule 'break if not a move or rename'.
  4207. [03/20/12 07:51:46.924]:Active Directory PT: (if-operation not-match "move|rename") = TRUE.
  4208. [03/20/12 07:51:46.924]:Active Directory PT: Rule selected.
  4209. [03/20/12 07:51:46.924]:Active Directory PT: Applying rule 'break if not a move or rename'.
  4210. [03/20/12 07:51:46.924]:Active Directory PT: Action: do-break().
  4211. [03/20/12 07:51:46.924]:Active Directory PT:Policy returned:
  4212. [03/20/12 07:51:46.924]:Active Directory PT:
  4213. <nds dtdversion="2.2">
  4214. <source>
  4215. <product version="3.6.10.4747">DirXML</product>
  4216. <contact>Novell, Inc.</contact>
  4217. </source>
  4218. <input>
  4219. <status level="success" type="heartbeat"/>
  4220. </input>
  4221. </nds>
  4222. [03/20/12 07:51:46.925]:Active Directory PT:Applying publisher filter.
  4223. [03/20/12 07:51:46.925]:Active Directory PT:Publisher processing status for .
  4224. [03/20/12 07:51:46.925]:Active Directory PT:Applying command transformation policies.
  4225. [03/20/12 07:51:46.925]:Active Directory PT:Applying policy: %+C%14Cpub-ctp-UserNameMap%-C.
  4226. [03/20/12 07:51:46.925]:Active Directory PT: Applying to status #1.
  4227. [03/20/12 07:51:46.925]:Active Directory PT: Evaluating selection criteria for rule 'consider user objects when name mapping is enabled'.
  4228. [03/20/12 07:51:46.925]:Active Directory PT: (if-class-name not-equal "User") = TRUE.
  4229. [03/20/12 07:51:46.926]:Active Directory PT: Rule selected.
  4230. [03/20/12 07:51:46.926]:Active Directory PT: Applying rule 'consider user objects when name mapping is enabled'.
  4231. [03/20/12 07:51:46.926]:Active Directory PT: Action: do-break().
  4232. [03/20/12 07:51:46.926]:Active Directory PT:Policy returned:
  4233. [03/20/12 07:51:46.926]:Active Directory PT:
  4234. <nds dtdversion="2.2">
  4235. <source>
  4236. <product version="3.6.10.4747">DirXML</product>
  4237. <contact>Novell, Inc.</contact>
  4238. </source>
  4239. <input>
  4240. <status level="success" type="heartbeat"/>
  4241. </input>
  4242. </nds>
  4243. [03/20/12 07:51:46.927]:Active Directory PT:Applying policy: %+C%14Cpub-ctp%-C.
  4244. [03/20/12 07:51:46.927]:Active Directory PT: Applying to status #1.
  4245. [03/20/12 07:51:46.927]:Active Directory PT: Evaluating selection criteria for rule 'set cached context value on merge'.
  4246. [03/20/12 07:51:46.927]:Active Directory PT: (if-operation equal "modify") = FALSE.
  4247. [03/20/12 07:51:46.927]:Active Directory PT: Rule rejected.
  4248. [03/20/12 07:51:46.927]:Active Directory PT: Evaluating selection criteria for rule 'Set Equivalent To Me when adding object to a group'.
  4249. [03/20/12 07:51:46.927]:Active Directory PT: (if-class-name equal "Group") = FALSE.
  4250. [03/20/12 07:51:46.928]:Active Directory PT: Rule rejected.
  4251. [03/20/12 07:51:46.928]:Active Directory PT: Evaluating selection criteria for rule 'Remove Equivalent To Me when removing object from a group'.
  4252. [03/20/12 07:51:46.928]:Active Directory PT: (if-class-name equal "Group") = FALSE.
  4253. [03/20/12 07:51:46.928]:Active Directory PT: Rule rejected.
  4254. [03/20/12 07:51:46.928]:Active Directory PT: Evaluating selection criteria for rule 'remove managed attributes when object disassociated'.
  4255. [03/20/12 07:51:46.928]:Active Directory PT: (if-operation equal "remove-association") = FALSE.
  4256. [03/20/12 07:51:46.928]:Active Directory PT: Rule rejected.
  4257. [03/20/12 07:51:46.929]:Active Directory PT: Evaluating selection criteria for rule 'Prevent unassociated users from being removed from groups'.
  4258. [03/20/12 07:51:46.929]:Active Directory PT: (if-operation equal "modify") = FALSE.
  4259. [03/20/12 07:51:46.929]:Active Directory PT: Rule rejected.
