API tools faq
paste
Advertisement
sunway2

AD1

sunway2
Jul 10th, 2012
102
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 469.25 KB | None | 0 0
raw download clone embed print report
  1. 07/10/12 03:56:48.814]:ADTRACE ST:Start transaction.
  2. [07/10/12 03:56:48.814]:ADTRACE ST:type(resync-entry)entry-id(34037) dn(\T=xxxxxIDM\O=xxxxx\OU=data\OU=users\CN=testuser1) class-id(-1) class-name(null)
  3. [07/10/12 03:56:48.814]:ADTRACE ST:Processing events for transaction.
  4. [07/10/12 03:56:48.814]:ADTRACE ST:
  5. <nds dtdversion="4.0" ndsversion="8.x">
  6. <source>
  7. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  8. <contact>Novell, Inc.</contact>
  9. </source>
  10. <input>
  11. <sync cached-time="20120710105648.783Z" class-name="User" event-id="WINIDM-NDS#20120710105648#1#1:32cdb17f-3b3d-4aab-93f5-f1ae52b7e86c" qualified-src-dn="O=xxxxx\OU=data\OU=users\CN=testuser1" src-dn="\xxxxxIDM\xxxxx\data\users\testuser1" src-entry-id="34037" timestamp="0#0">
  12. <association state="migrate"></association>
  13. </sync>
  14. </input>
  15. </nds>
  16. [07/10/12 03:56:48.814]:ADTRACE ST:Applying event transformation policies.
  17. [07/10/12 03:56:48.814]:ADTRACE ST:Applying policy: %+C%14CAD USER Policy%-C.
  18. [07/10/12 03:56:48.814]:ADTRACE ST: Applying to sync #1.
  19. [07/10/12 03:56:48.814]:ADTRACE ST:Policy returned:
  20. [07/10/12 03:56:48.814]:ADTRACE ST:
  21. <nds dtdversion="4.0" ndsversion="8.x">
  22. <source>
  23. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  24. <contact>Novell, Inc.</contact>
  25. </source>
  26. <input>
  27. <sync cached-time="20120710105648.783Z" class-name="User" event-id="WINIDM-NDS#20120710105648#1#1:32cdb17f-3b3d-4aab-93f5-f1ae52b7e86c" qualified-src-dn="O=xxxxx\OU=data\OU=users\CN=testuser1" src-dn="\xxxxxIDM\xxxxx\data\users\testuser1" src-entry-id="34037" timestamp="0#0">
  28. <association state="migrate"></association>
  29. </sync>
  30. </input>
  31. </nds>
  32. [07/10/12 03:56:48.829]:ADTRACE ST:Applying policy: %+C%14CADD New user to AD%-C.
  33. [07/10/12 03:56:48.829]:ADTRACE ST: Applying to sync #1.
  34. [07/10/12 03:56:48.829]:ADTRACE ST: Evaluating selection criteria for rule 'Add users to AD'.
  35. [07/10/12 03:56:48.829]:ADTRACE ST: (if-class-name available) = TRUE.
  36. [07/10/12 03:56:48.829]:ADTRACE ST: Rule selected.
  37. [07/10/12 03:56:48.829]:ADTRACE ST: Applying rule 'Add users to AD'.
  38. [07/10/12 03:56:48.829]:ADTRACE ST: Action: do-add-src-object(class-name="User",arg-dn("OU=users,OU=NOVELLUSER,DC=idm,DC=com")).
  39. [07/10/12 03:56:48.829]:ADTRACE ST: arg-dn("OU=users,OU=NOVELLUSER,DC=idm,DC=com")
  40. [07/10/12 03:56:48.829]:ADTRACE ST: token-text("OU=users,OU=NOVELLUSER,DC=idm,DC=com")
  41. [07/10/12 03:56:48.829]:ADTRACE ST: Arg Value: "OU=users,OU=NOVELLUSER,DC=idm,DC=com".
  42. [07/10/12 03:56:48.829]:ADTRACE ST: Direct command from policy
  43. [07/10/12 03:56:48.829]:ADTRACE ST:
  44. <nds dtdversion="4.0" ndsversion="8.x">
  45. <source>
  46. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  47. <contact>Novell, Inc.</contact>
  48. </source>
  49. <input>
  50. <add class-name="User" dest-dn="OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="WINIDM-NDS#20120710105648#1#1:32cdb17f-3b3d-4aab-93f5-f1ae52b7e86c"/>
  51. </input>
  52. </nds>
  53. [07/10/12 03:56:48.829]:ADTRACE ST: Pumping XDS to eDirectory.
  54. [07/10/12 03:56:48.829]:ADTRACE ST: Performing operation add for OU=users,OU=NOVELLUSER,DC=idm,DC=com.
  55. [07/10/12 03:56:48.829]:ADTRACE ST: --JCLNT-- \xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver : Duplicating : context = 979763278, tempContext = 979763260
  56. [07/10/12 03:56:48.829]:ADTRACE ST: Adding entry OU=users,OU=NOVELLUSER,DC=idm,DC=com.
  57. [07/10/12 03:56:48.829]:ADTRACE ST: Creating RDN in context ..
  58. [07/10/12 03:56:48.829]:ADTRACE ST: --JCLNT-- \xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver : Calling free on tempContext = 979763260
  59. [07/10/12 03:56:49.048]:ADTRACE ST: Processing returned document.
  60. [07/10/12 03:56:49.048]:ADTRACE ST: Processing operation <status> for .
  61. [07/10/12 03:56:49.048]:ADTRACE ST:
  62. DirXML Log Event -------------------
  63. Driver: \xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver
  64. Channel: Subscriber
  65. Status: Error
  66. Message: Code(-9010) An exception occurred: novell.jclient.JCException: createEntry -672 ERR_NO_ACCESS
  67. [07/10/12 03:56:49.267]:ADTRACE ST: Direct command from policy result
  68. [07/10/12 03:56:49.267]:ADTRACE ST:
  69. <nds dtdversion="4.0" ndsversion="8.x">
  70. <source>
  71. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  72. <contact>Novell, Inc.</contact>
  73. </source>
  74. <output>
  75. <status event-id="WINIDM-NDS#20120710105648#1#1:32cdb17f-3b3d-4aab-93f5-f1ae52b7e86c" level="error">Code(-9010) An exception occurred: novell.jclient.JCException: createEntry -672 ERR_NO_ACCESS<application>DirXML</application>
  76. <module>Active Directory Driver</module>
  77. <object-dn></object-dn>
  78. <component>Subscriber</component>
  79. </status>
  80. </output>
  81. </nds>
  82. [07/10/12 03:56:49.267]:ADTRACE ST:Policy returned:
  83. [07/10/12 03:56:49.267]:ADTRACE ST:
  84. <nds dtdversion="4.0" ndsversion="8.x">
  85. <source>
  86. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  87. <contact>Novell, Inc.</contact>
  88. </source>
  89. <input>
  90. <sync cached-time="20120710105648.783Z" class-name="User" event-id="WINIDM-NDS#20120710105648#1#1:32cdb17f-3b3d-4aab-93f5-f1ae52b7e86c" qualified-src-dn="O=xxxxx\OU=data\OU=users\CN=testuser1" src-dn="\xxxxxIDM\xxxxx\data\users\testuser1" src-entry-id="34037" timestamp="0#0">
  91. <association state="migrate"></association>
  92. </sync>
  93. </input>
  94. </nds>
  95. [07/10/12 03:56:49.267]:ADTRACE ST:Subscriber processing sync for \xxxxxIDM\xxxxx\data\users\testuser1.
  96. [07/10/12 03:56:49.267]:ADTRACE ST:Reading relevant attributes from \xxxxxIDM\xxxxx\data\users\testuser1.
  97. [07/10/12 03:56:49.267]:ADTRACE ST:
  98. <nds dtdversion="4.0" ndsversion="8.x">
  99. <source>
  100. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  101. <contact>Novell, Inc.</contact>
  102. </source>
  103. <input>
  104. <query class-name="User" dest-dn="\xxxxxIDM\xxxxx\data\users\testuser1" dest-entry-id="34037" scope="entry">
  105. <read-attr attr-name="CN"/>
  106. <read-attr attr-name="Description"/>
  107. <read-attr attr-name="DirXML-ADAliasName"/>
  108. <read-attr attr-name="DirXML-EntitlementRef"/>
  109. <read-attr attr-name="Facsimile Telephone Number"/>
  110. <read-attr attr-name="Full Name"/>
  111. <read-attr attr-name="Given Name"/>
  112. <read-attr attr-name="Initials"/>
  113. <read-attr attr-name="Internet EMail Address"/>
  114. <read-attr attr-name="L"/>
  115. <read-attr attr-name="Login Allowed Time Map"/>
  116. <read-attr attr-name="Login Disabled"/>
  117. <read-attr attr-name="Login Expiration Time"/>
  118. <read-attr attr-name="nspmDistributionPassword"/>
  119. <read-attr attr-name="Physical Delivery Office Name"/>
  120. <read-attr attr-name="Postal Code"/>
  121. <read-attr attr-name="Postal Office Box"/>
  122. <read-attr attr-name="S"/>
  123. <read-attr attr-name="SA"/>
  124. <read-attr attr-name="Surname"/>
  125. <read-attr attr-name="Telephone Number"/>
  126. <read-attr attr-name="Title"/>
  127. </query>
  128. </input>
  129. </nds>
  130. [07/10/12 03:56:49.283]:ADTRACE ST:Pumping XDS to eDirectory.
  131. [07/10/12 03:56:49.283]:ADTRACE ST:Performing operation query for \xxxxxIDM\xxxxx\data\users\testuser1.
  132. [07/10/12 03:56:49.283]:ADTRACE ST:--JCLNT-- \xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver : Duplicating : context = 979763259, tempContext = 979763260
  133. [07/10/12 03:56:49.283]:ADTRACE ST:Driver object has insufficient rights to read \xxxxxIDM\xxxxx\data\users\testuser1#CN.
  134. [07/10/12 03:56:49.283]:ADTRACE ST:Driver object has insufficient rights to read \xxxxxIDM\xxxxx\data\users\testuser1#Full Name.
  135. [07/10/12 03:56:49.298]:ADTRACE ST:--JCLNT-- \xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver : Calling free on tempContext = 979763260
  136. [07/10/12 03:56:49.298]:ADTRACE ST:Read result:
  137. [07/10/12 03:56:49.298]:ADTRACE ST:
  138. <nds dtdversion="4.0" ndsversion="8.x">
  139. <source>
  140. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  141. <contact>Novell, Inc.</contact>
  142. </source>
  143. <output>
  144. <instance class-name="User" qualified-src-dn="O=xxxxx\OU=data\OU=users\CN=testuser1" src-dn="\xxxxxIDM\xxxxx\data\users\testuser1" src-entry-id="34037">
  145. <association state="migrate"></association>
  146. <attr attr-name="Given Name">
  147. <value timestamp="1341840499#5" type="string">test</value>
  148. </attr>
  149. <attr attr-name="Surname">
  150. <value timestamp="1341840499#4" type="string">user1</value>
  151. </attr>
  152. </instance>
  153. <status level="success"></status>
  154. </output>
  155. </nds>
  156. [07/10/12 03:56:49.298]:ADTRACE ST:Synthetic add:
  157. [07/10/12 03:56:49.298]:ADTRACE ST:
  158. <nds dtdversion="4.0" ndsversion="8.x">
  159. <source>
  160. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  161. <contact>Novell, Inc.</contact>
  162. </source>
  163. <output>
  164. <add cached-time="20120710105648.783Z" class-name="User" event-id="WINIDM-NDS#20120710105648#1#1:32cdb17f-3b3d-4aab-93f5-f1ae52b7e86c" qualified-src-dn="O=xxxxx\OU=data\OU=users\CN=testuser1" src-dn="\xxxxxIDM\xxxxx\data\users\testuser1" src-entry-id="34037" timestamp="0#0">
  165. <association state="migrate"></association>
  166. <add-attr attr-name="Given Name">
  167. <value timestamp="1341840499#5" type="string">test</value>
  168. </add-attr>
  169. <add-attr attr-name="Surname">
  170. <value timestamp="1341840499#4" type="string">user1</value>
  171. </add-attr>
  172. </add>
  173. <status level="success"></status>
  174. </output>
  175. </nds>
  176. [07/10/12 03:56:49.298]:ADTRACE ST:Applying object matching policies.
  177. [07/10/12 03:56:49.298]:ADTRACE ST:Applying policy: %+C%14CNOVLADDCFG-sub-mp-Scoping%-C.
  178. [07/10/12 03:56:49.298]:ADTRACE ST: Applying to add #1.
  179. [07/10/12 03:56:49.298]:ADTRACE ST: Evaluating selection criteria for rule 'remember relative position in hierarchy'.
  180. [07/10/12 03:56:49.298]:ADTRACE ST: (if-src-dn in-subtree "xxxxx\data\users\") = TRUE.
  181. [07/10/12 03:56:49.298]:ADTRACE ST: (if-op-property 'attempt-to-match' not-equal "false") = TRUE.
  182. [07/10/12 03:56:49.298]:ADTRACE ST: Rule selected.
  183. [07/10/12 03:56:49.298]:ADTRACE ST: Applying rule 'remember relative position in hierarchy'.
  184. [07/10/12 03:56:49.298]:ADTRACE ST: Action: do-set-op-property("unmatched-src-dn",token-unmatched-src-dn(convert="true")).
  185. [07/10/12 03:56:49.298]:ADTRACE ST: arg-string(token-unmatched-src-dn(convert="true"))
  186. [07/10/12 03:56:49.298]:ADTRACE ST: token-unmatched-src-dn(convert="true")
  187. [07/10/12 03:56:49.298]:ADTRACE ST: Token Value: "CN=testuser1".
  188. [07/10/12 03:56:49.298]:ADTRACE ST: Arg Value: "CN=testuser1".
  189. [07/10/12 03:56:49.298]:ADTRACE ST: Action: do-set-op-property("attempt-to-match","true").
  190. [07/10/12 03:56:49.329]:ADTRACE ST: arg-string("true")
  191. [07/10/12 03:56:49.329]:ADTRACE ST: token-text("true")
  192. [07/10/12 03:56:49.329]:ADTRACE ST: Arg Value: "true".
  193. [07/10/12 03:56:49.329]:ADTRACE ST:Policy returned:
  194. [07/10/12 03:56:49.329]:ADTRACE ST:
  195. <nds dtdversion="4.0" ndsversion="8.x">
  196. <source>
  197. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  198. <contact>Novell, Inc.</contact>
  199. </source>
  200. <input>
  201. <add cached-time="20120710105648.783Z" class-name="User" event-id="WINIDM-NDS#20120710105648#1#1:32cdb17f-3b3d-4aab-93f5-f1ae52b7e86c" qualified-src-dn="O=xxxxx\OU=data\OU=users\CN=testuser1" src-dn="\xxxxxIDM\xxxxx\data\users\testuser1" src-entry-id="34037" timestamp="0#0">
  202. <add-attr attr-name="Given Name">
  203. <value timestamp="1341840499#5" type="string">test</value>
  204. </add-attr>
  205. <add-attr attr-name="Surname">
  206. <value timestamp="1341840499#4" type="string">user1</value>
  207. </add-attr>
  208. <operation-data attempt-to-match="true" unmatched-src-dn="CN=testuser1"/>
  209. </add>
  210. </input>
  211. </nds>
  212. [07/10/12 03:56:49.329]:ADTRACE ST:Applying policy: %+C%14CNOVLADENTEX-sub-mp-EntitlementsImpl%-C.
  213. [07/10/12 03:56:49.329]:ADTRACE ST: Applying to add #1.
  214. [07/10/12 03:56:49.329]:ADTRACE ST: Evaluating selection criteria for rule 'UserAccount entitlement: do not match existing accounts'.
  215. [07/10/12 03:56:49.329]:ADTRACE ST: (if-class-name equal "User") = TRUE.
  216. [07/10/12 03:56:49.329]:ADTRACE ST: (if-global-variable 'drv.entitlement.UserAccount' equal "true") = TRUE.
  217. [07/10/12 03:56:49.329]:ADTRACE ST: Query from policy
  218. [07/10/12 03:56:49.329]:ADTRACE ST:
  219. <nds dtdversion="4.0" ndsversion="8.x">
  220. <source>
  221. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  222. <contact>Novell, Inc.</contact>
  223. </source>
  224. <input>
  225. <query class-name="User" dest-dn="\xxxxxIDM\xxxxx\data\users\testuser1" dest-entry-id="34037" scope="entry">
  226. <read-attr attr-name="DirXML-EntitlementRef"/>
  227. </query>
  228. </input>
  229. </nds>
  230. [07/10/12 03:56:49.329]:ADTRACE ST: Pumping XDS to eDirectory.
  231. [07/10/12 03:56:49.329]:ADTRACE ST: Performing operation query for \xxxxxIDM\xxxxx\data\users\testuser1.
  232. [07/10/12 03:56:49.329]:ADTRACE ST: --JCLNT-- \xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver : Duplicating : context = 979763259, tempContext = 979763260
  233. [07/10/12 03:56:49.329]:ADTRACE ST: --JCLNT-- \xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver : Calling free on tempContext = 979763260
  234. [07/10/12 03:56:49.329]:ADTRACE ST: Query from policy result
  235. [07/10/12 03:56:49.329]:ADTRACE ST:
  236. <nds dtdversion="4.0" ndsversion="8.x">
  237. <source>
  238. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  239. <contact>Novell, Inc.</contact>
  240. </source>
  241. <output>
  242. <instance class-name="User" qualified-src-dn="O=xxxxx\OU=data\OU=users\CN=testuser1" src-dn="\xxxxxIDM\xxxxx\data\users\testuser1" src-entry-id="34037">
  243. <association state="migrate"></association>
  244. </instance>
  245. <status level="success"></status>
  246. </output>
  247. </nds>
  248. [07/10/12 03:56:49.345]:ADTRACE ST: (if-entitlement 'UserAccount' not-available) = TRUE.
  249. [07/10/12 03:56:49.345]:ADTRACE ST: Rule selected.
  250. [07/10/12 03:56:49.345]:ADTRACE ST: Applying rule 'UserAccount entitlement: do not match existing accounts'.
  251. [07/10/12 03:56:49.345]:ADTRACE ST: Action: do-set-op-property("attempt-to-match","false").
  252. [07/10/12 03:56:49.345]:ADTRACE ST: arg-string("false")
  253. [07/10/12 03:56:49.345]:ADTRACE ST: token-text("false")
  254. [07/10/12 03:56:49.345]:ADTRACE ST: Arg Value: "false".
  255. [07/10/12 03:56:49.345]:ADTRACE ST:Policy returned:
  256. [07/10/12 03:56:49.345]:ADTRACE ST:
  257. <nds dtdversion="4.0" ndsversion="8.x">
  258. <source>
  259. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  260. <contact>Novell, Inc.</contact>
  261. </source>
  262. <input>
  263. <add cached-time="20120710105648.783Z" class-name="User" event-id="WINIDM-NDS#20120710105648#1#1:32cdb17f-3b3d-4aab-93f5-f1ae52b7e86c" qualified-src-dn="O=xxxxx\OU=data\OU=users\CN=testuser1" src-dn="\xxxxxIDM\xxxxx\data\users\testuser1" src-entry-id="34037" timestamp="0#0">
  264. <add-attr attr-name="Given Name">
  265. <value timestamp="1341840499#5" type="string">test</value>
  266. </add-attr>
  267. <add-attr attr-name="Surname">
  268. <value timestamp="1341840499#4" type="string">user1</value>
  269. </add-attr>
  270. <operation-data attempt-to-match="false" unmatched-src-dn="CN=testuser1"/>
  271. </add>
  272. </input>
  273. </nds>
  274. [07/10/12 03:56:49.345]:ADTRACE ST:Applying policy: %+C%14CNOVLADDCFG-sub-mp%-C.
  275. [07/10/12 03:56:49.345]:ADTRACE ST: Applying to add #1.
  276. [07/10/12 03:56:49.345]:ADTRACE ST: Evaluating selection criteria for rule 'generate full name if not in Identity Vault'.
  277. [07/10/12 03:56:49.345]:ADTRACE ST: (if-class-name equal "User") = TRUE.
  278. [07/10/12 03:56:49.345]:ADTRACE ST: (if-global-variable 'FullNameMap' equal "true") = TRUE.