  4260. [03/20/12 07:51:46.929]:Active Directory PT:Policy returned:
  4261. [03/20/12 07:51:46.929]:Active Directory PT:
  4262. <nds dtdversion="2.2">
  4263. <source>
  4264. <product version="3.6.10.4747">DirXML</product>
  4265. <contact>Novell, Inc.</contact>
  4266. </source>
  4267. <input>
  4268. <status level="success" type="heartbeat"/>
  4269. </input>
  4270. </nds>
  4271. [03/20/12 07:51:46.930]:Active Directory PT:Applying XSLT policy: %+C%14Cpub-cts%-C.
  4272. [03/20/12 07:51:46.930]:Active Directory PT:Policy returned:
  4273. [03/20/12 07:51:46.930]:Active Directory PT:
  4274. <nds dtdversion="2.2">
  4275. <source>
  4276. <product version="3.6.10.4747">DirXML</product>
  4277. <contact>Novell, Inc.</contact>
  4278. </source>
  4279. <input>
  4280. <status level="success" type="heartbeat"/>
  4281. </input>
  4282. </nds>
  4283. [03/20/12 07:51:46.931]:Active Directory PT:Applying policy: %+C%14CPassword(Pub)-Default Password Policy%-C.
  4284. [03/20/12 07:51:46.931]:Active Directory PT: Applying to status #1.
  4285. [03/20/12 07:51:46.931]:Active Directory PT: Evaluating selection criteria for rule 'On User add, provide default password of @Dirxml1 if no password exists'.
  4286. [03/20/12 07:51:46.931]:Active Directory PT: (if-operation equal "add") = FALSE.
  4287. [03/20/12 07:51:46.931]:Active Directory PT: Rule rejected.
  4288. [03/20/12 07:51:46.931]:Active Directory PT:Policy returned:
  4289. [03/20/12 07:51:46.932]:Active Directory PT:
  4290. <nds dtdversion="2.2">
  4291. <source>
  4292. <product version="3.6.10.4747">DirXML</product>
  4293. <contact>Novell, Inc.</contact>
  4294. </source>
  4295. <input>
  4296. <status level="success" type="heartbeat"/>
  4297. </input>
  4298. </nds>
  4299. [03/20/12 07:51:46.932]:Active Directory PT:Applying policy: %+C%14CPassword(Pub)-Check Password GCV%-C.
  4300. [03/20/12 07:51:46.932]:Active Directory PT: Applying to status #1.
  4301. [03/20/12 07:51:46.932]:Active Directory PT: Evaluating selection criteria for rule 'Block publishing passwords to Identity Manager data store when adding a object'.
  4302. [03/20/12 07:51:46.932]:Active Directory PT: (if-global-variable 'enable-password-publish' equal "false") = FALSE.
  4303. [03/20/12 07:51:46.933]:Active Directory PT: Rule rejected.
  4304. [03/20/12 07:51:46.933]:Active Directory PT: Evaluating selection criteria for rule 'Block sending modify-password changes to the Identity Manager data store'.
  4305. [03/20/12 07:51:46.933]:Active Directory PT: (if-global-variable 'enable-password-publish' equal "false") = FALSE.
  4306. [03/20/12 07:51:46.933]:Active Directory PT: Rule rejected.
  4307. [03/20/12 07:51:46.933]:Active Directory PT:Policy returned:
  4308. [03/20/12 07:51:46.933]:Active Directory PT:
  4309. <nds dtdversion="2.2">
  4310. <source>
  4311. <product version="3.6.10.4747">DirXML</product>
  4312. <contact>Novell, Inc.</contact>
  4313. </source>
  4314. <input>
  4315. <status level="success" type="heartbeat"/>
  4316. </input>
  4317. </nds>
  4318. [03/20/12 07:51:46.934]:Active Directory PT:Applying policy: %+C%14CPassword(Pub)-Publish Distribution Password%-C.
  4319. [03/20/12 07:51:46.934]:Active Directory PT: Applying to status #1.
  4320. [03/20/12 07:51:46.934]:Active Directory PT: Evaluating selection criteria for rule 'Add nspmDistributionAttribute attribute to add operation'.
  4321. [03/20/12 07:51:46.934]:Active Directory PT: (if-global-variable 'publish-password-to-dp' equal "true") = FALSE.
  4322. [03/20/12 07:51:46.935]:Active Directory PT: Rule rejected.
  4323. [03/20/12 07:51:46.935]:Active Directory PT: Evaluating selection criteria for rule 'Change modify-password operations to a modify'.
  4324. [03/20/12 07:51:46.935]:Active Directory PT: (if-global-variable 'publish-password-to-dp' equal "true") = FALSE.
  4325. [03/20/12 07:51:46.935]:Active Directory PT: Rule rejected.
  4326. [03/20/12 07:51:46.935]:Active Directory PT:Policy returned:
  4327. [03/20/12 07:51:46.935]:Active Directory PT:
  4328. <nds dtdversion="2.2">
  4329. <source>
  4330. <product version="3.6.10.4747">DirXML</product>
  4331. <contact>Novell, Inc.</contact>
  4332. </source>
  4333. <input>
  4334. <status level="success" type="heartbeat"/>
  4335. </input>
  4336. </nds>
  4337. [03/20/12 07:51:46.936]:Active Directory PT:Applying policy: %+C%14CPassword(Pub)-Publish NDS Password%-C.
  4338. [03/20/12 07:51:46.936]:Active Directory PT: Applying to status #1.
  4339. [03/20/12 07:51:46.936]:Active Directory PT: Evaluating selection criteria for rule 'Block publishing passwords to NDS password'.
  4340. [03/20/12 07:51:46.936]:Active Directory PT: (if-global-variable 'publish-password-to-nds' equal "false") = FALSE.
  4341. [03/20/12 07:51:46.936]:Active Directory PT: Rule rejected.
  4342. [03/20/12 07:51:46.936]:Active Directory PT: Evaluating selection criteria for rule 'Block sending modify-password changes to the NDS password'.
  4343. [03/20/12 07:51:46.937]:Active Directory PT: (if-global-variable 'publish-password-to-nds' equal "false") = FALSE.
  4344. [03/20/12 07:51:46.937]:Active Directory PT: Rule rejected.
  4345. [03/20/12 07:51:46.937]:Active Directory PT:Policy returned:
  4346. [03/20/12 07:51:46.937]:Active Directory PT:
  4347. <nds dtdversion="2.2">
  4348. <source>
  4349. <product version="3.6.10.4747">DirXML</product>
  4350. <contact>Novell, Inc.</contact>
  4351. </source>
  4352. <input>
  4353. <status level="success" type="heartbeat"/>
  4354. </input>
  4355. </nds>
  4356. [03/20/12 07:51:46.937]:Active Directory PT:Applying policy: %+C%14CPassword(Pub)-Add Password Payload%-C.
  4357. [03/20/12 07:51:46.938]:Active Directory PT: Applying to status #1.
  4358. [03/20/12 07:51:46.938]:Active Directory PT: Evaluating selection criteria for rule 'Add operation-data element to password operations'.
  4359. [03/20/12 07:51:46.938]:Active Directory PT: (if-operation equal "add") = FALSE.
  4360. [03/20/12 07:51:46.938]:Active Directory PT: (if-operation equal "add") = FALSE.
  4361. [03/20/12 07:51:46.938]:Active Directory PT: (if-operation equal "modify-password") = FALSE.
  4362. [03/20/12 07:51:46.938]:Active Directory PT: (if-operation equal "modify") = FALSE.
  4363. [03/20/12 07:51:46.938]:Active Directory PT: Rule rejected.
  4364. [03/20/12 07:51:46.939]:Active Directory PT: Evaluating selection criteria for rule 'Add payload data to password operations'.
  4365. [03/20/12 07:51:46.939]:Active Directory PT: (if-operation equal "addPayloadToPassword") = FALSE.
  4366. [03/20/12 07:51:46.939]:Active Directory PT: (if-operation equal "add") = FALSE.
  4367. [03/20/12 07:51:46.939]:Active Directory PT: (if-operation equal "modify-password") = FALSE.
  4368. [03/20/12 07:51:46.939]:Active Directory PT: (if-operation equal "modify") = FALSE.
  4369. [03/20/12 07:51:46.939]:Active Directory PT: Rule rejected.
  4370. [03/20/12 07:51:46.939]:Active Directory PT:Policy returned:
  4371. [03/20/12 07:51:46.939]:Active Directory PT:
  4372. <nds dtdversion="2.2">
  4373. <source>
  4374. <product version="3.6.10.4747">DirXML</product>
  4375. <contact>Novell, Inc.</contact>
  4376. </source>
  4377. <input>
  4378. <status level="success" type="heartbeat"/>
  4379. </input>
  4380. </nds>
  4381. [03/20/12 07:51:46.940]:Active Directory PT:Applying policy: %+C%14Clib-AccountTracking-WriteAccountsOnAdds-pub-ctp-V1%-C.