  279. [07/10/12 03:56:49.345]:ADTRACE ST: Query from policy
  280. [07/10/12 03:56:49.345]:ADTRACE ST:
  281. <nds dtdversion="4.0" ndsversion="8.x">
  282. <source>
  283. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  284. <contact>Novell, Inc.</contact>
  285. </source>
  286. <input>
  287. <query class-name="User" dest-dn="\xxxxxIDM\xxxxx\data\users\testuser1" dest-entry-id="34037" scope="entry">
  288. <read-attr attr-name="Full Name"/>
  289. </query>
  290. </input>
  291. </nds>
  292. [07/10/12 03:56:49.345]:ADTRACE ST: Pumping XDS to eDirectory.
  293. [07/10/12 03:56:49.345]:ADTRACE ST: Performing operation query for \xxxxxIDM\xxxxx\data\users\testuser1.
  294. [07/10/12 03:56:49.345]:ADTRACE ST: --JCLNT-- \xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver : Duplicating : context = 979763259, tempContext = 979763260
  295. [07/10/12 03:56:49.345]:ADTRACE ST: Driver object has insufficient rights to read \xxxxxIDM\xxxxx\data\users\testuser1#Full Name.
  296. [07/10/12 03:56:49.345]:ADTRACE ST: --JCLNT-- \xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver : Calling free on tempContext = 979763260
  297. [07/10/12 03:56:49.345]:ADTRACE ST: Query from policy result
  298. [07/10/12 03:56:49.345]:ADTRACE ST:
  299. <nds dtdversion="4.0" ndsversion="8.x">
  300. <source>
  301. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  302. <contact>Novell, Inc.</contact>
  303. </source>
  304. <output>
  305. <instance class-name="User" qualified-src-dn="O=xxxxx\OU=data\OU=users\CN=testuser1" src-dn="\xxxxxIDM\xxxxx\data\users\testuser1" src-entry-id="34037">
  306. <association state="migrate"></association>
  307. </instance>
  308. <status level="success"></status>
  309. </output>
  310. </nds>
  311. [07/10/12 03:56:49.361]:ADTRACE ST: (if-attr 'Full Name' not-available) = TRUE.
  312. [07/10/12 03:56:49.361]:ADTRACE ST: (if-attr 'Given Name' available) = TRUE.
  313. [07/10/12 03:56:49.361]:ADTRACE ST: Rule selected.
  314. [07/10/12 03:56:49.361]:ADTRACE ST: Applying rule 'generate full name if not in Identity Vault'.
  315. [07/10/12 03:56:49.361]:ADTRACE ST: Action: do-set-local-variable("gen-full-name",token-attr("Given Name")+" "+token-attr("Surname")).
  316. [07/10/12 03:56:49.361]:ADTRACE ST: arg-string(token-attr("Given Name")+" "+token-attr("Surname"))
  317. [07/10/12 03:56:49.361]:ADTRACE ST: token-attr("Given Name")
  318. [07/10/12 03:56:49.361]:ADTRACE ST: Token Value: "test".
  319. [07/10/12 03:56:49.361]:ADTRACE ST: token-text(" ")
  320. [07/10/12 03:56:49.361]:ADTRACE ST: token-attr("Surname")
  321. [07/10/12 03:56:49.361]:ADTRACE ST: Token Value: "user1".
  322. [07/10/12 03:56:49.361]:ADTRACE ST: Arg Value: "test user1".
  323. [07/10/12 03:56:49.361]:ADTRACE ST: Action: do-set-src-attr-value("Full Name",token-xpath("normalize-space($gen-full-name)")).
  324. [07/10/12 03:56:49.361]:ADTRACE ST: arg-string(token-xpath("normalize-space($gen-full-name)"))
  325. [07/10/12 03:56:49.361]:ADTRACE ST: token-xpath("normalize-space($gen-full-name)")
  326. [07/10/12 03:56:49.361]:ADTRACE ST: Token Value: "test user1".
  327. [07/10/12 03:56:49.361]:ADTRACE ST: Arg Value: "test user1".
  328. [07/10/12 03:56:49.361]:ADTRACE ST: Action: do-set-dest-attr-value("Full Name",token-xpath("normalize-space($gen-full-name)")).
  329. [07/10/12 03:56:49.361]:ADTRACE ST: arg-string(token-xpath("normalize-space($gen-full-name)"))
  330. [07/10/12 03:56:49.361]:ADTRACE ST: token-xpath("normalize-space($gen-full-name)")
  331. [07/10/12 03:56:49.361]:ADTRACE ST: Token Value: "test user1".
  332. [07/10/12 03:56:49.361]:ADTRACE ST: Arg Value: "test user1".
  333. [07/10/12 03:56:49.361]:ADTRACE ST: Evaluating selection criteria for rule 'match users based on NT logon name'.
  334. [07/10/12 03:56:49.361]:ADTRACE ST: (if-class-name equal "User") = TRUE.
  335. [07/10/12 03:56:49.361]:ADTRACE ST: (if-global-variable 'LogonNameMap' equal "true") = TRUE.
  336. [07/10/12 03:56:49.361]:ADTRACE ST: Rule selected.
  337. [07/10/12 03:56:49.361]:ADTRACE ST: Applying rule 'match users based on NT logon name'.
  338. [07/10/12 03:56:49.361]:ADTRACE ST: Action: do-find-matching-object(scope="subtree",arg-dn(token-global-variable("drv.user.container")),arg-match-attr("CN",token-replace-all("^a-zA-Z0-9\x21\x23-\x29\x2d\x2e\x40\x5e-\x60\x7b\x7d\x7e\xc0-\xf6\xf8-\xff\x410-\x44f","",token-src-name()))).
  339. [07/10/12 03:56:49.361]:ADTRACE ST: arg-dn(token-global-variable("drv.user.container"))
  340. [07/10/12 03:56:49.361]:ADTRACE ST: token-global-variable("drv.user.container")
  341. [07/10/12 03:56:49.361]:ADTRACE ST: Token Value: "OU=users,OU=NOVELLUSER,DC=idm,DC=com".
  342. [07/10/12 03:56:49.361]:ADTRACE ST: Arg Value: "OU=users,OU=NOVELLUSER,DC=idm,DC=com".
  343. [07/10/12 03:56:49.361]:ADTRACE ST: arg-match-attr("CN",token-replace-all("^a-zA-Z0-9\x21\x23-\x29\x2d\x2e\x40\x5e-\x60\x7b\x7d\x7e\xc0-\xf6\xf8-\xff\x410-\x44f","",token-src-name()))
  344. [07/10/12 03:56:49.361]:ADTRACE ST: arg-string(token-replace-all("^a-zA-Z0-9\x21\x23-\x29\x2d\x2e\x40\x5e-\x60\x7b\x7d\x7e\xc0-\xf6\xf8-\xff\x410-\x44f","",token-src-name()))
  345. [07/10/12 03:56:49.361]:ADTRACE ST: token-replace-all("^a-zA-Z0-9\x21\x23-\x29\x2d\x2e\x40\x5e-\x60\x7b\x7d\x7e\xc0-\xf6\xf8-\xff\x410-\x44f","",token-src-name())
  346. [07/10/12 03:56:49.361]:ADTRACE ST: token-replace-all("^a-zA-Z0-9\x21\x23-\x29\x2d\x2e\x40\x5e-\x60\x7b\x7d\x7e\xc0-\xf6\xf8-\xff\x410-\x44f","",token-src-name())
  347. [07/10/12 03:56:49.361]:ADTRACE ST: token-src-name()
  348. [07/10/12 03:56:49.361]:ADTRACE ST: Token Value: "testuser1".
  349. [07/10/12 03:56:49.361]:ADTRACE ST: Arg Value: "testuser1".
  350. [07/10/12 03:56:49.361]:ADTRACE ST: Token Value: "testuser1".
  351. [07/10/12 03:56:49.361]:ADTRACE ST: Arg Value: "testuser1".
  352. [07/10/12 03:56:49.361]:ADTRACE ST: Query from policy
  353. [07/10/12 03:56:49.361]:ADTRACE ST:
  354. <nds dtdversion="4.0" ndsversion="8.x">
  355. <source>
  356. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  357. <contact>Novell, Inc.</contact>
  358. </source>
  359. <input>
  360. <query class-name="User" dest-dn="OU=users,OU=NOVELLUSER,DC=idm,DC=com" scope="subtree">
  361. <search-class class-name="User"/>
  362. <search-attr attr-name="CN">
  363. <value type="string">testuser1</value>
  364. </search-attr>
  365. <read-attr/>
  366. </query>
  367. </input>
  368. </nds>
  369. [07/10/12 03:56:49.376]:ADTRACE ST: Fixing up association references.
  370. [07/10/12 03:56:49.376]:ADTRACE ST: Applying schema mapping policies to output.
  371. [07/10/12 03:56:49.376]:ADTRACE ST: Applying policy: %+C%14CNOVLDATACOLL-smp-SkipSchemaMapping%-C.
  372. [07/10/12 03:56:49.376]:ADTRACE ST: Applying to query #1.
  373. [07/10/12 03:56:49.376]:ADTRACE ST: Evaluating selection criteria for rule 'skip'.
  374. [07/10/12 03:56:49.376]:ADTRACE ST: (if-operation equal "instance") = FALSE.
  375. [07/10/12 03:56:49.376]:ADTRACE ST: Rule rejected.
  376. [07/10/12 03:56:49.376]:ADTRACE ST: Evaluating selection criteria for rule 'restore'.
  377. [07/10/12 03:56:49.376]:ADTRACE ST: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  378. [07/10/12 03:56:49.376]:ADTRACE ST: Rule rejected.
  379. [07/10/12 03:56:49.376]:ADTRACE ST: Policy returned:
  380. [07/10/12 03:56:49.376]:ADTRACE ST:
  381. <nds dtdversion="4.0" ndsversion="8.x">
  382. <source>
  383. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  384. <contact>Novell, Inc.</contact>
  385. </source>
  386. <input>
  387. <query class-name="User" dest-dn="OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="subtree">
  388. <search-class class-name="User"/>
  389. <search-attr attr-name="CN">
  390. <value type="string">testuser1</value>
  391. </search-attr>
  392. <read-attr/>
  393. </query>
  394. </input>
  395. </nds>
  396. [07/10/12 03:56:49.376]:ADTRACE ST: Applying policy: %+C%14CNOVLADDCFG-smp%-C.
  397. [07/10/12 03:56:49.376]:ADTRACE ST: Mapping attr-name 'CN' to 'sAMAccountName'.
  398. [07/10/12 03:56:49.376]:ADTRACE ST: Mapping class-name 'User' to 'user'.
  399. [07/10/12 03:56:49.376]:ADTRACE ST: Mapping class-name 'User' to 'user'.
  400. [07/10/12 03:56:49.376]:ADTRACE ST: Applying policy: %+C%14CNOVLDATACOLL-smp-SkipSchemaMapping%-C.
  401. [07/10/12 03:56:49.376]:ADTRACE ST: Applying to query #1.
  402. [07/10/12 03:56:49.376]:ADTRACE ST: Evaluating selection criteria for rule 'skip'.
  403. [07/10/12 03:56:49.376]:ADTRACE ST: (if-operation equal "instance") = FALSE.
  404. [07/10/12 03:56:49.376]:ADTRACE ST: Rule rejected.
  405. [07/10/12 03:56:49.376]:ADTRACE ST: Evaluating selection criteria for rule 'restore'.
  406. [07/10/12 03:56:49.376]:ADTRACE ST: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  407. [07/10/12 03:56:49.376]:ADTRACE ST: Rule rejected.
  408. [07/10/12 03:56:49.376]:ADTRACE ST: Policy returned:
  409. [07/10/12 03:56:49.376]:ADTRACE ST:
  410. <nds dtdversion="4.0" ndsversion="8.x">
  411. <source>
  412. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  413. <contact>Novell, Inc.</contact>
  414. </source>
  415. <input>
  416. <query class-name="user" dest-dn="OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="subtree">
  417. <search-class class-name="user"/>
  418. <search-attr attr-name="sAMAccountName">
  419. <value type="string">testuser1</value>
  420. </search-attr>
  421. <read-attr/>
  422. </query>
  423. </input>
  424. </nds>
  425. [07/10/12 03:56:49.376]:ADTRACE ST: Applying output transformation policies.
  426. [07/10/12 03:56:49.392]:ADTRACE ST: Applying policy: %+C%14CNOVLADENTEX-otp-EntitlementsImpl%-C.
  427. [07/10/12 03:56:49.392]:ADTRACE ST: Applying to query #1.
  428. [07/10/12 03:56:49.392]:ADTRACE ST: Evaluating selection criteria for rule 'Intercept outbound queries for ADDomain'.
  429. [07/10/12 03:56:49.392]:ADTRACE ST: (if-class-name equal "ADDomain") = FALSE.
  430. [07/10/12 03:56:49.392]:ADTRACE ST: Rule rejected.
  431. [07/10/12 03:56:49.392]:ADTRACE ST: Policy returned:
  432. [07/10/12 03:56:49.392]:ADTRACE ST:
  433. <nds dtdversion="4.0" ndsversion="8.x">
  434. <source>
  435. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  436. <contact>Novell, Inc.</contact>
  437. </source>
  438. <input>
  439. <query class-name="user" dest-dn="OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="subtree">
  440. <search-class class-name="user"/>
  441. <search-attr attr-name="sAMAccountName">
  442. <value type="string">testuser1</value>
  443. </search-attr>
  444. <read-attr/>
  445. </query>
  446. </input>
  447. </nds>
  448. [07/10/12 03:56:49.392]:ADTRACE ST: Applying policy: %+C%14CNOVLADENTEX-otp-ExchangeMailboxPolicy%-C.
  449. [07/10/12 03:56:49.392]:ADTRACE ST: Applying to query #1.
  450. [07/10/12 03:56:49.392]:ADTRACE ST: Evaluating selection criteria for rule 'Exchange: Remove HomeMDB when disabled'.
  451. [07/10/12 03:56:49.392]:ADTRACE ST: (if-global-variable 'drv.exchMailboxMethod' equal "disabled") = TRUE.
  452. [07/10/12 03:56:49.392]:ADTRACE ST: Rule selected.
  453. [07/10/12 03:56:49.392]:ADTRACE ST: Applying rule 'Exchange: Remove HomeMDB when disabled'.
  454. [07/10/12 03:56:49.392]:ADTRACE ST: Action: do-strip-op-attr("homeMDB").
  455. [07/10/12 03:56:49.392]:ADTRACE ST: Policy returned:
  456. [07/10/12 03:56:49.392]:ADTRACE ST:
  457. <nds dtdversion="4.0" ndsversion="8.x">
  458. <source>
  459. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  460. <contact>Novell, Inc.</contact>
  461. </source>
  462. <input>
  463. <query class-name="user" dest-dn="OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="subtree">
  464. <search-class class-name="user"/>
  465. <search-attr attr-name="sAMAccountName">
  466. <value type="string">testuser1</value>
  467. </search-attr>
  468. <read-attr/>
  469. </query>
  470. </input>
  471. </nds>
  472. [07/10/12 03:56:49.392]:ADTRACE ST: Applying policy: %+C%14CNOVLADDCFG-otp-FormatConversions%-C.
  473. [07/10/12 03:56:49.392]:ADTRACE ST: Applying to query #1.
  474. [07/10/12 03:56:49.392]:ADTRACE ST: Evaluating selection criteria for rule 'Street Address: Convert LF to CR-LF'.
  475. [07/10/12 03:56:49.392]:ADTRACE ST: Rule selected.
  476. [07/10/12 03:56:49.392]:ADTRACE ST: Applying rule 'Street Address: Convert LF to CR-LF'.
  477. [07/10/12 03:56:49.392]:ADTRACE ST: Action: do-reformat-op-attr("streetAddress",token-replace-all("[^\r]\n","\r\n",token-local-variable("current-value"))).
  478. [07/10/12 03:56:49.392]:ADTRACE ST: Evaluating selection criteria for rule 'logonHours: Convert to Active Directory form'.
  479. [07/10/12 03:56:49.392]:ADTRACE ST: Rule selected.
  480. [07/10/12 03:56:49.392]:ADTRACE ST: Applying rule 'logonHours: Convert to Active Directory form'.
  481. [07/10/12 03:56:49.392]:ADTRACE ST: Action: do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2ADLenient($current-value)")).
  482. [07/10/12 03:56:49.392]:ADTRACE ST: Evaluating selection criteria for rule 'accountExpires: Convert to Active Directory form'.
  483. [07/10/12 03:56:49.392]:ADTRACE ST: (if-op-attr 'accountExpires' changing) = FALSE.
  484. [07/10/12 03:56:49.392]:ADTRACE ST: Rule rejected.
  485. [07/10/12 03:56:49.392]:ADTRACE ST: Evaluating selection criteria for rule 'lockoutTime: Convert to Active Directory form'.
  486. [07/10/12 03:56:49.392]:ADTRACE ST: Rule selected.
  487. [07/10/12 03:56:49.392]:ADTRACE ST: Applying rule 'lockoutTime: Convert to Active Directory form'.
  488. [07/10/12 03:56:49.392]:ADTRACE ST: Action: do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateEpoch2FileTime($current-value)")).
  489. [07/10/12 03:56:49.392]:ADTRACE ST: Evaluating selection criteria for rule 'Add: User - convert multi-valued Telephone to single value'.
  490. [07/10/12 03:56:49.392]:ADTRACE ST: (if-operation equal "add") = FALSE.
  491. [07/10/12 03:56:49.392]:ADTRACE ST: Rule rejected.
  492. [07/10/12 03:56:49.392]:ADTRACE ST: Evaluating selection criteria for rule 'update Active Directory logon name'.
  493. [07/10/12 03:56:49.392]:ADTRACE ST: (if-xpath true "self::status[@level = 'success']/operation-data/windows-2000-logon-name") = FALSE.
  494. [07/10/12 03:56:49.392]:ADTRACE ST: Rule rejected.
  495. [07/10/12 03:56:49.392]:ADTRACE ST: Policy returned:
  496. [07/10/12 03:56:49.392]:ADTRACE ST:
  497. <nds dtdversion="4.0" ndsversion="8.x">
  498. <source>
  499. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  500. <contact>Novell, Inc.</contact>
  501. </source>
  502. <input>
  503. <query class-name="user" dest-dn="OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="subtree">
  504. <search-class class-name="user"/>
  505. <search-attr attr-name="sAMAccountName">
  506. <value type="string">testuser1</value>
  507. </search-attr>
  508. <read-attr/>
  509. </query>
  510. </input>
  511. </nds>
  512. [07/10/12 03:56:49.408]:ADTRACE ST: Applying policy: %+C%14CNOVLADDCFG-otp-ExchangeEntitlementQuery%-C.
  513. [07/10/12 03:56:49.408]:ADTRACE ST: Applying to query #1.
  514. [07/10/12 03:56:49.408]:ADTRACE ST: Evaluating selection criteria for rule 'Add dest-dn to the Exchange Entitlement Query'.
  515. [07/10/12 03:56:49.408]:ADTRACE ST: (if-operation equal "query") = TRUE.
  516. [07/10/12 03:56:49.408]:ADTRACE ST: (if-class-name equal "msExchPrivateMDB") = FALSE.
  517. [07/10/12 03:56:49.408]:ADTRACE ST: Rule rejected.
  518. [07/10/12 03:56:49.408]:ADTRACE ST: Policy returned:
  519. [07/10/12 03:56:49.408]:ADTRACE ST:
  520. <nds dtdversion="4.0" ndsversion="8.x">
  521. <source>
  522. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  523. <contact>Novell, Inc.</contact>
  524. </source>
  525. <input>
  526. <query class-name="user" dest-dn="OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="subtree">
  527. <search-class class-name="user"/>
  528. <search-attr attr-name="sAMAccountName">
  529. <value type="string">testuser1</value>
  530. </search-attr>
  531. <read-attr/>
  532. </query>
  533. </input>
  534. </nds>
  535. [07/10/12 03:56:49.408]:ADTRACE ST: Applying policy: %+C%14CNOVLPWDSYNC-otp-EmailOnFailedPwdPub%-C.
  536. [07/10/12 03:56:49.408]:ADTRACE ST: Applying to query #1.
  537. [07/10/12 03:56:49.408]:ADTRACE ST: Evaluating selection criteria for rule 'Send e-mail for a failed publish password operation'.
  538. [07/10/12 03:56:49.408]:ADTRACE ST: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  539. [07/10/12 03:56:49.408]:ADTRACE ST: (if-operation equal "status") = FALSE.
  540. [07/10/12 03:56:49.408]:ADTRACE ST: Rule rejected.