  4382. [03/20/12 07:51:46.940]:Active Directory PT: Applying to status #1.
  4383. [03/20/12 07:51:46.940]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - disregard policy if disabled'.
  4384. [03/20/12 07:51:46.940]:Active Directory PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  4385. [03/20/12 07:51:46.941]:Active Directory PT: Rule rejected.
  4386. [03/20/12 07:51:46.941]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - on add operation add Dirxml-Accounts'.
  4387. [03/20/12 07:51:46.941]:Active Directory PT: (if-operation equal "add") = FALSE.
  4388. [03/20/12 07:51:46.941]:Active Directory PT: Rule rejected.
  4389. [03/20/12 07:51:46.941]:Active Directory PT:Policy returned:
  4390. [03/20/12 07:51:46.941]:Active Directory PT:
  4391. <nds dtdversion="2.2">
  4392. <source>
  4393. <product version="3.6.10.4747">DirXML</product>
  4394. <contact>Novell, Inc.</contact>
  4395. </source>
  4396. <input>
  4397. <status level="success" type="heartbeat"/>
  4398. </input>
  4399. </nds>
  4400. [03/20/12 07:51:46.942]:Active Directory PT:Filtering out notification-only attributes.
  4401. [03/20/12 07:51:46.942]:Active Directory PT:Pumping XDS to eDirectory.
  4402. [03/20/12 07:51:46.942]:Active Directory PT:Performing operation status for .
  4403. [03/20/12 07:51:46.942]:Active Directory PT:
  4404. DirXML Log Event -------------------
  4405. Driver: \EDIR2ADLAB\fdny\AD-TEST\Active Directory
  4406. Channel: Publisher
  4407. Status: Success
  4408. [03/20/12 07:51:46.943]:Active Directory PT:Fixing up association references.
  4409. [03/20/12 07:51:46.943]:Active Directory PT:Applying schema mapping policies to output.
  4410. [03/20/12 07:51:46.943]:Active Directory PT:Applying policy: %+C%14Csmp%-C.
  4411. [03/20/12 07:51:46.943]:Active Directory PT:Applying output transformation policies.
  4412. [03/20/12 07:51:46.943]:Active Directory PT:Applying policy: %+C%14Cotp%-C.
  4413. [03/20/12 07:51:46.943]:Active Directory PT: Applying to status #1.
  4414. [03/20/12 07:51:46.944]:Active Directory PT: Evaluating selection criteria for rule 'Street Address: Convert LF to CR-LF'.
  4415. [03/20/12 07:51:46.944]:Active Directory PT: Rule selected.
  4416. [03/20/12 07:51:46.944]:Active Directory PT: Applying rule 'Street Address: Convert LF to CR-LF'.
  4417. [03/20/12 07:51:46.944]:Active Directory PT: Action: do-reformat-op-attr("streetAddress",token-replace-all("[^\r]\n","\r\n",token-local-variable("current-value"))).
  4418. [03/20/12 07:51:46.944]:Active Directory PT: Evaluating selection criteria for rule 'logonHours: Convert to Active Directory form'.
  4419. [03/20/12 07:51:46.944]:Active Directory PT: Rule selected.
  4420. [03/20/12 07:51:46.945]:Active Directory PT: Applying rule 'logonHours: Convert to Active Directory form'.
  4421. [03/20/12 07:51:46.945]:Active Directory PT: Action: do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2ADLenient($current-value)")).
  4422. [03/20/12 07:51:46.945]:Active Directory PT: Evaluating selection criteria for rule 'accountExpires: Convert to Active Directory form'.
  4423. [03/20/12 07:51:46.945]:Active Directory PT: (if-op-attr 'accountExpires' changing) = FALSE.
  4424. [03/20/12 07:51:46.945]:Active Directory PT: Rule rejected.
  4425. [03/20/12 07:51:46.945]:Active Directory PT: Evaluating selection criteria for rule 'lockoutTime: Convert to Active Directory form'.
  4426. [03/20/12 07:51:46.946]:Active Directory PT: Rule selected.
  4427. [03/20/12 07:51:46.946]:Active Directory PT: Applying rule 'lockoutTime: Convert to Active Directory form'.
  4428. [03/20/12 07:51:46.946]:Active Directory PT: Action: do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateEpoch2FileTime($current-value)")).
  4429. [03/20/12 07:51:46.946]:Active Directory PT: Evaluating selection criteria for rule 'Add: User - convert multi-valued Telephone to single value'.
  4430. [03/20/12 07:51:46.946]:Active Directory PT: (if-operation equal "add") = FALSE.
  4431. [03/20/12 07:51:46.946]:Active Directory PT: Rule rejected.
  4432. [03/20/12 07:51:46.947]:Active Directory PT: Evaluating selection criteria for rule 'update Active Directory logon name'.
  4433. [03/20/12 07:51:46.947]:Active Directory PT: (if-xpath true "self::status[@level = 'success']/operation-data/windows-2000-logon-name") = FALSE.
  4434. [03/20/12 07:51:46.947]:Active Directory PT: Rule rejected.
  4435. [03/20/12 07:51:46.947]:Active Directory PT: Evaluating selection criteria for rule 'Exchange: Remove HomeMDB when disabled'.
  4436. [03/20/12 07:51:46.947]:Active Directory PT: (if-global-variable 'drv.exchMailboxMethod' equal "disabled") = TRUE.
  4437. [03/20/12 07:51:46.947]:Active Directory PT: Rule selected.
  4438. [03/20/12 07:51:46.948]:Active Directory PT: Applying rule 'Exchange: Remove HomeMDB when disabled'.
  4439. [03/20/12 07:51:46.948]:Active Directory PT: Action: do-strip-op-attr("homeMDB").
  4440. [03/20/12 07:51:46.948]:Active Directory PT:Policy returned:
  4441. [03/20/12 07:51:46.948]:Active Directory PT:
  4442. <nds dtdversion="3.5" ndsversion="8.x">
  4443. <source>
  4444. <product version="3.6.10.4747">DirXML</product>
  4445. <contact>Novell, Inc.</contact>
  4446. </source>
  4447. <output>
  4448. <status event-id="0" level="success"></status>
  4449. </output>
  4450. </nds>
  4451. [03/20/12 07:51:46.948]:Active Directory PT:Applying policy: %+C%14CPassword(Sub)-Pub Email Notifications%-C.
  4452. [03/20/12 07:51:46.949]:Active Directory PT: Applying to status #1.
  4453. [03/20/12 07:51:46.949]:Active Directory PT: Evaluating selection criteria for rule 'Send e-mail for a failed publish password operation'.
  4454. [03/20/12 07:51:46.949]:Active Directory PT: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  4455. [03/20/12 07:51:46.949]:Active Directory PT: (if-operation equal "status") = TRUE.
  4456. [03/20/12 07:51:46.949]:Active Directory PT: (if-xpath true "self::status[@level != 'success']/operation-data/password-publish-status") = FALSE.
  4457. [03/20/12 07:51:46.949]:Active Directory PT: Rule rejected.
  4458. [03/20/12 07:51:46.950]:Active Directory PT:Policy returned:
  4459. [03/20/12 07:51:46.950]:Active Directory PT:
  4460. <nds dtdversion="3.5" ndsversion="8.x">
  4461. <source>
  4462. <product version="3.6.10.4747">DirXML</product>
  4463. <contact>Novell, Inc.</contact>
  4464. </source>
  4465. <output>
  4466. <status event-id="0" level="success"></status>
  4467. </output>
  4468. </nds>
  4469. [03/20/12 07:51:46.950]:Active Directory PT:Applying policy: %+C%14Clib-CredProv-ConvertPayload-otp-V1%-C.
  4470. [03/20/12 07:51:46.950]:Active Directory PT: Applying to status #1.
  4471. [03/20/12 07:51:46.950]:Active Directory PT: Evaluating selection criteria for rule 'Is credential provisioning enabled? Are there any custom payloads?'.
  4472. [03/20/12 07:51:46.951]:Active Directory PT: Rule selected.
  4473. [03/20/12 07:51:46.951]:Active Directory PT: Applying rule 'Is credential provisioning enabled? Are there any custom payloads?'.
  4474. [03/20/12 07:51:46.951]:Active Directory PT: Action: do-if().
  4475. [03/20/12 07:51:46.951]:Active Directory PT: Evaluating conditions.
  4476. [03/20/12 07:51:46.951]:Active Directory PT: (if-global-variable 'credprov.enable' not-equal "true") = TRUE.
  4477. [03/20/12 07:51:46.951]:Active Directory PT: Performing if actions.
  4478. [03/20/12 07:51:46.952]:Active Directory PT: Action: do-break().