  541. [07/10/12 03:56:49.408]:ADTRACE ST: Policy returned:
  542. [07/10/12 03:56:49.408]:ADTRACE ST:
  543. <nds dtdversion="4.0" ndsversion="8.x">
  544. <source>
  545. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  546. <contact>Novell, Inc.</contact>
  547. </source>
  548. <input>
  549. <query class-name="user" dest-dn="OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="subtree">
  550. <search-class class-name="user"/>
  551. <search-attr attr-name="sAMAccountName">
  552. <value type="string">testuser1</value>
  553. </search-attr>
  554. <read-attr/>
  555. </query>
  556. </input>
  557. </nds>
  558. [07/10/12 03:56:49.408]:ADTRACE ST: Applying policy: %+C%14CNOVLATRKBASE-otp-Subscribe%-C.
  559. [07/10/12 03:56:49.408]:ADTRACE ST: Applying to query #1.
  560. [07/10/12 03:56:49.408]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - Initialize Realm Mapping'.
  561. [07/10/12 03:56:49.408]:ADTRACE ST: (if-global-variable 'drv.acctTrk.enable' equal "true") = TRUE.
  562. [07/10/12 03:56:49.408]:ADTRACE ST: (if-global-variable 'drv.acctTrk.mode' equal "fanout") = FALSE.
  563. [07/10/12 03:56:49.408]:ADTRACE ST: Rule rejected.
  564. [07/10/12 03:56:49.408]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled or wrong object class'.
  565. [07/10/12 03:56:49.408]:ADTRACE ST: Rule selected.
  566. [07/10/12 03:56:49.408]:ADTRACE ST: Applying rule 'AccountTracking - disregard if disabled or wrong object class'.
  567. [07/10/12 03:56:49.408]:ADTRACE ST: Action: do-if().
  568. [07/10/12 03:56:49.408]:ADTRACE ST: Evaluating conditions.
  569. [07/10/12 03:56:49.408]:ADTRACE ST: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  570. [07/10/12 03:56:49.408]:ADTRACE ST: Performing else actions.
  571. [07/10/12 03:56:49.408]:ADTRACE ST: Action: do-for-each(arg-node-set(token-global-variable("drv.acctTrk.objectClass"))).
  572. [07/10/12 03:56:49.408]:ADTRACE ST: arg-node-set(token-global-variable("drv.acctTrk.objectClass"))
  573. [07/10/12 03:56:49.408]:ADTRACE ST: token-global-variable("drv.acctTrk.objectClass")
  574. [07/10/12 03:56:49.408]:ADTRACE ST: Token Value: {"user"}.
  575. [07/10/12 03:56:49.408]:ADTRACE ST: Arg Value: {"user"}.
  576. [07/10/12 03:56:49.408]:ADTRACE ST: Performing actions for local-variable(current-node) = "user".
  577. [07/10/12 03:56:49.408]:ADTRACE ST: Action: do-if().
  578. [07/10/12 03:56:49.408]:ADTRACE ST: Evaluating conditions.
  579. [07/10/12 03:56:49.408]:ADTRACE ST: Expanded variable reference '$current-node$' to 'user'.
  580. [07/10/12 03:56:49.423]:ADTRACE ST: (if-class-name equal "$current-node$") = TRUE.
  581. [07/10/12 03:56:49.423]:ADTRACE ST: Performing if actions.
  582. [07/10/12 03:56:49.423]:ADTRACE ST: Action: do-set-local-variable("pass",scope="policy","true").
  583. [07/10/12 03:56:49.423]:ADTRACE ST: arg-string("true")
  584. [07/10/12 03:56:49.423]:ADTRACE ST: token-text("true")
  585. [07/10/12 03:56:49.423]:ADTRACE ST: Arg Value: "true".
  586. [07/10/12 03:56:49.423]:ADTRACE ST: Action: do-if().
  587. [07/10/12 03:56:49.423]:ADTRACE ST: Evaluating conditions.
  588. [07/10/12 03:56:49.423]:ADTRACE ST: (if-local-variable 'pass' not-available) = FALSE.
  589. [07/10/12 03:56:49.423]:ADTRACE ST: Performing else actions.
  590. [07/10/12 03:56:49.423]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - add operation-data for regular operations'.
  591. [07/10/12 03:56:49.423]:ADTRACE ST: (if-operation match "add|modify|delete|rename|move") = FALSE.
  592. [07/10/12 03:56:49.423]:ADTRACE ST: Rule rejected.
  593. [07/10/12 03:56:49.423]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - add operation-data for mapped operations'.
  594. [07/10/12 03:56:49.423]:ADTRACE ST: (if-global-variable 'drv.acctTrk.mode' equal "fanout") = FALSE.
  595. [07/10/12 03:56:49.423]:ADTRACE ST: Rule rejected.
  596. [07/10/12 03:56:49.423]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - strip AccountTrackingAccountStatus attribute'.
  597. [07/10/12 03:56:49.423]:ADTRACE ST: (if-op-attr 'AccountTrackingAccountStatus' available) = FALSE.
  598. [07/10/12 03:56:49.423]:ADTRACE ST: Rule rejected.
  599. [07/10/12 03:56:49.423]:ADTRACE ST: Policy returned:
  600. [07/10/12 03:56:49.423]:ADTRACE ST:
  601. <nds dtdversion="4.0" ndsversion="8.x">
  602. <source>
  603. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  604. <contact>Novell, Inc.</contact>
  605. </source>
  606. <input>
  607. <query class-name="user" dest-dn="OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="subtree">
  608. <search-class class-name="user"/>
  609. <search-attr attr-name="sAMAccountName">
  610. <value type="string">testuser1</value>
  611. </search-attr>
  612. <read-attr/>
  613. </query>
  614. </input>
  615. </nds>
  616. [07/10/12 03:56:49.423]:ADTRACE ST: Submitting document to subscriber shim:
  617. [07/10/12 03:56:49.423]:ADTRACE ST:
  618. <nds dtdversion="4.0" ndsversion="8.x">
  619. <source>
  620. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  621. <contact>Novell, Inc.</contact>
  622. </source>
  623. <input>
  624. <query class-name="user" dest-dn="OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="subtree">
  625. <search-class class-name="user"/>
  626. <search-attr attr-name="sAMAccountName">
  627. <value type="string">testuser1</value>
  628. </search-attr>
  629. <read-attr/>
  630. </query>
  631. </input>
  632. </nds>
  633. [07/10/12 03:56:49.423]:ADTRACE ST: Remote Interface Driver: Sending...
  634. [07/10/12 03:56:49.423]:ADTRACE ST:
  635. <nds dtdversion="4.0" ndsversion="8.x">
  636. <source>
  637. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  638. <contact>Novell, Inc.</contact>
  639. </source>
  640. <input>
  641. <query class-name="user" dest-dn="OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="subtree">
  642. <search-class class-name="user"/>
  643. <search-attr attr-name="sAMAccountName">
  644. <value type="string">testuser1</value>
  645. </search-attr>
  646. <read-attr/>
  647. </query>
  648. </input>
  649. </nds>
  650. [07/10/12 03:56:49.423]:ADTRACE ST: Remote Interface Driver: Document sent.
  651. [07/10/12 03:56:49.548]:ADTRACE :Remote Interface Driver: Received.
  652. [07/10/12 03:56:49.548]:ADTRACE :
  653. <nds dtdversion="1.1" ndsversion="8.7">
  654. <source>
  655. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  656. <contact>Novell, Inc.</contact>
  657. </source>
  658. <output>
  659. <status event-id="0" level="success"/>
  660. </output>
  661. </nds>
  662. [07/10/12 03:56:49.548]:ADTRACE :Remote Interface Driver: Received document for subscriber channel
  663. [07/10/12 03:56:49.548]:ADTRACE :Remote Interface Driver: Waiting for receive...
  664. [07/10/12 03:56:49.548]:ADTRACE ST: SubscriptionShim.execute() returned:
  665. [07/10/12 03:56:49.548]:ADTRACE ST:
  666. <nds dtdversion="1.1" ndsversion="8.7">
  667. <source>
  668. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  669. <contact>Novell, Inc.</contact>
  670. </source>
  671. <output>
  672. <status event-id="0" level="success"/>
  673. </output>
  674. </nds>
  675. [07/10/12 03:56:49.548]:ADTRACE ST: Applying input transformation policies.
  676. [07/10/12 03:56:49.548]:ADTRACE ST: Applying policy: %+C%14CNOVLAUDTENTC-itp-SendEntitlementsEvents%-C.
  677. [07/10/12 03:56:49.548]:ADTRACE ST: Applying to status #1.
  678. [07/10/12 03:56:49.548]:ADTRACE ST: Evaluating selection criteria for rule '00031200 - Account Create By Entitlement Grant'.
  679. [07/10/12 03:56:49.548]:ADTRACE ST: (if-operation equal "status") = TRUE.
  680. [07/10/12 03:56:49.548]:ADTRACE ST: (if-op-property 'accountAction' equal "accountCreateByEntitlementGrant") = FALSE.
  681. [07/10/12 03:56:49.564]:ADTRACE ST: Rule rejected.
  682. [07/10/12 03:56:49.564]:ADTRACE ST: Evaluating selection criteria for rule '00031201 - Account Delete By Entitlement Revoke'.
  683. [07/10/12 03:56:49.564]:ADTRACE ST: (if-operation equal "status") = TRUE.
  684. [07/10/12 03:56:49.564]:ADTRACE ST: (if-xpath true "./operation-data/entitlement-impl/@state = '0'") = FALSE.
  685. [07/10/12 03:56:49.564]:ADTRACE ST: (if-operation equal "status") = TRUE.
  686. [07/10/12 03:56:49.564]:ADTRACE ST: (if-op-property 'accountAction' equal "accountDeleteByEntitlementRevoke") = FALSE.
  687. [07/10/12 03:56:49.564]:ADTRACE ST: Rule rejected.
  688. [07/10/12 03:56:49.564]:ADTRACE ST: Evaluating selection criteria for rule '00031202 - Account Disable By Entitlement Revoke'.
  689. [07/10/12 03:56:49.564]:ADTRACE ST: (if-operation equal "status") = TRUE.
  690. [07/10/12 03:56:49.564]:ADTRACE ST: (if-op-property 'accountAction' equal "accountDisableByEntitlementRevoke") = FALSE.
  691. [07/10/12 03:56:49.564]:ADTRACE ST: Rule rejected.
  692. [07/10/12 03:56:49.564]:ADTRACE ST: Evaluating selection criteria for rule '00031203 - Account Enable By Entitlement Grant'.
  693. [07/10/12 03:56:49.564]:ADTRACE ST: (if-operation equal "status") = TRUE.
  694. [07/10/12 03:56:49.564]:ADTRACE ST: (if-op-property 'accountAction' equal "accountEnableByEntitlementGrant") = FALSE.
  695. [07/10/12 03:56:49.564]:ADTRACE ST: Rule rejected.
  696. [07/10/12 03:56:49.564]:ADTRACE ST: Evaluating selection criteria for rule 'Generate Audit Event'.
  697. [07/10/12 03:56:49.564]:ADTRACE ST: (if-operation equal "status") = TRUE.
  698. [07/10/12 03:56:49.564]:ADTRACE ST: (if-local-variable 'auditEventID' available) = FALSE.
  699. [07/10/12 03:56:49.564]:ADTRACE ST: Rule rejected.
  700. [07/10/12 03:56:49.564]:ADTRACE ST: Policy returned:
  701. [07/10/12 03:56:49.564]:ADTRACE ST:
  702. <nds dtdversion="1.1" ndsversion="8.7">
  703. <source>
  704. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  705. <contact>Novell, Inc.</contact>
  706. </source>
  707. <output>
  708. <status event-id="0" level="success"/>
  709. </output>
  710. </nds>
  711. [07/10/12 03:56:49.564]:ADTRACE ST: Applying policy: %+C%14CNOVLADENTEX-itp-InitEntitlementConfigurationResource%-C.
  712. [07/10/12 03:56:49.564]:ADTRACE ST: Applying to status #1.
  713. [07/10/12 03:56:49.564]:ADTRACE ST: Evaluating selection criteria for rule 'Make sure we only run once and when we're ready'.
  714. [07/10/12 03:56:49.564]:ADTRACE ST: (if-local-variable 'objectClass' match ".+") = TRUE.
  715. [07/10/12 03:56:49.564]:ADTRACE ST: (if-local-variable 'entConfigInitialized' equal "true") = TRUE.
  716. [07/10/12 03:56:49.564]:ADTRACE ST: Rule selected.
  717. [07/10/12 03:56:49.564]:ADTRACE ST: Applying rule 'Make sure we only run once and when we're ready'.
  718. [07/10/12 03:56:49.564]:ADTRACE ST: Action: do-break().
  719. [07/10/12 03:56:49.564]:ADTRACE ST: Policy returned:
  720. [07/10/12 03:56:49.564]:ADTRACE ST:
  721. <nds dtdversion="1.1" ndsversion="8.7">
  722. <source>
  723. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  724. <contact>Novell, Inc.</contact>
  725. </source>
  726. <output>
  727. <status event-id="0" level="success"/>
  728. </output>
  729. </nds>
  730. [07/10/12 03:56:49.564]:ADTRACE ST: Applying policy: %+C%14CNOVLADMSINFO-itp-InitManagedSystemInfo%-C.
  731. [07/10/12 03:56:49.564]:ADTRACE ST: Applying to status #1.
  732. [07/10/12 03:56:49.564]:ADTRACE ST: Evaluating selection criteria for rule 'Make sure we only run once and when we're ready'.
  733. [07/10/12 03:56:49.564]:ADTRACE ST: (if-local-variable 'objectClass' match ".+") = TRUE.
  734. [07/10/12 03:56:49.564]:ADTRACE ST: (if-local-variable 'mSysInfoInitialized' equal "true") = TRUE.
  735. [07/10/12 03:56:49.564]:ADTRACE ST: Rule selected.
  736. [07/10/12 03:56:49.564]:ADTRACE ST: Applying rule 'Make sure we only run once and when we're ready'.
  737. [07/10/12 03:56:49.564]:ADTRACE ST: Action: do-break().
  738. [07/10/12 03:56:49.564]:ADTRACE ST: Policy returned:
  739. [07/10/12 03:56:49.564]:ADTRACE ST:
  740. <nds dtdversion="1.1" ndsversion="8.7">
  741. <source>
  742. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  743. <contact>Novell, Inc.</contact>
  744. </source>
  745. <output>
  746. <status event-id="0" level="success"/>
  747. </output>
  748. </nds>
  749. [07/10/12 03:56:49.564]:ADTRACE ST: Applying policy: %+C%14CNOVLATRKBASE-itp-Publish%-C.
  750. [07/10/12 03:56:49.564]:ADTRACE ST: Applying to status #1.
  751. [07/10/12 03:56:49.564]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled or wrong object class'.
  752. [07/10/12 03:56:49.564]:ADTRACE ST: Rule selected.
  753. [07/10/12 03:56:49.564]:ADTRACE ST: Applying rule 'AccountTracking - disregard if disabled or wrong object class'.
  754. [07/10/12 03:56:49.579]:ADTRACE ST: Action: do-if().
  755. [07/10/12 03:56:49.579]:ADTRACE ST: Evaluating conditions.
  756. [07/10/12 03:56:49.579]:ADTRACE ST: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  757. [07/10/12 03:56:49.579]:ADTRACE ST: Performing else actions.
  758. [07/10/12 03:56:49.579]:ADTRACE ST: Action: do-if().
  759. [07/10/12 03:56:49.579]:ADTRACE ST: Evaluating conditions.
  760. [07/10/12 03:56:49.579]:ADTRACE ST: (if-class-name available) = FALSE.
  761. [07/10/12 03:56:49.579]:ADTRACE ST: Performing else actions.
  762. [07/10/12 03:56:49.579]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - on add-association sync the operation-properties to status operations'.
  763. [07/10/12 03:56:49.579]:ADTRACE ST: (if-operation equal "add-association") = FALSE.
  764. [07/10/12 03:56:49.579]:ADTRACE ST: Rule rejected.
  765. [07/10/12 03:56:49.579]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - Query for destination DN using Association'.
  766. [07/10/12 03:56:49.579]:ADTRACE ST: (if-operation match "modify|delete|move|rename") = FALSE.
  767. [07/10/12 03:56:49.579]:ADTRACE ST: Rule rejected.
  768. [07/10/12 03:56:49.579]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - add interested properties to current doc for future use.'.
  769. [07/10/12 03:56:49.579]:ADTRACE ST: (if-operation match "add|modify|delete|rename|move|status") = TRUE.
  770. [07/10/12 03:56:49.579]:ADTRACE ST: Rule selected.
  771. [07/10/12 03:56:49.579]:ADTRACE ST: Applying rule 'AccountTracking - add interested properties to current doc for future use.'.
  772. [07/10/12 03:56:49.579]:ADTRACE ST: Action: do-for-each(arg-node-set(token-global-variable("drv.acctTrk.identifiers"))).
  773. [07/10/12 03:56:49.579]:ADTRACE ST: arg-node-set(token-global-variable("drv.acctTrk.identifiers"))
  774. [07/10/12 03:56:49.579]:ADTRACE ST: token-global-variable("drv.acctTrk.identifiers")
  775. [07/10/12 03:56:49.579]:ADTRACE ST: Token Value: {"sAMAccountName","userPrincipalName","LDAPDN","association"}.
  776. [07/10/12 03:56:49.579]:ADTRACE ST: Arg Value: {"sAMAccountName","userPrincipalName","LDAPDN","association"}.
  777. [07/10/12 03:56:49.579]:ADTRACE ST: Performing actions for local-variable(current-node) = "sAMAccountName".
  778. [07/10/12 03:56:49.579]:ADTRACE ST: Action: do-if().
  779. [07/10/12 03:56:49.579]:ADTRACE ST: Evaluating conditions.
  780. [07/10/12 03:56:49.579]:ADTRACE ST: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  781. [07/10/12 03:56:49.579]:ADTRACE ST: Performing else actions.
  782. [07/10/12 03:56:49.579]:ADTRACE ST: Action: do-if().
  783. [07/10/12 03:56:49.579]:ADTRACE ST: Evaluating conditions.
  784. [07/10/12 03:56:49.579]:ADTRACE ST: (if-local-variable 'current-node' equal "association") = FALSE.
  785. [07/10/12 03:56:49.579]:ADTRACE ST: Performing else actions.
  786. [07/10/12 03:56:49.579]:ADTRACE ST: Action: do-if().
  787. [07/10/12 03:56:49.579]:ADTRACE ST: Evaluating conditions.
  788. [07/10/12 03:56:49.579]:ADTRACE ST: Expanded variable reference '$current-node$' to 'sAMAccountName'.
  789. [07/10/12 03:56:49.579]:ADTRACE ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  790. [07/10/12 03:56:49.579]:ADTRACE ST: Expanded variable reference '$current-node$' to 'sAMAccountName'.
  791. [07/10/12 03:56:49.579]:ADTRACE ST: (if-op-attr '$current-node$' available) = FALSE.
  792. [07/10/12 03:56:49.579]:ADTRACE ST: Performing else actions.
  793. [07/10/12 03:56:49.579]:ADTRACE ST: Performing actions for local-variable(current-node) = "userPrincipalName".
  794. [07/10/12 03:56:49.579]:ADTRACE ST: Action: do-if().
  795. [07/10/12 03:56:49.579]:ADTRACE ST: Evaluating conditions.
  796. [07/10/12 03:56:49.579]:ADTRACE ST: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  797. [07/10/12 03:56:49.579]:ADTRACE ST: Performing else actions.
  798. [07/10/12 03:56:49.579]:ADTRACE ST: Action: do-if().
  799. [07/10/12 03:56:49.579]:ADTRACE ST: Evaluating conditions.
  800. [07/10/12 03:56:49.595]:ADTRACE ST: (if-local-variable 'current-node' equal "association") = FALSE.
  801. [07/10/12 03:56:49.595]:ADTRACE ST: Performing else actions.
  802. [07/10/12 03:56:49.595]:ADTRACE ST: Action: do-if().
  803. [07/10/12 03:56:49.595]:ADTRACE ST: Evaluating conditions.
  804. [07/10/12 03:56:49.595]:ADTRACE ST: Expanded variable reference '$current-node$' to 'userPrincipalName'.
  805. [07/10/12 03:56:49.595]:ADTRACE ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  806. [07/10/12 03:56:49.595]:ADTRACE ST: Expanded variable reference '$current-node$' to 'userPrincipalName'.
  807. [07/10/12 03:56:49.595]:ADTRACE ST: (if-op-attr '$current-node$' available) = FALSE.
  808. [07/10/12 03:56:49.595]:ADTRACE ST: Performing else actions.
  809. [07/10/12 03:56:49.595]:ADTRACE ST: Performing actions for local-variable(current-node) = "LDAPDN".
  810. [07/10/12 03:56:49.595]:ADTRACE ST: Action: do-if().
  811. [07/10/12 03:56:49.595]:ADTRACE ST: Evaluating conditions.
  812. [07/10/12 03:56:49.595]:ADTRACE ST: (if-local-variable 'current-node' equal "LDAPDN") = TRUE.
  813. [07/10/12 03:56:49.595]:ADTRACE ST: Expanded variable reference '$current-node$' to 'LDAPDN'.
  814. [07/10/12 03:56:49.595]:ADTRACE ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  815. [07/10/12 03:56:49.595]:ADTRACE ST: (if-src-dn available) = FALSE.
  816. [07/10/12 03:56:49.595]:ADTRACE ST: Performing else actions.
  817. [07/10/12 03:56:49.595]:ADTRACE ST: Action: do-if().
  818. [07/10/12 03:56:49.595]:ADTRACE ST: Evaluating conditions.
  819. [07/10/12 03:56:49.595]:ADTRACE ST: (if-local-variable 'current-node' equal "association") = FALSE.
  820. [07/10/12 03:56:49.595]:ADTRACE ST: Performing else actions.
  821. [07/10/12 03:56:49.595]:ADTRACE ST: Action: do-if().
  822. [07/10/12 03:56:49.595]:ADTRACE ST: Evaluating conditions.
  823. [07/10/12 03:56:49.595]:ADTRACE ST: Expanded variable reference '$current-node$' to 'LDAPDN'.
  824. [07/10/12 03:56:49.595]:ADTRACE ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  825. [07/10/12 03:56:49.595]:ADTRACE ST: Expanded variable reference '$current-node$' to 'LDAPDN'.
  826. [07/10/12 03:56:49.595]:ADTRACE ST: (if-op-attr '$current-node$' available) = FALSE.
  827. [07/10/12 03:56:49.595]:ADTRACE ST: Performing else actions.
  828. [07/10/12 03:56:49.595]:ADTRACE ST: Performing actions for local-variable(current-node) = "association".
  829. [07/10/12 03:56:49.595]:ADTRACE ST: Action: do-if().
  830. [07/10/12 03:56:49.595]:ADTRACE ST: Evaluating conditions.
  831. [07/10/12 03:56:49.595]:ADTRACE ST: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  832. [07/10/12 03:56:49.595]:ADTRACE ST: Performing else actions.
  833. [07/10/12 03:56:49.595]:ADTRACE ST: Action: do-if().
  834. [07/10/12 03:56:49.595]:ADTRACE ST: Evaluating conditions.
  835. [07/10/12 03:56:49.595]:ADTRACE ST: (if-local-variable 'current-node' equal "association") = TRUE.
  836. [07/10/12 03:56:49.595]:ADTRACE ST: Expanded variable reference '$current-node$' to 'association'.
  837. [07/10/12 03:56:49.595]:ADTRACE ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  838. [07/10/12 03:56:49.595]:ADTRACE ST: (if-association available) = FALSE.
  839. [07/10/12 03:56:49.595]:ADTRACE ST: Performing else actions.
  840. [07/10/12 03:56:49.595]:ADTRACE ST: Action: do-if().
  841. [07/10/12 03:56:49.595]:ADTRACE ST: Evaluating conditions.
  842. [07/10/12 03:56:49.595]:ADTRACE ST: Expanded variable reference '$current-node$' to 'association'.
  843. [07/10/12 03:56:49.595]:ADTRACE ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  844. [07/10/12 03:56:49.595]:ADTRACE ST: Expanded variable reference '$current-node$' to 'association'.
  845. [07/10/12 03:56:49.595]:ADTRACE ST: (if-op-attr '$current-node$' available) = FALSE.
  846. [07/10/12 03:56:49.595]:ADTRACE ST: Performing else actions.
  847. [07/10/12 03:56:49.595]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - Initialize status properties on published events'.
  848. [07/10/12 03:56:49.611]:ADTRACE ST: (if-operation match "add|modify|delete|rename|move") = FALSE.
  849. [07/10/12 03:56:49.611]:ADTRACE ST: Rule rejected.
  850. [07/10/12 03:56:49.611]:ADTRACE ST: Policy returned:
  851. [07/10/12 03:56:49.611]:ADTRACE ST:
  852. <nds dtdversion="1.1" ndsversion="8.7">
  853. <source>
  854. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  855. <contact>Novell, Inc.</contact>
  856. </source>
  857. <output>
  858. <status event-id="0" level="success"/>
  859. </output>
  860. </nds>
  861. [07/10/12 03:56:49.611]:ADTRACE ST: Applying policy: %+C%14CNOVLATRKBASE-itp-WriteAccounts%-C.
  862. [07/10/12 03:56:49.611]:ADTRACE ST: Applying to status #1.
  863. [07/10/12 03:56:49.611]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - Initialize Realm Mapping'.
  864. [07/10/12 03:56:49.611]:ADTRACE ST: (if-global-variable 'drv.acctTrk.enable' equal "true") = TRUE.
  865. [07/10/12 03:56:49.611]:ADTRACE ST: (if-global-variable 'drv.acctTrk.mode' equal "fanout") = FALSE.
  866. [07/10/12 03:56:49.611]:ADTRACE ST: Rule rejected.
  867. [07/10/12 03:56:49.611]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled'.
  868. [07/10/12 03:56:49.611]:ADTRACE ST: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  869. [07/10/12 03:56:49.611]:ADTRACE ST: Rule rejected.
  870. [07/10/12 03:56:49.611]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - query DirXML-Accounts Attribute'.
  871. [07/10/12 03:56:49.611]:ADTRACE ST: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  872. [07/10/12 03:56:49.611]:ADTRACE ST: Rule rejected.
  873. [07/10/12 03:56:49.611]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - remove Dirxml-Account values on regular delete operation'.
  874. [07/10/12 03:56:49.611]:ADTRACE ST: (if-operation match "delete|remove-association") = FALSE.
  875. [07/10/12 03:56:49.611]:ADTRACE ST: (if-operation equal "status") = TRUE.
  876. [07/10/12 03:56:49.611]:ADTRACE ST: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  877. [07/10/12 03:56:49.611]:ADTRACE ST: Rule rejected.
  878. [07/10/12 03:56:49.611]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - update DirXMLAccounts attribute on regular operations'.
  879. [07/10/12 03:56:49.611]:ADTRACE ST: (if-op-property 'AccountTracking-Operation' not-available) = TRUE.
  880. [07/10/12 03:56:49.611]:ADTRACE ST: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  881. [07/10/12 03:56:49.611]:ADTRACE ST: (if-operation equal "status") = TRUE.
  882. [07/10/12 03:56:49.611]:ADTRACE ST: (if-xpath true "./@level='success' or ./@level='warning'") = TRUE.
  883. [07/10/12 03:56:49.611]:ADTRACE ST: (if-op-property 'AccountTracking-Operation' available) = FALSE.
  884. [07/10/12 03:56:49.611]:ADTRACE ST: Rule rejected.
  885. [07/10/12 03:56:49.611]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - update DirXMLAccounts attribute on mapped operations'.
  886. [07/10/12 03:56:49.611]:ADTRACE ST: (if-xpath true "operation-data/account-tracking-operation") = FALSE.
  887. [07/10/12 03:56:49.611]:ADTRACE ST: (if-xpath true "operation-data/account-tracking-operation") = FALSE.
  888. [07/10/12 03:56:49.611]:ADTRACE ST: Rule rejected.
  889. [07/10/12 03:56:49.611]:ADTRACE ST: Policy returned:
  890. [07/10/12 03:56:49.611]:ADTRACE ST:
  891. <nds dtdversion="1.1" ndsversion="8.7">
  892. <source>
  893. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  894. <contact>Novell, Inc.</contact>
  895. </source>
  896. <output>
  897. <status event-id="0" level="success"/>
  898. </output>
  899. </nds>
  900. [07/10/12 03:56:49.611]:ADTRACE ST: Applying policy: %+C%14CNOVLADDCFG-itp-SubscriberUserAdd%-C.
  901. [07/10/12 03:56:49.611]:ADTRACE ST: Applying to status #1.
  902. [07/10/12 03:56:49.611]:ADTRACE ST: Evaluating selection criteria for rule 'Populate DirXML-ADContext on initial user add'.
  903. [07/10/12 03:56:49.611]:ADTRACE ST: (if-operation equal "add-association") = FALSE.
  904. [07/10/12 03:56:49.611]:ADTRACE ST: Rule rejected.
  905. [07/10/12 03:56:49.611]:ADTRACE ST: Policy returned:
  906. [07/10/12 03:56:49.611]:ADTRACE ST:
  907. <nds dtdversion="1.1" ndsversion="8.7">
  908. <source>
  909. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  910. <contact>Novell, Inc.</contact>
  911. </source>
  912. <output>
  913. <status event-id="0" level="success"/>
  914. </output>
  915. </nds>
  916. [07/10/12 03:56:49.611]:ADTRACE ST: Applying policy: %+C%14CNOVLADDCFG-itp-FormatConversions%-C.
  917. [07/10/12 03:56:49.611]:ADTRACE ST: Applying to status #1.
  918. [07/10/12 03:56:49.611]:ADTRACE ST: Evaluating selection criteria for rule 'streetAddress: Convert CR-LF to LF'.
  919. [07/10/12 03:56:49.626]:ADTRACE ST: Rule selected.
  920. [07/10/12 03:56:49.626]:ADTRACE ST: Applying rule 'streetAddress: Convert CR-LF to LF'.
  921. [07/10/12 03:56:49.626]:ADTRACE ST: Action: do-reformat-op-attr("streetAddress",token-replace-all("\r\n","\r",token-local-variable("current-value"))).
  922. [07/10/12 03:56:49.626]:ADTRACE ST: Evaluating selection criteria for rule 'logonHours: Convert to Login Allowed Time Map form'.
  923. [07/10/12 03:56:49.626]:ADTRACE ST: Rule selected.
  924. [07/10/12 03:56:49.626]:ADTRACE ST: Applying rule 'logonHours: Convert to Login Allowed Time Map form'.
  925. [07/10/12 03:56:49.626]:ADTRACE ST: Action: do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2eDir($current-value)")).
  926. [07/10/12 03:56:49.626]:ADTRACE ST: Evaluating selection criteria for rule 'accountExpires: Convert to Identity Vault time format'.
  927. [07/10/12 03:56:49.626]:ADTRACE ST: Rule selected.
  928. [07/10/12 03:56:49.626]:ADTRACE ST: Applying rule 'accountExpires: Convert to Identity Vault time format'.
  929. [07/10/12 03:56:49.626]:ADTRACE ST: Action: do-reformat-op-attr("accountExpires",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
  930. [07/10/12 03:56:49.626]:ADTRACE ST: Evaluating selection criteria for rule 'lockoutTime: Convert to Identity Vault time format'.
  931. [07/10/12 03:56:49.626]:ADTRACE ST: Rule selected.
  932. [07/10/12 03:56:49.626]:ADTRACE ST: Applying rule 'lockoutTime: Convert to Identity Vault time format'.
  933. [07/10/12 03:56:49.626]:ADTRACE ST: Action: do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
  934. [07/10/12 03:56:49.626]:ADTRACE ST: Policy returned:
  935. [07/10/12 03:56:49.626]:ADTRACE ST:
  936. <nds dtdversion="1.1" ndsversion="8.7">
  937. <source>
  938. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  939. <contact>Novell, Inc.</contact>
  940. </source>
  941. <output>
  942. <status event-id="0" level="success"/>
  943. </output>
  944. </nds>
  945. [07/10/12 03:56:49.626]:ADTRACE ST: Applying policy: %+C%14CNOVLDATACOLL-itp-DataCollectionQuerySupport%-C.
  946. [07/10/12 03:56:49.626]:ADTRACE ST: Applying to status #1.
  947. [07/10/12 03:56:49.626]:ADTRACE ST: Evaluating selection criteria for rule 'Rename @association-ref to @association and change @type from "dn" to "{dn}"'.
  948. [07/10/12 03:56:49.626]:ADTRACE ST: (if-operation equal "instance") = FALSE.
  949. [07/10/12 03:56:49.626]:ADTRACE ST: Rule rejected.
  950. [07/10/12 03:56:49.626]:ADTRACE ST: Policy returned:
  951. [07/10/12 03:56:49.626]:ADTRACE ST:
  952. <nds dtdversion="1.1" ndsversion="8.7">
  953. <source>
  954. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  955. <contact>Novell, Inc.</contact>
  956. </source>
  957. <output>
  958. <status event-id="0" level="success"/>
  959. </output>
  960. </nds>
  961. [07/10/12 03:56:49.626]:ADTRACE ST: Applying policy: %+C%14CNOVLADENTEX-itp-EntitlementsImpl%-C.
  962. [07/10/12 03:56:49.626]:ADTRACE ST: Applying to status #1.
  963. [07/10/12 03:56:49.626]:ADTRACE ST: Evaluating selection criteria for rule 'Intercept ADDomain (tagged identity query) query response'.
  964. [07/10/12 03:56:49.626]:ADTRACE ST: (if-operation equal "instance") = FALSE.
  965. [07/10/12 03:56:49.626]:ADTRACE ST: Rule rejected.
  966. [07/10/12 03:56:49.626]:ADTRACE ST: Evaluating selection criteria for rule 'Intercept ADDomain (tagged identity query) query status'.
  967. [07/10/12 03:56:49.626]:ADTRACE ST: (if-xpath true "../status[@event-id='query-driver-ident']/operation-data/@UserAccountEntitlementQuery") = FALSE.
  968. [07/10/12 03:56:49.626]:ADTRACE ST: Rule rejected.
  969. [07/10/12 03:56:49.626]:ADTRACE ST: Evaluating selection criteria for rule 'Check target of add-association for group membership entitlements'.
  970. [07/10/12 03:56:49.626]:ADTRACE ST: (if-global-variable 'drv.entitlement.Group' equal "true") = TRUE.
  971. [07/10/12 03:56:49.626]:ADTRACE ST: (if-operation equal "add-association") = FALSE.
  972. [07/10/12 03:56:49.626]:ADTRACE ST: Rule rejected.
  973. [07/10/12 03:56:49.626]:ADTRACE ST: Evaluating selection criteria for rule 'Check target of add-association for Exchange mailbox entitlements'.
  974. [07/10/12 03:56:49.626]:ADTRACE ST: (if-global-variable 'drv.exchMailboxMethod' equal "entitlement") = FALSE.
  975. [07/10/12 03:56:49.626]:ADTRACE ST: Rule rejected.
  976. [07/10/12 03:56:49.626]:ADTRACE ST: Policy returned:
  977. [07/10/12 03:56:49.626]:ADTRACE ST:
  978. <nds dtdversion="1.1" ndsversion="8.7">
  979. <source>
  980. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  981. <contact>Novell, Inc.</contact>
  982. </source>
  983. <output>
  984. <status event-id="0" level="success"/>
  985. </output>
  986. </nds>
  987. [07/10/12 03:56:49.642]:ADTRACE ST: Applying policy: %+C%14CNOVLPWDSYNC-itp-EmailOnFailedPwdSub%-C.
  988. [07/10/12 03:56:49.642]:ADTRACE ST: Applying to status #1.
  989. [07/10/12 03:56:49.642]:ADTRACE ST: Evaluating selection criteria for rule 'Send e-mail on a failure when subscribing to passwords'.
  990. [07/10/12 03:56:49.642]:ADTRACE ST: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  991. [07/10/12 03:56:49.642]:ADTRACE ST: (if-operation equal "status") = TRUE.
  992. [07/10/12 03:56:49.642]:ADTRACE ST: (if-xpath true "self::status[@level != 'success'][text() != '']/operation-data/password-subscribe-status/association[text() != '']") = FALSE.
  993. [07/10/12 03:56:49.642]:ADTRACE ST: Rule rejected.
  994. [07/10/12 03:56:49.642]:ADTRACE ST: Evaluating selection criteria for rule 'Send e-mail on failure to reset connected system password using the Identity Vault password'.
  995. [07/10/12 03:56:49.642]:ADTRACE ST: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  996. [07/10/12 03:56:49.642]:ADTRACE ST: (if-operation equal "status") = TRUE.
  997. [07/10/12 03:56:49.642]:ADTRACE ST: (if-xpath true "self::status[@level != 'success']/operation-data/password-reset-status") = FALSE.
  998. [07/10/12 03:56:49.642]:ADTRACE ST: Rule rejected.
  999. [07/10/12 03:56:49.642]:ADTRACE ST: Policy returned:
  1000. [07/10/12 03:56:49.642]:ADTRACE ST:
  1001. <nds dtdversion="1.1" ndsversion="8.7">
  1002. <source>
  1003. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  1004. <contact>Novell, Inc.</contact>
  1005. </source>
  1006. <output>
  1007. <status event-id="0" level="success"/>
  1008. </output>
  1009. </nds>
  1010. [07/10/12 03:56:49.642]:ADTRACE ST: Applying schema mapping policies to input.
  1011. [07/10/12 03:56:49.642]:ADTRACE ST: Applying policy: %+C%14CNOVLDATACOLL-smp-SkipSchemaMapping%-C.
  1012. [07/10/12 03:56:49.642]:ADTRACE ST: Applying to status #1.
  1013. [07/10/12 03:56:49.642]:ADTRACE ST: Evaluating selection criteria for rule 'skip'.
  1014. [07/10/12 03:56:49.642]:ADTRACE ST: (if-operation equal "instance") = FALSE.
  1015. [07/10/12 03:56:49.642]:ADTRACE ST: Rule rejected.
  1016. [07/10/12 03:56:49.642]:ADTRACE ST: Evaluating selection criteria for rule 'restore'.
  1017. [07/10/12 03:56:49.642]:ADTRACE ST: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  1018. [07/10/12 03:56:49.642]:ADTRACE ST: Rule rejected.
  1019. [07/10/12 03:56:49.642]:ADTRACE ST: Policy returned:
  1020. [07/10/12 03:56:49.642]:ADTRACE ST:
  1021. <nds dtdversion="1.1" ndsversion="8.7">
  1022. <source>
  1023. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  1024. <contact>Novell, Inc.</contact>
  1025. </source>
  1026. <output>
  1027. <status event-id="0" level="success"/>
  1028. </output>
  1029. </nds>
  1030. [07/10/12 03:56:49.642]:ADTRACE ST: Applying policy: %+C%14CNOVLADDCFG-smp%-C.
  1031. [07/10/12 03:56:49.642]:ADTRACE ST: Applying policy: %+C%14CNOVLDATACOLL-smp-SkipSchemaMapping%-C.
  1032. [07/10/12 03:56:49.642]:ADTRACE ST: Applying to status #1.
  1033. [07/10/12 03:56:49.642]:ADTRACE ST: Evaluating selection criteria for rule 'skip'.
  1034. [07/10/12 03:56:49.642]:ADTRACE ST: (if-operation equal "instance") = FALSE.
  1035. [07/10/12 03:56:49.642]:ADTRACE ST: Rule rejected.
  1036. [07/10/12 03:56:49.642]:ADTRACE ST: Evaluating selection criteria for rule 'restore'.
  1037. [07/10/12 03:56:49.642]:ADTRACE ST: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  1038. [07/10/12 03:56:49.642]:ADTRACE ST: Rule rejected.
  1039. [07/10/12 03:56:49.642]:ADTRACE ST: Policy returned:
  1040. [07/10/12 03:56:49.642]:ADTRACE ST:
  1041. <nds dtdversion="1.1" ndsversion="8.7">
  1042. <source>
  1043. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  1044. <contact>Novell, Inc.</contact>
  1045. </source>
  1046. <output>
  1047. <status event-id="0" level="success"/>
  1048. </output>
  1049. </nds>
  1050. [07/10/12 03:56:49.642]:ADTRACE ST: Resolving association references.
  1051. [07/10/12 03:56:49.642]:ADTRACE ST: Query from policy result
  1052. [07/10/12 03:56:49.642]:ADTRACE ST:
  1053. <nds dtdversion="1.1" ndsversion="8.7">
  1054. <source>
  1055. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  1056. <contact>Novell, Inc.</contact>
  1057. </source>
  1058. <output>
  1059. <status event-id="0" level="success"/>
  1060. </output>
  1061. </nds>
  1062. [07/10/12 03:56:49.658]:ADTRACE ST: No matches found.
  1063. [07/10/12 03:56:49.658]:ADTRACE ST: Evaluating selection criteria for rule 'match users based on full name'.
  1064. [07/10/12 03:56:49.658]:ADTRACE ST: (if-class-name equal "User") = TRUE.
  1065. [07/10/12 03:56:49.658]:ADTRACE ST: (if-global-variable 'FullNameMap' equal "true") = TRUE.