  4479. [03/20/12 07:51:46.952]:Active Directory PT:Policy returned:
  4480. [03/20/12 07:51:46.952]:Active Directory PT:
  4481. <nds dtdversion="3.5" ndsversion="8.x">
  4482. <source>
  4483. <product version="3.6.10.4747">DirXML</product>
  4484. <contact>Novell, Inc.</contact>
  4485. </source>
  4486. <output>
  4487. <status event-id="0" level="success"></status>
  4488. </output>
  4489. </nds>
  4490. [03/20/12 07:51:46.952]:Active Directory PT:Applying policy: %+C%14Clib-AccountTracking-Subscribe-otp-V1%-C.
  4491. [03/20/12 07:51:46.952]:Active Directory PT: Applying to status #1.
  4492. [03/20/12 07:51:46.952]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled or wrong object class'.
  4493. [03/20/12 07:51:46.953]:Active Directory PT: Rule selected.
  4494. [03/20/12 07:51:46.953]:Active Directory PT: Applying rule 'AccountTracking - disregard if disabled or wrong object class'.
  4495. [03/20/12 07:51:46.953]:Active Directory PT: Action: do-if().
  4496. [03/20/12 07:51:46.953]:Active Directory PT: Evaluating conditions.
  4497. [03/20/12 07:51:46.953]:Active Directory PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  4498. [03/20/12 07:51:46.953]:Active Directory PT: Performing else actions.
  4499. [03/20/12 07:51:46.953]:Active Directory PT: Action: do-for-each(arg-node-set(token-global-variable("drv.acctTrk.objectClass"))).
  4500. [03/20/12 07:51:46.954]:Active Directory PT: arg-node-set(token-global-variable("drv.acctTrk.objectClass"))
  4501. [03/20/12 07:51:46.954]:Active Directory PT: token-global-variable("drv.acctTrk.objectClass")
  4502. [03/20/12 07:51:46.954]:Active Directory PT: Token Value: {"user"}.
  4503. [03/20/12 07:51:46.954]:Active Directory PT: Arg Value: {"user"}.
  4504. [03/20/12 07:51:46.954]:Active Directory PT: Performing actions for local-variable(current-node) = "user".
  4505. [03/20/12 07:51:46.955]:Active Directory PT: Action: do-if().
  4506. [03/20/12 07:51:46.955]:Active Directory PT: Evaluating conditions.
  4507. [03/20/12 07:51:46.955]:Active Directory PT: (if-class-name equal "$current-node$") = FALSE.
  4508. [03/20/12 07:51:46.955]:Active Directory PT: Performing else actions.
  4509. [03/20/12 07:51:46.955]:Active Directory PT: Action: do-if().
  4510. [03/20/12 07:51:46.955]:Active Directory PT: Evaluating conditions.
  4511. [03/20/12 07:51:46.955]:Active Directory PT: (if-local-variable 'pass' not-available) = TRUE.
  4512. [03/20/12 07:51:46.956]:Active Directory PT: Performing if actions.
  4513. [03/20/12 07:51:46.956]:Active Directory PT: Action: do-break().
  4514. [03/20/12 07:51:46.956]:Active Directory PT:Policy returned:
  4515. [03/20/12 07:51:46.956]:Active Directory PT:
  4516. <nds dtdversion="3.5" ndsversion="8.x">
  4517. <source>
  4518. <product version="3.6.10.4747">DirXML</product>
  4519. <contact>Novell, Inc.</contact>
  4520. </source>
  4521. <output>
  4522. <status event-id="0" level="success"></status>
  4523. </output>
  4524. </nds>
  4525. [03/20/12 07:51:46.956]:Active Directory PT:
  4526. <nds dtdversion="3.5" ndsversion="8.x">
  4527. <source>
  4528. <product version="3.6.10.4747">DirXML</product>
  4529. <contact>Novell, Inc.</contact>
  4530. </source>
  4531. <output>
  4532. <status event-id="0" level="success"></status>
  4533. </output>
  4534. </nds>
  4535. [03/20/12 07:51:46.957]:Active Directory PT:Remote Interface Driver: Sending...
  4536. [03/20/12 07:51:46.957]:Active Directory PT:
  4537. <nds dtdversion="3.5" ndsversion="8.x">
  4538. <source>
  4539. <product version="3.6.10.4747">DirXML</product>
  4540. <contact>Novell, Inc.</contact>
  4541. </source>
  4542. <output>
  4543. <status event-id="0" level="success"></status>
  4544. </output>
  4545. </nds>
  4546. [03/20/12 07:51:46.957]:Active Directory PT:Remote Interface Driver: Document sent.
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!