  1066. [07/10/12 03:56:49.658]:ADTRACE ST: (if-op-attr 'Full Name' available) = TRUE.
  1067. [07/10/12 03:56:49.658]:ADTRACE ST: Rule selected.
  1068. [07/10/12 03:56:49.658]:ADTRACE ST: Applying rule 'match users based on full name'.
  1069. [07/10/12 03:56:49.658]:ADTRACE ST: Action: do-if().
  1070. [07/10/12 03:56:49.658]:ADTRACE ST: Evaluating conditions.
  1071. [07/10/12 03:56:49.658]:ADTRACE ST: (if-global-variable 'drv.subPlacementType' equal "flat") = TRUE.
  1072. [07/10/12 03:56:49.658]:ADTRACE ST: Performing if actions.
  1073. [07/10/12 03:56:49.658]:ADTRACE ST: Action: do-find-matching-object(scope="entry",arg-dn("CN="+token-escape-for-dest-dn(token-attr("Full Name"))+","+token-global-variable("drv.user.container"))).
  1074. [07/10/12 03:56:49.658]:ADTRACE ST: arg-dn("CN="+token-escape-for-dest-dn(token-attr("Full Name"))+","+token-global-variable("drv.user.container"))
  1075. [07/10/12 03:56:49.658]:ADTRACE ST: token-text("CN=")
  1076. [07/10/12 03:56:49.658]:ADTRACE ST: token-escape-for-dest-dn(token-attr("Full Name"))
  1077. [07/10/12 03:56:49.658]:ADTRACE ST: token-escape-for-dest-dn(token-attr("Full Name"))
  1078. [07/10/12 03:56:49.658]:ADTRACE ST: token-attr("Full Name")
  1079. [07/10/12 03:56:49.658]:ADTRACE ST: Token Value: "test user1".
  1080. [07/10/12 03:56:49.658]:ADTRACE ST: Arg Value: "test user1".
  1081. [07/10/12 03:56:49.658]:ADTRACE ST: Token Value: "test user1".
  1082. [07/10/12 03:56:49.658]:ADTRACE ST: token-text(",")
  1083. [07/10/12 03:56:49.658]:ADTRACE ST: token-global-variable("drv.user.container")
  1084. [07/10/12 03:56:49.658]:ADTRACE ST: Token Value: "OU=users,OU=NOVELLUSER,DC=idm,DC=com".
  1085. [07/10/12 03:56:49.658]:ADTRACE ST: Arg Value: "CN=test user1,OU=users,OU=NOVELLUSER,DC=idm,DC=com".
  1086. [07/10/12 03:56:49.658]:ADTRACE ST: Query from policy
  1087. [07/10/12 03:56:49.658]:ADTRACE ST:
  1088. <nds dtdversion="4.0" ndsversion="8.x">
  1089. <source>
  1090. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  1091. <contact>Novell, Inc.</contact>
  1092. </source>
  1093. <input>
  1094. <query class-name="User" dest-dn="CN=test user1,OU=users,OU=NOVELLUSER,DC=idm,DC=com" scope="entry">
  1095. <search-class class-name="User"/>
  1096. <read-attr/>
  1097. </query>
  1098. </input>
  1099. </nds>
  1100. [07/10/12 03:56:49.658]:ADTRACE ST: Fixing up association references.
  1101. [07/10/12 03:56:49.658]:ADTRACE ST: Applying schema mapping policies to output.
  1102. [07/10/12 03:56:49.658]:ADTRACE ST: Applying policy: %+C%14CNOVLDATACOLL-smp-SkipSchemaMapping%-C.
  1103. [07/10/12 03:56:49.658]:ADTRACE ST: Applying to query #1.
  1104. [07/10/12 03:56:49.658]:ADTRACE ST: Evaluating selection criteria for rule 'skip'.
  1105. [07/10/12 03:56:49.658]:ADTRACE ST: (if-operation equal "instance") = FALSE.
  1106. [07/10/12 03:56:49.658]:ADTRACE ST: Rule rejected.
  1107. [07/10/12 03:56:49.658]:ADTRACE ST: Evaluating selection criteria for rule 'restore'.
  1108. [07/10/12 03:56:49.658]:ADTRACE ST: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  1109. [07/10/12 03:56:49.658]:ADTRACE ST: Rule rejected.
  1110. [07/10/12 03:56:49.658]:ADTRACE ST: Policy returned:
  1111. [07/10/12 03:56:49.658]:ADTRACE ST:
  1112. <nds dtdversion="4.0" ndsversion="8.x">
  1113. <source>
  1114. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  1115. <contact>Novell, Inc.</contact>
  1116. </source>
  1117. <input>
  1118. <query class-name="User" dest-dn="CN=test user1,OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="entry">
  1119. <search-class class-name="User"/>
  1120. <read-attr/>
  1121. </query>
  1122. </input>
  1123. </nds>
  1124. [07/10/12 03:56:49.658]:ADTRACE ST: Applying policy: %+C%14CNOVLADDCFG-smp%-C.
  1125. [07/10/12 03:56:49.658]:ADTRACE ST: Mapping class-name 'User' to 'user'.
  1126. [07/10/12 03:56:49.658]:ADTRACE ST: Mapping class-name 'User' to 'user'.
  1127. [07/10/12 03:56:49.658]:ADTRACE ST: Applying policy: %+C%14CNOVLDATACOLL-smp-SkipSchemaMapping%-C.
  1128. [07/10/12 03:56:49.658]:ADTRACE ST: Applying to query #1.
  1129. [07/10/12 03:56:49.658]:ADTRACE ST: Evaluating selection criteria for rule 'skip'.
  1130. [07/10/12 03:56:49.673]:ADTRACE ST: (if-operation equal "instance") = FALSE.
  1131. [07/10/12 03:56:49.673]:ADTRACE ST: Rule rejected.
  1132. [07/10/12 03:56:49.673]:ADTRACE ST: Evaluating selection criteria for rule 'restore'.
  1133. [07/10/12 03:56:49.673]:ADTRACE ST: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  1134. [07/10/12 03:56:49.673]:ADTRACE ST: Rule rejected.
  1135. [07/10/12 03:56:49.673]:ADTRACE ST: Policy returned:
  1136. [07/10/12 03:56:49.673]:ADTRACE ST:
  1137. <nds dtdversion="4.0" ndsversion="8.x">
  1138. <source>
  1139. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  1140. <contact>Novell, Inc.</contact>
  1141. </source>
  1142. <input>
  1143. <query class-name="user" dest-dn="CN=test user1,OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="entry">
  1144. <search-class class-name="user"/>
  1145. <read-attr/>
  1146. </query>
  1147. </input>
  1148. </nds>
  1149. [07/10/12 03:56:49.673]:ADTRACE ST: Applying output transformation policies.
  1150. [07/10/12 03:56:49.673]:ADTRACE ST: Applying policy: %+C%14CNOVLADENTEX-otp-EntitlementsImpl%-C.
  1151. [07/10/12 03:56:49.673]:ADTRACE ST: Applying to query #1.
  1152. [07/10/12 03:56:49.673]:ADTRACE ST: Evaluating selection criteria for rule 'Intercept outbound queries for ADDomain'.
  1153. [07/10/12 03:56:49.673]:ADTRACE ST: (if-class-name equal "ADDomain") = FALSE.
  1154. [07/10/12 03:56:49.673]:ADTRACE ST: Rule rejected.
  1155. [07/10/12 03:56:49.673]:ADTRACE ST: Policy returned:
  1156. [07/10/12 03:56:49.673]:ADTRACE ST:
  1157. <nds dtdversion="4.0" ndsversion="8.x">
  1158. <source>
  1159. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  1160. <contact>Novell, Inc.</contact>
  1161. </source>
  1162. <input>
  1163. <query class-name="user" dest-dn="CN=test user1,OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="entry">
  1164. <search-class class-name="user"/>
  1165. <read-attr/>
  1166. </query>
  1167. </input>
  1168. </nds>
  1169. [07/10/12 03:56:49.673]:ADTRACE ST: Applying policy: %+C%14CNOVLADENTEX-otp-ExchangeMailboxPolicy%-C.
  1170. [07/10/12 03:56:49.673]:ADTRACE ST: Applying to query #1.
  1171. [07/10/12 03:56:49.673]:ADTRACE ST: Evaluating selection criteria for rule 'Exchange: Remove HomeMDB when disabled'.
  1172. [07/10/12 03:56:49.673]:ADTRACE ST: (if-global-variable 'drv.exchMailboxMethod' equal "disabled") = TRUE.
  1173. [07/10/12 03:56:49.673]:ADTRACE ST: Rule selected.
  1174. [07/10/12 03:56:49.673]:ADTRACE ST: Applying rule 'Exchange: Remove HomeMDB when disabled'.
  1175. [07/10/12 03:56:49.673]:ADTRACE ST: Action: do-strip-op-attr("homeMDB").
  1176. [07/10/12 03:56:49.673]:ADTRACE ST: Policy returned:
  1177. [07/10/12 03:56:49.673]:ADTRACE ST:
  1178. <nds dtdversion="4.0" ndsversion="8.x">
  1179. <source>
  1180. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  1181. <contact>Novell, Inc.</contact>
  1182. </source>
  1183. <input>
  1184. <query class-name="user" dest-dn="CN=test user1,OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="entry">
  1185. <search-class class-name="user"/>
  1186. <read-attr/>
  1187. </query>
  1188. </input>
  1189. </nds>
  1190. [07/10/12 03:56:49.673]:ADTRACE ST: Applying policy: %+C%14CNOVLADDCFG-otp-FormatConversions%-C.
  1191. [07/10/12 03:56:49.673]:ADTRACE ST: Applying to query #1.
  1192. [07/10/12 03:56:49.673]:ADTRACE ST: Evaluating selection criteria for rule 'Street Address: Convert LF to CR-LF'.
  1193. [07/10/12 03:56:49.673]:ADTRACE ST: Rule selected.
  1194. [07/10/12 03:56:49.673]:ADTRACE ST: Applying rule 'Street Address: Convert LF to CR-LF'.
  1195. [07/10/12 03:56:49.673]:ADTRACE ST: Action: do-reformat-op-attr("streetAddress",token-replace-all("[^\r]\n","\r\n",token-local-variable("current-value"))).
  1196. [07/10/12 03:56:49.673]:ADTRACE ST: Evaluating selection criteria for rule 'logonHours: Convert to Active Directory form'.
  1197. [07/10/12 03:56:49.673]:ADTRACE ST: Rule selected.
  1198. [07/10/12 03:56:49.673]:ADTRACE ST: Applying rule 'logonHours: Convert to Active Directory form'.
  1199. [07/10/12 03:56:49.673]:ADTRACE ST: Action: do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2ADLenient($current-value)")).
  1200. [07/10/12 03:56:49.673]:ADTRACE ST: Evaluating selection criteria for rule 'accountExpires: Convert to Active Directory form'.
  1201. [07/10/12 03:56:49.673]:ADTRACE ST: (if-op-attr 'accountExpires' changing) = FALSE.
  1202. [07/10/12 03:56:49.673]:ADTRACE ST: Rule rejected.
  1203. [07/10/12 03:56:49.673]:ADTRACE ST: Evaluating selection criteria for rule 'lockoutTime: Convert to Active Directory form'.
  1204. [07/10/12 03:56:49.673]:ADTRACE ST: Rule selected.
  1205. [07/10/12 03:56:49.673]:ADTRACE ST: Applying rule 'lockoutTime: Convert to Active Directory form'.
  1206. [07/10/12 03:56:49.673]:ADTRACE ST: Action: do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateEpoch2FileTime($current-value)")).
  1207. [07/10/12 03:56:49.689]:ADTRACE ST: Evaluating selection criteria for rule 'Add: User - convert multi-valued Telephone to single value'.
  1208. [07/10/12 03:56:49.689]:ADTRACE ST: (if-operation equal "add") = FALSE.
  1209. [07/10/12 03:56:49.689]:ADTRACE ST: Rule rejected.
  1210. [07/10/12 03:56:49.689]:ADTRACE ST: Evaluating selection criteria for rule 'update Active Directory logon name'.
  1211. [07/10/12 03:56:49.689]:ADTRACE ST: (if-xpath true "self::status[@level = 'success']/operation-data/windows-2000-logon-name") = FALSE.
  1212. [07/10/12 03:56:49.689]:ADTRACE ST: Rule rejected.
  1213. [07/10/12 03:56:49.689]:ADTRACE ST: Policy returned:
  1214. [07/10/12 03:56:49.689]:ADTRACE ST:
  1215. <nds dtdversion="4.0" ndsversion="8.x">
  1216. <source>
  1217. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  1218. <contact>Novell, Inc.</contact>
  1219. </source>
  1220. <input>
  1221. <query class-name="user" dest-dn="CN=test user1,OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="entry">
  1222. <search-class class-name="user"/>
  1223. <read-attr/>
  1224. </query>
  1225. </input>
  1226. </nds>
  1227. [07/10/12 03:56:49.689]:ADTRACE ST: Applying policy: %+C%14CNOVLADDCFG-otp-ExchangeEntitlementQuery%-C.
  1228. [07/10/12 03:56:49.689]:ADTRACE ST: Applying to query #1.
  1229. [07/10/12 03:56:49.689]:ADTRACE ST: Evaluating selection criteria for rule 'Add dest-dn to the Exchange Entitlement Query'.
  1230. [07/10/12 03:56:49.689]:ADTRACE ST: (if-operation equal "query") = TRUE.
  1231. [07/10/12 03:56:49.689]:ADTRACE ST: (if-class-name equal "msExchPrivateMDB") = FALSE.
  1232. [07/10/12 03:56:49.689]:ADTRACE ST: Rule rejected.
  1233. [07/10/12 03:56:49.689]:ADTRACE ST: Policy returned:
  1234. [07/10/12 03:56:49.689]:ADTRACE ST:
  1235. <nds dtdversion="4.0" ndsversion="8.x">
  1236. <source>
  1237. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  1238. <contact>Novell, Inc.</contact>
  1239. </source>
  1240. <input>
  1241. <query class-name="user" dest-dn="CN=test user1,OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="entry">
  1242. <search-class class-name="user"/>
  1243. <read-attr/>
  1244. </query>
  1245. </input>
  1246. </nds>
  1247. [07/10/12 03:56:49.689]:ADTRACE ST: Applying policy: %+C%14CNOVLPWDSYNC-otp-EmailOnFailedPwdPub%-C.
  1248. [07/10/12 03:56:49.689]:ADTRACE ST: Applying to query #1.
  1249. [07/10/12 03:56:49.689]:ADTRACE ST: Evaluating selection criteria for rule 'Send e-mail for a failed publish password operation'.
  1250. [07/10/12 03:56:49.689]:ADTRACE ST: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  1251. [07/10/12 03:56:49.689]:ADTRACE ST: (if-operation equal "status") = FALSE.
  1252. [07/10/12 03:56:49.689]:ADTRACE ST: Rule rejected.
  1253. [07/10/12 03:56:49.689]:ADTRACE ST: Policy returned:
  1254. [07/10/12 03:56:49.689]:ADTRACE ST:
  1255. <nds dtdversion="4.0" ndsversion="8.x">
  1256. <source>
  1257. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  1258. <contact>Novell, Inc.</contact>
  1259. </source>
  1260. <input>
  1261. <query class-name="user" dest-dn="CN=test user1,OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="entry">
  1262. <search-class class-name="user"/>
  1263. <read-attr/>
  1264. </query>
  1265. </input>
  1266. </nds>
  1267. [07/10/12 03:56:49.689]:ADTRACE ST: Applying policy: %+C%14CNOVLATRKBASE-otp-Subscribe%-C.
  1268. [07/10/12 03:56:49.689]:ADTRACE ST: Applying to query #1.
  1269. [07/10/12 03:56:49.689]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - Initialize Realm Mapping'.
  1270. [07/10/12 03:56:49.689]:ADTRACE ST: (if-global-variable 'drv.acctTrk.enable' equal "true") = TRUE.
  1271. [07/10/12 03:56:49.689]:ADTRACE ST: (if-global-variable 'drv.acctTrk.mode' equal "fanout") = FALSE.
  1272. [07/10/12 03:56:49.689]:ADTRACE ST: Rule rejected.
  1273. [07/10/12 03:56:49.689]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled or wrong object class'.
  1274. [07/10/12 03:56:49.689]:ADTRACE ST: Rule selected.
  1275. [07/10/12 03:56:49.689]:ADTRACE ST: Applying rule 'AccountTracking - disregard if disabled or wrong object class'.
  1276. [07/10/12 03:56:49.689]:ADTRACE ST: Action: do-if().
  1277. [07/10/12 03:56:49.689]:ADTRACE ST: Evaluating conditions.
  1278. [07/10/12 03:56:49.689]:ADTRACE ST: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  1279. [07/10/12 03:56:49.689]:ADTRACE ST: Performing else actions.
  1280. [07/10/12 03:56:49.689]:ADTRACE ST: Action: do-for-each(arg-node-set(token-global-variable("drv.acctTrk.objectClass"))).
  1281. [07/10/12 03:56:49.689]:ADTRACE ST: arg-node-set(token-global-variable("drv.acctTrk.objectClass"))
  1282. [07/10/12 03:56:49.689]:ADTRACE ST: token-global-variable("drv.acctTrk.objectClass")
  1283. [07/10/12 03:56:49.689]:ADTRACE ST: Token Value: {"user"}.
  1284. [07/10/12 03:56:49.704]:ADTRACE ST: Arg Value: {"user"}.
  1285. [07/10/12 03:56:49.704]:ADTRACE ST: Performing actions for local-variable(current-node) = "user".
  1286. [07/10/12 03:56:49.704]:ADTRACE ST: Action: do-if().
  1287. [07/10/12 03:56:49.704]:ADTRACE ST: Evaluating conditions.
  1288. [07/10/12 03:56:49.704]:ADTRACE ST: Expanded variable reference '$current-node$' to 'user'.
  1289. [07/10/12 03:56:49.704]:ADTRACE ST: (if-class-name equal "$current-node$") = TRUE.
  1290. [07/10/12 03:56:49.704]:ADTRACE ST: Performing if actions.
  1291. [07/10/12 03:56:49.704]:ADTRACE ST: Action: do-set-local-variable("pass",scope="policy","true").
  1292. [07/10/12 03:56:49.704]:ADTRACE ST: arg-string("true")
  1293. [07/10/12 03:56:49.704]:ADTRACE ST: token-text("true")
  1294. [07/10/12 03:56:49.704]:ADTRACE ST: Arg Value: "true".
  1295. [07/10/12 03:56:49.704]:ADTRACE ST: Action: do-if().
  1296. [07/10/12 03:56:49.704]:ADTRACE ST: Evaluating conditions.
  1297. [07/10/12 03:56:49.704]:ADTRACE ST: (if-local-variable 'pass' not-available) = FALSE.
  1298. [07/10/12 03:56:49.704]:ADTRACE ST: Performing else actions.
  1299. [07/10/12 03:56:49.704]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - add operation-data for regular operations'.
  1300. [07/10/12 03:56:49.704]:ADTRACE ST: (if-operation match "add|modify|delete|rename|move") = FALSE.
  1301. [07/10/12 03:56:49.704]:ADTRACE ST: Rule rejected.
  1302. [07/10/12 03:56:49.704]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - add operation-data for mapped operations'.
  1303. [07/10/12 03:56:49.704]:ADTRACE ST: (if-global-variable 'drv.acctTrk.mode' equal "fanout") = FALSE.
  1304. [07/10/12 03:56:49.704]:ADTRACE ST: Rule rejected.
  1305. [07/10/12 03:56:49.704]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - strip AccountTrackingAccountStatus attribute'.
  1306. [07/10/12 03:56:49.704]:ADTRACE ST: (if-op-attr 'AccountTrackingAccountStatus' available) = FALSE.
  1307. [07/10/12 03:56:49.704]:ADTRACE ST: Rule rejected.
  1308. [07/10/12 03:56:49.704]:ADTRACE ST: Policy returned:
  1309. [07/10/12 03:56:49.704]:ADTRACE ST:
  1310. <nds dtdversion="4.0" ndsversion="8.x">
  1311. <source>
  1312. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  1313. <contact>Novell, Inc.</contact>
  1314. </source>
  1315. <input>
  1316. <query class-name="user" dest-dn="CN=test user1,OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="entry">
  1317. <search-class class-name="user"/>
  1318. <read-attr/>
  1319. </query>
  1320. </input>
  1321. </nds>
  1322. [07/10/12 03:56:49.704]:ADTRACE ST: Submitting document to subscriber shim:
  1323. [07/10/12 03:56:49.704]:ADTRACE ST:
  1324. <nds dtdversion="4.0" ndsversion="8.x">
  1325. <source>
  1326. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  1327. <contact>Novell, Inc.</contact>
  1328. </source>
  1329. <input>
  1330. <query class-name="user" dest-dn="CN=test user1,OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="entry">
  1331. <search-class class-name="user"/>
  1332. <read-attr/>
  1333. </query>
  1334. </input>
  1335. </nds>
  1336. [07/10/12 03:56:49.704]:ADTRACE ST: Remote Interface Driver: Sending...
  1337. [07/10/12 03:56:49.704]:ADTRACE ST:
  1338. <nds dtdversion="4.0" ndsversion="8.x">
  1339. <source>
  1340. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  1341. <contact>Novell, Inc.</contact>
  1342. </source>
  1343. <input>
  1344. <query class-name="user" dest-dn="CN=test user1,OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="entry">
  1345. <search-class class-name="user"/>
  1346. <read-attr/>
  1347. </query>
  1348. </input>
  1349. </nds>
  1350. [07/10/12 03:56:49.704]:ADTRACE ST: Remote Interface Driver: Document sent.
  1351. [07/10/12 03:56:49.720]:ADTRACE :Remote Interface Driver: Received.
  1352. [07/10/12 03:56:49.720]:ADTRACE :
  1353. <nds dtdversion="1.1" ndsversion="8.7">
  1354. <source>
  1355. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  1356. <contact>Novell, Inc.</contact>
  1357. </source>
  1358. <output>
  1359. <status event-id="0" level="success"/>
  1360. </output>
  1361. </nds>
  1362. [07/10/12 03:56:49.720]:ADTRACE :Remote Interface Driver: Received document for subscriber channel
  1363. [07/10/12 03:56:49.720]:ADTRACE :Remote Interface Driver: Waiting for receive...
  1364. [07/10/12 03:56:49.720]:ADTRACE ST: SubscriptionShim.execute() returned:
  1365. [07/10/12 03:56:49.720]:ADTRACE ST:
  1366. <nds dtdversion="1.1" ndsversion="8.7">
  1367. <source>
  1368. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  1369. <contact>Novell, Inc.</contact>
  1370. </source>
  1371. <output>
  1372. <status event-id="0" level="success"/>
  1373. </output>
  1374. </nds>
  1375. [07/10/12 03:56:49.720]:ADTRACE ST: Applying input transformation policies.
  1376. [07/10/12 03:56:49.720]:ADTRACE ST: Applying policy: %+C%14CNOVLAUDTENTC-itp-SendEntitlementsEvents%-C.
  1377. [07/10/12 03:56:49.720]:ADTRACE ST: Applying to status #1.
  1378. [07/10/12 03:56:49.720]:ADTRACE ST: Evaluating selection criteria for rule '00031200 - Account Create By Entitlement Grant'.
  1379. [07/10/12 03:56:49.720]:ADTRACE ST: (if-operation equal "status") = TRUE.
  1380. [07/10/12 03:56:49.720]:ADTRACE ST: (if-op-property 'accountAction' equal "accountCreateByEntitlementGrant") = FALSE.
  1381. [07/10/12 03:56:49.720]:ADTRACE ST: Rule rejected.
  1382. [07/10/12 03:56:49.720]:ADTRACE ST: Evaluating selection criteria for rule '00031201 - Account Delete By Entitlement Revoke'.
  1383. [07/10/12 03:56:49.720]:ADTRACE ST: (if-operation equal "status") = TRUE.
  1384. [07/10/12 03:56:49.720]:ADTRACE ST: (if-xpath true "./operation-data/entitlement-impl/@state = '0'") = FALSE.
  1385. [07/10/12 03:56:49.720]:ADTRACE ST: (if-operation equal "status") = TRUE.
  1386. [07/10/12 03:56:49.720]:ADTRACE ST: (if-op-property 'accountAction' equal "accountDeleteByEntitlementRevoke") = FALSE.
  1387. [07/10/12 03:56:49.720]:ADTRACE ST: Rule rejected.
  1388. [07/10/12 03:56:49.720]:ADTRACE ST: Evaluating selection criteria for rule '00031202 - Account Disable By Entitlement Revoke'.
  1389. [07/10/12 03:56:49.720]:ADTRACE ST: (if-operation equal "status") = TRUE.
  1390. [07/10/12 03:56:49.720]:ADTRACE ST: (if-op-property 'accountAction' equal "accountDisableByEntitlementRevoke") = FALSE.
  1391. [07/10/12 03:56:49.720]:ADTRACE ST: Rule rejected.
  1392. [07/10/12 03:56:49.720]:ADTRACE ST: Evaluating selection criteria for rule '00031203 - Account Enable By Entitlement Grant'.
  1393. [07/10/12 03:56:49.736]:ADTRACE ST: (if-operation equal "status") = TRUE.
  1394. [07/10/12 03:56:49.736]:ADTRACE ST: (if-op-property 'accountAction' equal "accountEnableByEntitlementGrant") = FALSE.
  1395. [07/10/12 03:56:49.736]:ADTRACE ST: Rule rejected.
  1396. [07/10/12 03:56:49.736]:ADTRACE ST: Evaluating selection criteria for rule 'Generate Audit Event'.
  1397. [07/10/12 03:56:49.736]:ADTRACE ST: (if-operation equal "status") = TRUE.
  1398. [07/10/12 03:56:49.736]:ADTRACE ST: (if-local-variable 'auditEventID' available) = FALSE.
  1399. [07/10/12 03:56:49.736]:ADTRACE ST: Rule rejected.
  1400. [07/10/12 03:56:49.736]:ADTRACE ST: Policy returned:
  1401. [07/10/12 03:56:49.736]:ADTRACE ST:
  1402. <nds dtdversion="1.1" ndsversion="8.7">
  1403. <source>
  1404. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  1405. <contact>Novell, Inc.</contact>
  1406. </source>
  1407. <output>
  1408. <status event-id="0" level="success"/>
  1409. </output>
  1410. </nds>
  1411. [07/10/12 03:56:49.736]:ADTRACE ST: Applying policy: %+C%14CNOVLADENTEX-itp-InitEntitlementConfigurationResource%-C.
  1412. [07/10/12 03:56:49.736]:ADTRACE ST: Applying to status #1.
  1413. [07/10/12 03:56:49.736]:ADTRACE ST: Evaluating selection criteria for rule 'Make sure we only run once and when we're ready'.
  1414. [07/10/12 03:56:49.736]:ADTRACE ST: (if-local-variable 'objectClass' match ".+") = TRUE.
  1415. [07/10/12 03:56:49.736]:ADTRACE ST: (if-local-variable 'entConfigInitialized' equal "true") = TRUE.
  1416. [07/10/12 03:56:49.736]:ADTRACE ST: Rule selected.
  1417. [07/10/12 03:56:49.736]:ADTRACE ST: Applying rule 'Make sure we only run once and when we're ready'.
  1418. [07/10/12 03:56:49.736]:ADTRACE ST: Action: do-break().
  1419. [07/10/12 03:56:49.736]:ADTRACE ST: Policy returned:
  1420. [07/10/12 03:56:49.736]:ADTRACE ST:
  1421. <nds dtdversion="1.1" ndsversion="8.7">
  1422. <source>
  1423. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  1424. <contact>Novell, Inc.</contact>
  1425. </source>
  1426. <output>
  1427. <status event-id="0" level="success"/>
  1428. </output>
  1429. </nds>
  1430. [07/10/12 03:56:49.736]:ADTRACE ST: Applying policy: %+C%14CNOVLADMSINFO-itp-InitManagedSystemInfo%-C.
  1431. [07/10/12 03:56:49.736]:ADTRACE ST: Applying to status #1.
  1432. [07/10/12 03:56:49.736]:ADTRACE ST: Evaluating selection criteria for rule 'Make sure we only run once and when we're ready'.
  1433. [07/10/12 03:56:49.736]:ADTRACE ST: (if-local-variable 'objectClass' match ".+") = TRUE.
  1434. [07/10/12 03:56:49.736]:ADTRACE ST: (if-local-variable 'mSysInfoInitialized' equal "true") = TRUE.
  1435. [07/10/12 03:56:49.736]:ADTRACE ST: Rule selected.
  1436. [07/10/12 03:56:49.736]:ADTRACE ST: Applying rule 'Make sure we only run once and when we're ready'.
  1437. [07/10/12 03:56:49.736]:ADTRACE ST: Action: do-break().
  1438. [07/10/12 03:56:49.736]:ADTRACE ST: Policy returned:
  1439. [07/10/12 03:56:49.736]:ADTRACE ST:
  1440. <nds dtdversion="1.1" ndsversion="8.7">
  1441. <source>
  1442. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  1443. <contact>Novell, Inc.</contact>
  1444. </source>
  1445. <output>
  1446. <status event-id="0" level="success"/>
  1447. </output>
  1448. </nds>
  1449. [07/10/12 03:56:49.736]:ADTRACE ST: Applying policy: %+C%14CNOVLATRKBASE-itp-Publish%-C.
  1450. [07/10/12 03:56:49.736]:ADTRACE ST: Applying to status #1.
  1451. [07/10/12 03:56:49.736]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled or wrong object class'.
  1452. [07/10/12 03:56:49.736]:ADTRACE ST: Rule selected.
  1453. [07/10/12 03:56:49.736]:ADTRACE ST: Applying rule 'AccountTracking - disregard if disabled or wrong object class'.
  1454. [07/10/12 03:56:49.736]:ADTRACE ST: Action: do-if().
  1455. [07/10/12 03:56:49.736]:ADTRACE ST: Evaluating conditions.
  1456. [07/10/12 03:56:49.736]:ADTRACE ST: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  1457. [07/10/12 03:56:49.736]:ADTRACE ST: Performing else actions.
  1458. [07/10/12 03:56:49.736]:ADTRACE ST: Action: do-if().
  1459. [07/10/12 03:56:49.736]:ADTRACE ST: Evaluating conditions.
  1460. [07/10/12 03:56:49.736]:ADTRACE ST: (if-class-name available) = FALSE.
  1461. [07/10/12 03:56:49.736]:ADTRACE ST: Performing else actions.
  1462. [07/10/12 03:56:49.736]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - on add-association sync the operation-properties to status operations'.
  1463. [07/10/12 03:56:49.736]:ADTRACE ST: (if-operation equal "add-association") = FALSE.
  1464. [07/10/12 03:56:49.736]:ADTRACE ST: Rule rejected.
  1465. [07/10/12 03:56:49.736]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - Query for destination DN using Association'.
  1466. [07/10/12 03:56:49.751]:ADTRACE ST: (if-operation match "modify|delete|move|rename") = FALSE.
  1467. [07/10/12 03:56:49.751]:ADTRACE ST: Rule rejected.
  1468. [07/10/12 03:56:49.751]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - add interested properties to current doc for future use.'.
  1469. [07/10/12 03:56:49.751]:ADTRACE ST: (if-operation match "add|modify|delete|rename|move|status") = TRUE.
  1470. [07/10/12 03:56:49.751]:ADTRACE ST: Rule selected.
  1471. [07/10/12 03:56:49.751]:ADTRACE ST: Applying rule 'AccountTracking - add interested properties to current doc for future use.'.
  1472. [07/10/12 03:56:49.751]:ADTRACE ST: Action: do-for-each(arg-node-set(token-global-variable("drv.acctTrk.identifiers"))).
  1473. [07/10/12 03:56:49.751]:ADTRACE ST: arg-node-set(token-global-variable("drv.acctTrk.identifiers"))
  1474. [07/10/12 03:56:49.751]:ADTRACE ST: token-global-variable("drv.acctTrk.identifiers")
  1475. [07/10/12 03:56:49.751]:ADTRACE ST: Token Value: {"sAMAccountName","userPrincipalName","LDAPDN","association"}.
  1476. [07/10/12 03:56:49.751]:ADTRACE ST: Arg Value: {"sAMAccountName","userPrincipalName","LDAPDN","association"}.
  1477. [07/10/12 03:56:49.751]:ADTRACE ST: Performing actions for local-variable(current-node) = "sAMAccountName".
  1478. [07/10/12 03:56:49.751]:ADTRACE ST: Action: do-if().
  1479. [07/10/12 03:56:49.751]:ADTRACE ST: Evaluating conditions.
  1480. [07/10/12 03:56:49.751]:ADTRACE ST: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  1481. [07/10/12 03:56:49.751]:ADTRACE ST: Performing else actions.
  1482. [07/10/12 03:56:49.751]:ADTRACE ST: Action: do-if().
  1483. [07/10/12 03:56:49.751]:ADTRACE ST: Evaluating conditions.
  1484. [07/10/12 03:56:49.751]:ADTRACE ST: (if-local-variable 'current-node' equal "association") = FALSE.
  1485. [07/10/12 03:56:49.751]:ADTRACE ST: Performing else actions.
  1486. [07/10/12 03:56:49.751]:ADTRACE ST: Action: do-if().
  1487. [07/10/12 03:56:49.751]:ADTRACE ST: Evaluating conditions.
  1488. [07/10/12 03:56:49.751]:ADTRACE ST: Expanded variable reference '$current-node$' to 'sAMAccountName'.
  1489. [07/10/12 03:56:49.751]:ADTRACE ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  1490. [07/10/12 03:56:49.751]:ADTRACE ST: Expanded variable reference '$current-node$' to 'sAMAccountName'.
  1491. [07/10/12 03:56:49.751]:ADTRACE ST: (if-op-attr '$current-node$' available) = FALSE.
  1492. [07/10/12 03:56:49.751]:ADTRACE ST: Performing else actions.
  1493. [07/10/12 03:56:49.751]:ADTRACE ST: Performing actions for local-variable(current-node) = "userPrincipalName".
  1494. [07/10/12 03:56:49.751]:ADTRACE ST: Action: do-if().
  1495. [07/10/12 03:56:49.751]:ADTRACE ST: Evaluating conditions.
  1496. [07/10/12 03:56:49.751]:ADTRACE ST: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  1497. [07/10/12 03:56:49.751]:ADTRACE ST: Performing else actions.
  1498. [07/10/12 03:56:49.751]:ADTRACE ST: Action: do-if().
  1499. [07/10/12 03:56:49.751]:ADTRACE ST: Evaluating conditions.
  1500. [07/10/12 03:56:49.751]:ADTRACE ST: (if-local-variable 'current-node' equal "association") = FALSE.
  1501. [07/10/12 03:56:49.751]:ADTRACE ST: Performing else actions.
  1502. [07/10/12 03:56:49.751]:ADTRACE ST: Action: do-if().
  1503. [07/10/12 03:56:49.751]:ADTRACE ST: Evaluating conditions.
  1504. [07/10/12 03:56:49.751]:ADTRACE ST: Expanded variable reference '$current-node$' to 'userPrincipalName'.
  1505. [07/10/12 03:56:49.751]:ADTRACE ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  1506. [07/10/12 03:56:49.751]:ADTRACE ST: Expanded variable reference '$current-node$' to 'userPrincipalName'.
  1507. [07/10/12 03:56:49.751]:ADTRACE ST: (if-op-attr '$current-node$' available) = FALSE.
  1508. [07/10/12 03:56:49.751]:ADTRACE ST: Performing else actions.
  1509. [07/10/12 03:56:49.751]:ADTRACE ST: Performing actions for local-variable(current-node) = "LDAPDN".
  1510. [07/10/12 03:56:49.751]:ADTRACE ST: Action: do-if().
  1511. [07/10/12 03:56:49.751]:ADTRACE ST: Evaluating conditions.
  1512. [07/10/12 03:56:49.751]:ADTRACE ST: (if-local-variable 'current-node' equal "LDAPDN") = TRUE.
  1513. [07/10/12 03:56:49.767]:ADTRACE ST: Expanded variable reference '$current-node$' to 'LDAPDN'.
  1514. [07/10/12 03:56:49.767]:ADTRACE ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  1515. [07/10/12 03:56:49.767]:ADTRACE ST: (if-src-dn available) = FALSE.
  1516. [07/10/12 03:56:49.767]:ADTRACE ST: Performing else actions.
  1517. [07/10/12 03:56:49.767]:ADTRACE ST: Action: do-if().
  1518. [07/10/12 03:56:49.767]:ADTRACE ST: Evaluating conditions.
  1519. [07/10/12 03:56:49.767]:ADTRACE ST: (if-local-variable 'current-node' equal "association") = FALSE.
  1520. [07/10/12 03:56:49.767]:ADTRACE ST: Performing else actions.
  1521. [07/10/12 03:56:49.767]:ADTRACE ST: Action: do-if().
  1522. [07/10/12 03:56:49.767]:ADTRACE ST: Evaluating conditions.
  1523. [07/10/12 03:56:49.767]:ADTRACE ST: Expanded variable reference '$current-node$' to 'LDAPDN'.
  1524. [07/10/12 03:56:49.767]:ADTRACE ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  1525. [07/10/12 03:56:49.767]:ADTRACE ST: Expanded variable reference '$current-node$' to 'LDAPDN'.
  1526. [07/10/12 03:56:49.767]:ADTRACE ST: (if-op-attr '$current-node$' available) = FALSE.
  1527. [07/10/12 03:56:49.767]:ADTRACE ST: Performing else actions.
  1528. [07/10/12 03:56:49.767]:ADTRACE ST: Performing actions for local-variable(current-node) = "association".
  1529. [07/10/12 03:56:49.767]:ADTRACE ST: Action: do-if().
  1530. [07/10/12 03:56:49.767]:ADTRACE ST: Evaluating conditions.
  1531. [07/10/12 03:56:49.767]:ADTRACE ST: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  1532. [07/10/12 03:56:49.767]:ADTRACE ST: Performing else actions.
  1533. [07/10/12 03:56:49.767]:ADTRACE ST: Action: do-if().
  1534. [07/10/12 03:56:49.767]:ADTRACE ST: Evaluating conditions.
  1535. [07/10/12 03:56:49.767]:ADTRACE ST: (if-local-variable 'current-node' equal "association") = TRUE.
  1536. [07/10/12 03:56:49.767]:ADTRACE ST: Expanded variable reference '$current-node$' to 'association'.
  1537. [07/10/12 03:56:49.767]:ADTRACE ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  1538. [07/10/12 03:56:49.767]:ADTRACE ST: (if-association available) = FALSE.
  1539. [07/10/12 03:56:49.767]:ADTRACE ST: Performing else actions.
  1540. [07/10/12 03:56:49.767]:ADTRACE ST: Action: do-if().
  1541. [07/10/12 03:56:49.767]:ADTRACE ST: Evaluating conditions.
  1542. [07/10/12 03:56:49.767]:ADTRACE ST: Expanded variable reference '$current-node$' to 'association'.
  1543. [07/10/12 03:56:49.767]:ADTRACE ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  1544. [07/10/12 03:56:49.767]:ADTRACE ST: Expanded variable reference '$current-node$' to 'association'.
  1545. [07/10/12 03:56:49.767]:ADTRACE ST: (if-op-attr '$current-node$' available) = FALSE.
  1546. [07/10/12 03:56:49.767]:ADTRACE ST: Performing else actions.
  1547. [07/10/12 03:56:49.767]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - Initialize status properties on published events'.
  1548. [07/10/12 03:56:49.767]:ADTRACE ST: (if-operation match "add|modify|delete|rename|move") = FALSE.
  1549. [07/10/12 03:56:49.767]:ADTRACE ST: Rule rejected.
  1550. [07/10/12 03:56:49.767]:ADTRACE ST: Policy returned:
  1551. [07/10/12 03:56:49.767]:ADTRACE ST:
  1552. <nds dtdversion="1.1" ndsversion="8.7">
  1553. <source>
  1554. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  1555. <contact>Novell, Inc.</contact>
  1556. </source>
  1557. <output>
  1558. <status event-id="0" level="success"/>
  1559. </output>
  1560. </nds>
  1561. [07/10/12 03:56:49.767]:ADTRACE ST: Applying policy: %+C%14CNOVLATRKBASE-itp-WriteAccounts%-C.
  1562. [07/10/12 03:56:49.767]:ADTRACE ST: Applying to status #1.
  1563. [07/10/12 03:56:49.767]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - Initialize Realm Mapping'.
  1564. [07/10/12 03:56:49.783]:ADTRACE ST: (if-global-variable 'drv.acctTrk.enable' equal "true") = TRUE.
  1565. [07/10/12 03:56:49.783]:ADTRACE ST: (if-global-variable 'drv.acctTrk.mode' equal "fanout") = FALSE.
  1566. [07/10/12 03:56:49.783]:ADTRACE ST: Rule rejected.
  1567. [07/10/12 03:56:49.783]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled'.
  1568. [07/10/12 03:56:49.783]:ADTRACE ST: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  1569. [07/10/12 03:56:49.783]:ADTRACE ST: Rule rejected.
  1570. [07/10/12 03:56:49.783]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - query DirXML-Accounts Attribute'.
  1571. [07/10/12 03:56:49.783]:ADTRACE ST: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  1572. [07/10/12 03:56:49.783]:ADTRACE ST: Rule rejected.
  1573. [07/10/12 03:56:49.783]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - remove Dirxml-Account values on regular delete operation'.
  1574. [07/10/12 03:56:49.783]:ADTRACE ST: (if-operation match "delete|remove-association") = FALSE.
  1575. [07/10/12 03:56:49.783]:ADTRACE ST: (if-operation equal "status") = TRUE.
  1576. [07/10/12 03:56:49.783]:ADTRACE ST: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  1577. [07/10/12 03:56:49.783]:ADTRACE ST: Rule rejected.
  1578. [07/10/12 03:56:49.783]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - update DirXMLAccounts attribute on regular operations'.
  1579. [07/10/12 03:56:49.783]:ADTRACE ST: (if-op-property 'AccountTracking-Operation' not-available) = TRUE.
  1580. [07/10/12 03:56:49.783]:ADTRACE ST: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  1581. [07/10/12 03:56:49.783]:ADTRACE ST: (if-operation equal "status") = TRUE.
  1582. [07/10/12 03:56:49.783]:ADTRACE ST: (if-xpath true "./@level='success' or ./@level='warning'") = TRUE.
  1583. [07/10/12 03:56:49.783]:ADTRACE ST: (if-op-property 'AccountTracking-Operation' available) = FALSE.
  1584. [07/10/12 03:56:49.783]:ADTRACE ST: Rule rejected.
  1585. [07/10/12 03:56:49.783]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - update DirXMLAccounts attribute on mapped operations'.
  1586. [07/10/12 03:56:49.783]:ADTRACE ST: (if-xpath true "operation-data/account-tracking-operation") = FALSE.
  1587. [07/10/12 03:56:49.783]:ADTRACE ST: (if-xpath true "operation-data/account-tracking-operation") = FALSE.
  1588. [07/10/12 03:56:49.783]:ADTRACE ST: Rule rejected.
  1589. [07/10/12 03:56:49.783]:ADTRACE ST: Policy returned:
  1590. [07/10/12 03:56:49.783]:ADTRACE ST:
  1591. <nds dtdversion="1.1" ndsversion="8.7">
  1592. <source>
  1593. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  1594. <contact>Novell, Inc.</contact>
  1595. </source>
  1596. <output>
  1597. <status event-id="0" level="success"/>
  1598. </output>
  1599. </nds>
  1600. [07/10/12 03:56:49.783]:ADTRACE ST: Applying policy: %+C%14CNOVLADDCFG-itp-SubscriberUserAdd%-C.
  1601. [07/10/12 03:56:49.783]:ADTRACE ST: Applying to status #1.
  1602. [07/10/12 03:56:49.783]:ADTRACE ST: Evaluating selection criteria for rule 'Populate DirXML-ADContext on initial user add'.
  1603. [07/10/12 03:56:49.783]:ADTRACE ST: (if-operation equal "add-association") = FALSE.
  1604. [07/10/12 03:56:49.783]:ADTRACE ST: Rule rejected.
  1605. [07/10/12 03:56:49.783]:ADTRACE ST: Policy returned:
  1606. [07/10/12 03:56:49.783]:ADTRACE ST:
  1607. <nds dtdversion="1.1" ndsversion="8.7">
  1608. <source>
  1609. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  1610. <contact>Novell, Inc.</contact>
  1611. </source>
  1612. <output>
  1613. <status event-id="0" level="success"/>
  1614. </output>
  1615. </nds>
  1616. [07/10/12 03:56:49.783]:ADTRACE ST: Applying policy: %+C%14CNOVLADDCFG-itp-FormatConversions%-C.
  1617. [07/10/12 03:56:49.783]:ADTRACE ST: Applying to status #1.
  1618. [07/10/12 03:56:49.783]:ADTRACE ST: Evaluating selection criteria for rule 'streetAddress: Convert CR-LF to LF'.
  1619. [07/10/12 03:56:49.783]:ADTRACE ST: Rule selected.
  1620. [07/10/12 03:56:49.783]:ADTRACE ST: Applying rule 'streetAddress: Convert CR-LF to LF'.
  1621. [07/10/12 03:56:49.783]:ADTRACE ST: Action: do-reformat-op-attr("streetAddress",token-replace-all("\r\n","\r",token-local-variable("current-value"))).
  1622. [07/10/12 03:56:49.783]:ADTRACE ST: Evaluating selection criteria for rule 'logonHours: Convert to Login Allowed Time Map form'.
  1623. [07/10/12 03:56:49.783]:ADTRACE ST: Rule selected.
  1624. [07/10/12 03:56:49.783]:ADTRACE ST: Applying rule 'logonHours: Convert to Login Allowed Time Map form'.
  1625. [07/10/12 03:56:49.783]:ADTRACE ST: Action: do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2eDir($current-value)")).
  1626. [07/10/12 03:56:49.798]:ADTRACE ST: Evaluating selection criteria for rule 'accountExpires: Convert to Identity Vault time format'.
  1627. [07/10/12 03:56:49.798]:ADTRACE ST: Rule selected.
  1628. [07/10/12 03:56:49.798]:ADTRACE ST: Applying rule 'accountExpires: Convert to Identity Vault time format'.
  1629. [07/10/12 03:56:49.798]:ADTRACE ST: Action: do-reformat-op-attr("accountExpires",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
  1630. [07/10/12 03:56:49.798]:ADTRACE ST: Evaluating selection criteria for rule 'lockoutTime: Convert to Identity Vault time format'.
  1631. [07/10/12 03:56:49.798]:ADTRACE ST: Rule selected.
  1632. [07/10/12 03:56:49.798]:ADTRACE ST: Applying rule 'lockoutTime: Convert to Identity Vault time format'.
  1633. [07/10/12 03:56:49.798]:ADTRACE ST: Action: do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
  1634. [07/10/12 03:56:49.798]:ADTRACE ST: Policy returned:
  1635. [07/10/12 03:56:49.798]:ADTRACE ST:
  1636. <nds dtdversion="1.1" ndsversion="8.7">
  1637. <source>
  1638. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  1639. <contact>Novell, Inc.</contact>
  1640. </source>
  1641. <output>
  1642. <status event-id="0" level="success"/>
  1643. </output>
  1644. </nds>
  1645. [07/10/12 03:56:49.798]:ADTRACE ST: Applying policy: %+C%14CNOVLDATACOLL-itp-DataCollectionQuerySupport%-C.
  1646. [07/10/12 03:56:49.798]:ADTRACE ST: Applying to status #1.
  1647. [07/10/12 03:56:49.798]:ADTRACE ST: Evaluating selection criteria for rule 'Rename @association-ref to @association and change @type from "dn" to "{dn}"'.
  1648. [07/10/12 03:56:49.798]:ADTRACE ST: (if-operation equal "instance") = FALSE.
  1649. [07/10/12 03:56:49.798]:ADTRACE ST: Rule rejected.
  1650. [07/10/12 03:56:49.798]:ADTRACE ST: Policy returned:
  1651. [07/10/12 03:56:49.798]:ADTRACE ST:
  1652. <nds dtdversion="1.1" ndsversion="8.7">
  1653. <source>
  1654. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  1655. <contact>Novell, Inc.</contact>
  1656. </source>
  1657. <output>
  1658. <status event-id="0" level="success"/>
  1659. </output>
  1660. </nds>
  1661. [07/10/12 03:56:49.798]:ADTRACE ST: Applying policy: %+C%14CNOVLADENTEX-itp-EntitlementsImpl%-C.
  1662. [07/10/12 03:56:49.798]:ADTRACE ST: Applying to status #1.
  1663. [07/10/12 03:56:49.798]:ADTRACE ST: Evaluating selection criteria for rule 'Intercept ADDomain (tagged identity query) query response'.
  1664. [07/10/12 03:56:49.798]:ADTRACE ST: (if-operation equal "instance") = FALSE.
  1665. [07/10/12 03:56:49.798]:ADTRACE ST: Rule rejected.
  1666. [07/10/12 03:56:49.798]:ADTRACE ST: Evaluating selection criteria for rule 'Intercept ADDomain (tagged identity query) query status'.
  1667. [07/10/12 03:56:49.798]:ADTRACE ST: (if-xpath true "../status[@event-id='query-driver-ident']/operation-data/@UserAccountEntitlementQuery") = FALSE.
  1668. [07/10/12 03:56:49.798]:ADTRACE ST: Rule rejected.
  1669. [07/10/12 03:56:49.798]:ADTRACE ST: Evaluating selection criteria for rule 'Check target of add-association for group membership entitlements'.
  1670. [07/10/12 03:56:49.798]:ADTRACE ST: (if-global-variable 'drv.entitlement.Group' equal "true") = TRUE.
  1671. [07/10/12 03:56:49.798]:ADTRACE ST: (if-operation equal "add-association") = FALSE.
  1672. [07/10/12 03:56:49.798]:ADTRACE ST: Rule rejected.
  1673. [07/10/12 03:56:49.798]:ADTRACE ST: Evaluating selection criteria for rule 'Check target of add-association for Exchange mailbox entitlements'.
  1674. [07/10/12 03:56:49.798]:ADTRACE ST: (if-global-variable 'drv.exchMailboxMethod' equal "entitlement") = FALSE.
  1675. [07/10/12 03:56:49.798]:ADTRACE ST: Rule rejected.
  1676. [07/10/12 03:56:49.798]:ADTRACE ST: Policy returned:
  1677. [07/10/12 03:56:49.798]:ADTRACE ST:
  1678. <nds dtdversion="1.1" ndsversion="8.7">
  1679. <source>
  1680. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  1681. <contact>Novell, Inc.</contact>
  1682. </source>
  1683. <output>
  1684. <status event-id="0" level="success"/>
  1685. </output>
  1686. </nds>
  1687. [07/10/12 03:56:49.798]:ADTRACE ST: Applying policy: %+C%14CNOVLPWDSYNC-itp-EmailOnFailedPwdSub%-C.
  1688. [07/10/12 03:56:49.798]:ADTRACE ST: Applying to status #1.
  1689. [07/10/12 03:56:49.798]:ADTRACE ST: Evaluating selection criteria for rule 'Send e-mail on a failure when subscribing to passwords'.
  1690. [07/10/12 03:56:49.814]:ADTRACE ST: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  1691. [07/10/12 03:56:49.814]:ADTRACE ST: (if-operation equal "status") = TRUE.
  1692. [07/10/12 03:56:49.814]:ADTRACE ST: (if-xpath true "self::status[@level != 'success'][text() != '']/operation-data/password-subscribe-status/association[text() != '']") = FALSE.
  1693. [07/10/12 03:56:49.814]:ADTRACE ST: Rule rejected.
  1694. [07/10/12 03:56:49.814]:ADTRACE ST: Evaluating selection criteria for rule 'Send e-mail on failure to reset connected system password using the Identity Vault password'.
  1695. [07/10/12 03:56:49.814]:ADTRACE ST: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  1696. [07/10/12 03:56:49.814]:ADTRACE ST: (if-operation equal "status") = TRUE.
  1697. [07/10/12 03:56:49.814]:ADTRACE ST: (if-xpath true "self::status[@level != 'success']/operation-data/password-reset-status") = FALSE.
  1698. [07/10/12 03:56:49.814]:ADTRACE ST: Rule rejected.
  1699. [07/10/12 03:56:49.814]:ADTRACE ST: Policy returned:
  1700. [07/10/12 03:56:49.814]:ADTRACE ST:
  1701. <nds dtdversion="1.1" ndsversion="8.7">
  1702. <source>
  1703. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  1704. <contact>Novell, Inc.</contact>
  1705. </source>
  1706. <output>
  1707. <status event-id="0" level="success"/>
  1708. </output>
  1709. </nds>
  1710. [07/10/12 03:56:49.814]:ADTRACE ST: Applying schema mapping policies to input.
  1711. [07/10/12 03:56:49.814]:ADTRACE ST: Applying policy: %+C%14CNOVLDATACOLL-smp-SkipSchemaMapping%-C.
  1712. [07/10/12 03:56:49.814]:ADTRACE ST: Applying to status #1.
  1713. [07/10/12 03:56:49.814]:ADTRACE ST: Evaluating selection criteria for rule 'skip'.
  1714. [07/10/12 03:56:49.814]:ADTRACE ST: (if-operation equal "instance") = FALSE.
  1715. [07/10/12 03:56:49.814]:ADTRACE ST: Rule rejected.
  1716. [07/10/12 03:56:49.814]:ADTRACE ST: Evaluating selection criteria for rule 'restore'.
  1717. [07/10/12 03:56:49.814]:ADTRACE ST: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  1718. [07/10/12 03:56:49.814]:ADTRACE ST: Rule rejected.
  1719. [07/10/12 03:56:49.814]:ADTRACE ST: Policy returned:
  1720. [07/10/12 03:56:49.814]:ADTRACE ST:
  1721. <nds dtdversion="1.1" ndsversion="8.7">
  1722. <source>
  1723. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  1724. <contact>Novell, Inc.</contact>
  1725. </source>
  1726. <output>
  1727. <status event-id="0" level="success"/>
  1728. </output>
  1729. </nds>
  1730. [07/10/12 03:56:49.814]:ADTRACE ST: Applying policy: %+C%14CNOVLADDCFG-smp%-C.
  1731. [07/10/12 03:56:49.814]:ADTRACE ST: Applying policy: %+C%14CNOVLDATACOLL-smp-SkipSchemaMapping%-C.
  1732. [07/10/12 03:56:49.814]:ADTRACE ST: Applying to status #1.
  1733. [07/10/12 03:56:49.814]:ADTRACE ST: Evaluating selection criteria for rule 'skip'.
  1734. [07/10/12 03:56:49.814]:ADTRACE ST: (if-operation equal "instance") = FALSE.
  1735. [07/10/12 03:56:49.814]:ADTRACE ST: Rule rejected.
  1736. [07/10/12 03:56:49.814]:ADTRACE ST: Evaluating selection criteria for rule 'restore'.
  1737. [07/10/12 03:56:49.814]:ADTRACE ST: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  1738. [07/10/12 03:56:49.814]:ADTRACE ST: Rule rejected.
  1739. [07/10/12 03:56:49.814]:ADTRACE ST: Policy returned:
  1740. [07/10/12 03:56:49.814]:ADTRACE ST:
  1741. <nds dtdversion="1.1" ndsversion="8.7">
  1742. <source>
  1743. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  1744. <contact>Novell, Inc.</contact>
  1745. </source>
  1746. <output>
  1747. <status event-id="0" level="success"/>
  1748. </output>
  1749. </nds>
  1750. [07/10/12 03:56:49.814]:ADTRACE ST: Resolving association references.
  1751. [07/10/12 03:56:49.814]:ADTRACE ST: Query from policy result
  1752. [07/10/12 03:56:49.814]:ADTRACE ST:
  1753. <nds dtdversion="1.1" ndsversion="8.7">
  1754. <source>
  1755. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  1756. <contact>Novell, Inc.</contact>
  1757. </source>
  1758. <output>
  1759. <status event-id="0" level="success"/>
  1760. </output>
  1761. </nds>
  1762. [07/10/12 03:56:49.814]:ADTRACE ST: No matches found.
  1763. [07/10/12 03:56:49.814]:ADTRACE ST: Evaluating selection criteria for rule 'match everything else'.
  1764. [07/10/12 03:56:49.814]:ADTRACE ST: Rule selected.
  1765. [07/10/12 03:56:49.814]:ADTRACE ST: Applying rule 'match everything else'.
  1766. [07/10/12 03:56:49.829]:ADTRACE ST: Action: do-if().
  1767. [07/10/12 03:56:49.829]:ADTRACE ST: Evaluating conditions.
  1768. [07/10/12 03:56:49.829]:ADTRACE ST: (if-global-variable 'drv.subPlacementType' equal "flat") = TRUE.
  1769. [07/10/12 03:56:49.829]:ADTRACE ST: Performing if actions.
  1770. [07/10/12 03:56:49.829]:ADTRACE ST: Action: do-find-matching-object(scope="entry",arg-dn(token-src-dn(convert="true",length="1",start="-1")+","+token-global-variable("drv.user.container"))).
  1771. [07/10/12 03:56:49.829]:ADTRACE ST: arg-dn(token-src-dn(convert="true",length="1",start="-1")+","+token-global-variable("drv.user.container"))
  1772. [07/10/12 03:56:49.829]:ADTRACE ST: token-src-dn(convert="true",length="1",start="-1")
  1773. [07/10/12 03:56:49.829]:ADTRACE ST: Token Value: "CN=testuser1".
  1774. [07/10/12 03:56:49.829]:ADTRACE ST: token-text(",")
  1775. [07/10/12 03:56:49.829]:ADTRACE ST: token-global-variable("drv.user.container")
  1776. [07/10/12 03:56:49.829]:ADTRACE ST: Token Value: "OU=users,OU=NOVELLUSER,DC=idm,DC=com".
  1777. [07/10/12 03:56:49.829]:ADTRACE ST: Arg Value: "CN=testuser1,OU=users,OU=NOVELLUSER,DC=idm,DC=com".
  1778. [07/10/12 03:56:49.829]:ADTRACE ST: Query from policy
  1779. [07/10/12 03:56:49.829]:ADTRACE ST:
  1780. <nds dtdversion="4.0" ndsversion="8.x">
  1781. <source>
  1782. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  1783. <contact>Novell, Inc.</contact>
  1784. </source>
  1785. <input>
  1786. <query class-name="User" dest-dn="CN=testuser1,OU=users,OU=NOVELLUSER,DC=idm,DC=com" scope="entry">
  1787. <search-class class-name="User"/>
  1788. <read-attr/>
  1789. </query>
  1790. </input>
  1791. </nds>
  1792. [07/10/12 03:56:49.829]:ADTRACE ST: Fixing up association references.
  1793. [07/10/12 03:56:49.829]:ADTRACE ST: Applying schema mapping policies to output.
  1794. [07/10/12 03:56:49.829]:ADTRACE ST: Applying policy: %+C%14CNOVLDATACOLL-smp-SkipSchemaMapping%-C.
  1795. [07/10/12 03:56:49.829]:ADTRACE ST: Applying to query #1.
  1796. [07/10/12 03:56:49.829]:ADTRACE ST: Evaluating selection criteria for rule 'skip'.
  1797. [07/10/12 03:56:49.829]:ADTRACE ST: (if-operation equal "instance") = FALSE.
  1798. [07/10/12 03:56:49.829]:ADTRACE ST: Rule rejected.
  1799. [07/10/12 03:56:49.829]:ADTRACE ST: Evaluating selection criteria for rule 'restore'.
  1800. [07/10/12 03:56:49.829]:ADTRACE ST: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  1801. [07/10/12 03:56:49.829]:ADTRACE ST: Rule rejected.
  1802. [07/10/12 03:56:49.829]:ADTRACE ST: Policy returned:
  1803. [07/10/12 03:56:49.829]:ADTRACE ST:
  1804. <nds dtdversion="4.0" ndsversion="8.x">
  1805. <source>
  1806. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  1807. <contact>Novell, Inc.</contact>
  1808. </source>
  1809. <input>
  1810. <query class-name="User" dest-dn="CN=testuser1,OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="entry">
  1811. <search-class class-name="User"/>
  1812. <read-attr/>
  1813. </query>
  1814. </input>
  1815. </nds>
  1816. [07/10/12 03:56:49.829]:ADTRACE ST: Applying policy: %+C%14CNOVLADDCFG-smp%-C.
  1817. [07/10/12 03:56:49.829]:ADTRACE ST: Mapping class-name 'User' to 'user'.
  1818. [07/10/12 03:56:49.829]:ADTRACE ST: Mapping class-name 'User' to 'user'.
  1819. [07/10/12 03:56:49.829]:ADTRACE ST: Applying policy: %+C%14CNOVLDATACOLL-smp-SkipSchemaMapping%-C.
  1820. [07/10/12 03:56:49.829]:ADTRACE ST: Applying to query #1.
  1821. [07/10/12 03:56:49.829]:ADTRACE ST: Evaluating selection criteria for rule 'skip'.
  1822. [07/10/12 03:56:49.829]:ADTRACE ST: (if-operation equal "instance") = FALSE.
  1823. [07/10/12 03:56:49.829]:ADTRACE ST: Rule rejected.
  1824. [07/10/12 03:56:49.829]:ADTRACE ST: Evaluating selection criteria for rule 'restore'.
  1825. [07/10/12 03:56:49.829]:ADTRACE ST: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  1826. [07/10/12 03:56:49.829]:ADTRACE ST: Rule rejected.
  1827. [07/10/12 03:56:49.829]:ADTRACE ST: Policy returned:
  1828. [07/10/12 03:56:49.829]:ADTRACE ST:
  1829. <nds dtdversion="4.0" ndsversion="8.x">
  1830. <source>
  1831. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  1832. <contact>Novell, Inc.</contact>
  1833. </source>
  1834. <input>
  1835. <query class-name="user" dest-dn="CN=testuser1,OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="entry">
  1836. <search-class class-name="user"/>
  1837. <read-attr/>
  1838. </query>
  1839. </input>
  1840. </nds>
  1841. [07/10/12 03:56:49.829]:ADTRACE ST: Applying output transformation policies.
  1842. [07/10/12 03:56:49.829]:ADTRACE ST: Applying policy: %+C%14CNOVLADENTEX-otp-EntitlementsImpl%-C.
  1843. [07/10/12 03:56:49.829]:ADTRACE ST: Applying to query #1.
  1844. [07/10/12 03:56:49.829]:ADTRACE ST: Evaluating selection criteria for rule 'Intercept outbound queries for ADDomain'.
  1845. [07/10/12 03:56:49.829]:ADTRACE ST: (if-class-name equal "ADDomain") = FALSE.
  1846. [07/10/12 03:56:49.845]:ADTRACE ST: Rule rejected.
  1847. [07/10/12 03:56:49.845]:ADTRACE ST: Policy returned:
  1848. [07/10/12 03:56:49.845]:ADTRACE ST:
  1849. <nds dtdversion="4.0" ndsversion="8.x">
  1850. <source>
  1851. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  1852. <contact>Novell, Inc.</contact>
  1853. </source>
  1854. <input>
  1855. <query class-name="user" dest-dn="CN=testuser1,OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="entry">
  1856. <search-class class-name="user"/>
  1857. <read-attr/>
  1858. </query>
  1859. </input>
  1860. </nds>
  1861. [07/10/12 03:56:49.845]:ADTRACE ST: Applying policy: %+C%14CNOVLADENTEX-otp-ExchangeMailboxPolicy%-C.
  1862. [07/10/12 03:56:49.845]:ADTRACE ST: Applying to query #1.
  1863. [07/10/12 03:56:49.845]:ADTRACE ST: Evaluating selection criteria for rule 'Exchange: Remove HomeMDB when disabled'.
  1864. [07/10/12 03:56:49.845]:ADTRACE ST: (if-global-variable 'drv.exchMailboxMethod' equal "disabled") = TRUE.
  1865. [07/10/12 03:56:49.845]:ADTRACE ST: Rule selected.
  1866. [07/10/12 03:56:49.845]:ADTRACE ST: Applying rule 'Exchange: Remove HomeMDB when disabled'.
  1867. [07/10/12 03:56:49.845]:ADTRACE ST: Action: do-strip-op-attr("homeMDB").
  1868. [07/10/12 03:56:49.845]:ADTRACE ST: Policy returned:
  1869. [07/10/12 03:56:49.845]:ADTRACE ST:
  1870. <nds dtdversion="4.0" ndsversion="8.x">
  1871. <source>
  1872. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  1873. <contact>Novell, Inc.</contact>
  1874. </source>
  1875. <input>
  1876. <query class-name="user" dest-dn="CN=testuser1,OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="entry">
  1877. <search-class class-name="user"/>
  1878. <read-attr/>
  1879. </query>
  1880. </input>
  1881. </nds>
  1882. [07/10/12 03:56:49.845]:ADTRACE ST: Applying policy: %+C%14CNOVLADDCFG-otp-FormatConversions%-C.
  1883. [07/10/12 03:56:49.845]:ADTRACE ST: Applying to query #1.
  1884. [07/10/12 03:56:49.845]:ADTRACE ST: Evaluating selection criteria for rule 'Street Address: Convert LF to CR-LF'.
  1885. [07/10/12 03:56:49.845]:ADTRACE ST: Rule selected.
  1886. [07/10/12 03:56:49.845]:ADTRACE ST: Applying rule 'Street Address: Convert LF to CR-LF'.
  1887. [07/10/12 03:56:49.845]:ADTRACE ST: Action: do-reformat-op-attr("streetAddress",token-replace-all("[^\r]\n","\r\n",token-local-variable("current-value"))).
  1888. [07/10/12 03:56:49.845]:ADTRACE ST: Evaluating selection criteria for rule 'logonHours: Convert to Active Directory form'.
  1889. [07/10/12 03:56:49.845]:ADTRACE ST: Rule selected.
  1890. [07/10/12 03:56:49.845]:ADTRACE ST: Applying rule 'logonHours: Convert to Active Directory form'.
  1891. [07/10/12 03:56:49.845]:ADTRACE ST: Action: do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2ADLenient($current-value)")).
  1892. [07/10/12 03:56:49.845]:ADTRACE ST: Evaluating selection criteria for rule 'accountExpires: Convert to Active Directory form'.
  1893. [07/10/12 03:56:49.845]:ADTRACE ST: (if-op-attr 'accountExpires' changing) = FALSE.
  1894. [07/10/12 03:56:49.845]:ADTRACE ST: Rule rejected.
  1895. [07/10/12 03:56:49.845]:ADTRACE ST: Evaluating selection criteria for rule 'lockoutTime: Convert to Active Directory form'.
  1896. [07/10/12 03:56:49.845]:ADTRACE ST: Rule selected.
  1897. [07/10/12 03:56:49.845]:ADTRACE ST: Applying rule 'lockoutTime: Convert to Active Directory form'.
  1898. [07/10/12 03:56:49.845]:ADTRACE ST: Action: do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateEpoch2FileTime($current-value)")).
  1899. [07/10/12 03:56:49.845]:ADTRACE ST: Evaluating selection criteria for rule 'Add: User - convert multi-valued Telephone to single value'.
  1900. [07/10/12 03:56:49.845]:ADTRACE ST: (if-operation equal "add") = FALSE.
  1901. [07/10/12 03:56:49.845]:ADTRACE ST: Rule rejected.
  1902. [07/10/12 03:56:49.845]:ADTRACE ST: Evaluating selection criteria for rule 'update Active Directory logon name'.
  1903. [07/10/12 03:56:49.845]:ADTRACE ST: (if-xpath true "self::status[@level = 'success']/operation-data/windows-2000-logon-name") = FALSE.
  1904. [07/10/12 03:56:49.845]:ADTRACE ST: Rule rejected.
  1905. [07/10/12 03:56:49.845]:ADTRACE ST: Policy returned:
  1906. [07/10/12 03:56:49.845]:ADTRACE ST:
  1907. <nds dtdversion="4.0" ndsversion="8.x">
  1908. <source>
  1909. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  1910. <contact>Novell, Inc.</contact>
  1911. </source>
  1912. <input>
  1913. <query class-name="user" dest-dn="CN=testuser1,OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="entry">
  1914. <search-class class-name="user"/>
  1915. <read-attr/>
  1916. </query>
  1917. </input>
  1918. </nds>
  1919. [07/10/12 03:56:49.845]:ADTRACE ST: Applying policy: %+C%14CNOVLADDCFG-otp-ExchangeEntitlementQuery%-C.
  1920. [07/10/12 03:56:49.845]:ADTRACE ST: Applying to query #1.
  1921. [07/10/12 03:56:49.861]:ADTRACE ST: Evaluating selection criteria for rule 'Add dest-dn to the Exchange Entitlement Query'.
  1922. [07/10/12 03:56:49.861]:ADTRACE ST: (if-operation equal "query") = TRUE.
  1923. [07/10/12 03:56:49.861]:ADTRACE ST: (if-class-name equal "msExchPrivateMDB") = FALSE.
  1924. [07/10/12 03:56:49.861]:ADTRACE ST: Rule rejected.
  1925. [07/10/12 03:56:49.861]:ADTRACE ST: Policy returned:
  1926. [07/10/12 03:56:49.861]:ADTRACE ST:
  1927. <nds dtdversion="4.0" ndsversion="8.x">
  1928. <source>
  1929. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  1930. <contact>Novell, Inc.</contact>
  1931. </source>
  1932. <input>
  1933. <query class-name="user" dest-dn="CN=testuser1,OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="entry">
  1934. <search-class class-name="user"/>
  1935. <read-attr/>
  1936. </query>
  1937. </input>
  1938. </nds>
  1939. [07/10/12 03:56:49.861]:ADTRACE ST: Applying policy: %+C%14CNOVLPWDSYNC-otp-EmailOnFailedPwdPub%-C.
  1940. [07/10/12 03:56:49.861]:ADTRACE ST: Applying to query #1.
  1941. [07/10/12 03:56:49.861]:ADTRACE ST: Evaluating selection criteria for rule 'Send e-mail for a failed publish password operation'.
  1942. [07/10/12 03:56:49.861]:ADTRACE ST: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  1943. [07/10/12 03:56:49.861]:ADTRACE ST: (if-operation equal "status") = FALSE.
  1944. [07/10/12 03:56:49.861]:ADTRACE ST: Rule rejected.
  1945. [07/10/12 03:56:49.861]:ADTRACE ST: Policy returned:
  1946. [07/10/12 03:56:49.861]:ADTRACE ST:
  1947. <nds dtdversion="4.0" ndsversion="8.x">
  1948. <source>
  1949. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  1950. <contact>Novell, Inc.</contact>
  1951. </source>
  1952. <input>
  1953. <query class-name="user" dest-dn="CN=testuser1,OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="entry">
  1954. <search-class class-name="user"/>
  1955. <read-attr/>
  1956. </query>
  1957. </input>
  1958. </nds>
  1959. [07/10/12 03:56:49.861]:ADTRACE ST: Applying policy: %+C%14CNOVLATRKBASE-otp-Subscribe%-C.
  1960. [07/10/12 03:56:49.861]:ADTRACE ST: Applying to query #1.
  1961. [07/10/12 03:56:49.861]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - Initialize Realm Mapping'.
  1962. [07/10/12 03:56:49.861]:ADTRACE ST: (if-global-variable 'drv.acctTrk.enable' equal "true") = TRUE.
  1963. [07/10/12 03:56:49.861]:ADTRACE ST: (if-global-variable 'drv.acctTrk.mode' equal "fanout") = FALSE.
  1964. [07/10/12 03:56:49.861]:ADTRACE ST: Rule rejected.
  1965. [07/10/12 03:56:49.861]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled or wrong object class'.
  1966. [07/10/12 03:56:49.861]:ADTRACE ST: Rule selected.
  1967. [07/10/12 03:56:49.861]:ADTRACE ST: Applying rule 'AccountTracking - disregard if disabled or wrong object class'.
  1968. [07/10/12 03:56:49.861]:ADTRACE ST: Action: do-if().
  1969. [07/10/12 03:56:49.861]:ADTRACE ST: Evaluating conditions.
  1970. [07/10/12 03:56:49.861]:ADTRACE ST: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  1971. [07/10/12 03:56:49.861]:ADTRACE ST: Performing else actions.
  1972. [07/10/12 03:56:49.861]:ADTRACE ST: Action: do-for-each(arg-node-set(token-global-variable("drv.acctTrk.objectClass"))).
  1973. [07/10/12 03:56:49.861]:ADTRACE ST: arg-node-set(token-global-variable("drv.acctTrk.objectClass"))
  1974. [07/10/12 03:56:49.861]:ADTRACE ST: token-global-variable("drv.acctTrk.objectClass")
  1975. [07/10/12 03:56:49.861]:ADTRACE ST: Token Value: {"user"}.
  1976. [07/10/12 03:56:49.861]:ADTRACE ST: Arg Value: {"user"}.
  1977. [07/10/12 03:56:49.861]:ADTRACE ST: Performing actions for local-variable(current-node) = "user".
  1978. [07/10/12 03:56:49.861]:ADTRACE ST: Action: do-if().
  1979. [07/10/12 03:56:49.861]:ADTRACE ST: Evaluating conditions.
  1980. [07/10/12 03:56:49.861]:ADTRACE ST: Expanded variable reference '$current-node$' to 'user'.
  1981. [07/10/12 03:56:49.861]:ADTRACE ST: (if-class-name equal "$current-node$") = TRUE.
  1982. [07/10/12 03:56:49.861]:ADTRACE ST: Performing if actions.
  1983. [07/10/12 03:56:49.861]:ADTRACE ST: Action: do-set-local-variable("pass",scope="policy","true").
  1984. [07/10/12 03:56:49.861]:ADTRACE ST: arg-string("true")
  1985. [07/10/12 03:56:49.861]:ADTRACE ST: token-text("true")
  1986. [07/10/12 03:56:49.861]:ADTRACE ST: Arg Value: "true".
  1987. [07/10/12 03:56:49.861]:ADTRACE ST: Action: do-if().
  1988. [07/10/12 03:56:49.861]:ADTRACE ST: Evaluating conditions.
  1989. [07/10/12 03:56:49.861]:ADTRACE ST: (if-local-variable 'pass' not-available) = FALSE.
  1990. [07/10/12 03:56:49.876]:ADTRACE ST: Performing else actions.
  1991. [07/10/12 03:56:49.876]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - add operation-data for regular operations'.
  1992. [07/10/12 03:56:49.876]:ADTRACE ST: (if-operation match "add|modify|delete|rename|move") = FALSE.
  1993. [07/10/12 03:56:49.876]:ADTRACE ST: Rule rejected.
  1994. [07/10/12 03:56:49.876]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - add operation-data for mapped operations'.
  1995. [07/10/12 03:56:49.876]:ADTRACE ST: (if-global-variable 'drv.acctTrk.mode' equal "fanout") = FALSE.
  1996. [07/10/12 03:56:49.876]:ADTRACE ST: Rule rejected.
  1997. [07/10/12 03:56:49.876]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - strip AccountTrackingAccountStatus attribute'.
  1998. [07/10/12 03:56:49.876]:ADTRACE ST: (if-op-attr 'AccountTrackingAccountStatus' available) = FALSE.
  1999. [07/10/12 03:56:49.876]:ADTRACE ST: Rule rejected.
  2000. [07/10/12 03:56:49.876]:ADTRACE ST: Policy returned:
  2001. [07/10/12 03:56:49.876]:ADTRACE ST:
  2002. <nds dtdversion="4.0" ndsversion="8.x">
  2003. <source>
  2004. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  2005. <contact>Novell, Inc.</contact>
  2006. </source>
  2007. <input>
  2008. <query class-name="user" dest-dn="CN=testuser1,OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="entry">
  2009. <search-class class-name="user"/>
  2010. <read-attr/>
  2011. </query>
  2012. </input>
  2013. </nds>
  2014. [07/10/12 03:56:49.876]:ADTRACE ST: Submitting document to subscriber shim:
  2015. [07/10/12 03:56:49.876]:ADTRACE ST:
  2016. <nds dtdversion="4.0" ndsversion="8.x">
  2017. <source>
  2018. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  2019. <contact>Novell, Inc.</contact>
  2020. </source>
  2021. <input>
  2022. <query class-name="user" dest-dn="CN=testuser1,OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="entry">
  2023. <search-class class-name="user"/>
  2024. <read-attr/>
  2025. </query>
  2026. </input>
  2027. </nds>
  2028. [07/10/12 03:56:49.876]:ADTRACE ST: Remote Interface Driver: Sending...
  2029. [07/10/12 03:56:49.876]:ADTRACE ST:
  2030. <nds dtdversion="4.0" ndsversion="8.x">
  2031. <source>
  2032. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  2033. <contact>Novell, Inc.</contact>
  2034. </source>
  2035. <input>
  2036. <query class-name="user" dest-dn="CN=testuser1,OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="0" scope="entry">
  2037. <search-class class-name="user"/>
  2038. <read-attr/>
  2039. </query>
  2040. </input>
  2041. </nds>
  2042. [07/10/12 03:56:49.876]:ADTRACE ST: Remote Interface Driver: Document sent.
  2043. [07/10/12 03:56:49.892]:ADTRACE :Remote Interface Driver: Received.
  2044. [07/10/12 03:56:49.892]:ADTRACE :
  2045. <nds dtdversion="1.1" ndsversion="8.7">
  2046. <source>
  2047. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  2048. <contact>Novell, Inc.</contact>
  2049. </source>
  2050. <output>
  2051. <status event-id="0" level="success"/>
  2052. </output>
  2053. </nds>
  2054. [07/10/12 03:56:49.892]:ADTRACE :Remote Interface Driver: Received document for subscriber channel
  2055. [07/10/12 03:56:49.892]:ADTRACE :Remote Interface Driver: Waiting for receive...
  2056. [07/10/12 03:56:49.892]:ADTRACE ST: SubscriptionShim.execute() returned:
  2057. [07/10/12 03:56:49.892]:ADTRACE ST:
  2058. <nds dtdversion="1.1" ndsversion="8.7">
  2059. <source>
  2060. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  2061. <contact>Novell, Inc.</contact>
  2062. </source>
  2063. <output>
  2064. <status event-id="0" level="success"/>
  2065. </output>
  2066. </nds>
  2067. [07/10/12 03:56:49.892]:ADTRACE ST: Applying input transformation policies.
  2068. [07/10/12 03:56:49.892]:ADTRACE ST: Applying policy: %+C%14CNOVLAUDTENTC-itp-SendEntitlementsEvents%-C.
  2069. [07/10/12 03:56:49.892]:ADTRACE ST: Applying to status #1.
  2070. [07/10/12 03:56:49.892]:ADTRACE ST: Evaluating selection criteria for rule '00031200 - Account Create By Entitlement Grant'.
  2071. [07/10/12 03:56:49.892]:ADTRACE ST: (if-operation equal "status") = TRUE.
  2072. [07/10/12 03:56:49.892]:ADTRACE ST: (if-op-property 'accountAction' equal "accountCreateByEntitlementGrant") = FALSE.
  2073. [07/10/12 03:56:49.892]:ADTRACE ST: Rule rejected.
  2074. [07/10/12 03:56:49.892]:ADTRACE ST: Evaluating selection criteria for rule '00031201 - Account Delete By Entitlement Revoke'.
  2075. [07/10/12 03:56:49.892]:ADTRACE ST: (if-operation equal "status") = TRUE.
  2076. [07/10/12 03:56:49.892]:ADTRACE ST: (if-xpath true "./operation-data/entitlement-impl/@state = '0'") = FALSE.
  2077. [07/10/12 03:56:49.892]:ADTRACE ST: (if-operation equal "status") = TRUE.
  2078. [07/10/12 03:56:49.892]:ADTRACE ST: (if-op-property 'accountAction' equal "accountDeleteByEntitlementRevoke") = FALSE.
  2079. [07/10/12 03:56:49.892]:ADTRACE ST: Rule rejected.
  2080. [07/10/12 03:56:49.892]:ADTRACE ST: Evaluating selection criteria for rule '00031202 - Account Disable By Entitlement Revoke'.
  2081. [07/10/12 03:56:49.892]:ADTRACE ST: (if-operation equal "status") = TRUE.
  2082. [07/10/12 03:56:49.892]:ADTRACE ST: (if-op-property 'accountAction' equal "accountDisableByEntitlementRevoke") = FALSE.
  2083. [07/10/12 03:56:49.892]:ADTRACE ST: Rule rejected.
  2084. [07/10/12 03:56:49.892]:ADTRACE ST: Evaluating selection criteria for rule '00031203 - Account Enable By Entitlement Grant'.
  2085. [07/10/12 03:56:49.892]:ADTRACE ST: (if-operation equal "status") = TRUE.
  2086. [07/10/12 03:56:49.892]:ADTRACE ST: (if-op-property 'accountAction' equal "accountEnableByEntitlementGrant") = FALSE.
  2087. [07/10/12 03:56:49.892]:ADTRACE ST: Rule rejected.
  2088. [07/10/12 03:56:49.892]:ADTRACE ST: Evaluating selection criteria for rule 'Generate Audit Event'.
  2089. [07/10/12 03:56:49.892]:ADTRACE ST: (if-operation equal "status") = TRUE.
  2090. [07/10/12 03:56:49.892]:ADTRACE ST: (if-local-variable 'auditEventID' available) = FALSE.
  2091. [07/10/12 03:56:49.892]:ADTRACE ST: Rule rejected.
  2092. [07/10/12 03:56:49.892]:ADTRACE ST: Policy returned:
  2093. [07/10/12 03:56:49.892]:ADTRACE ST:
  2094. <nds dtdversion="1.1" ndsversion="8.7">
  2095. <source>
  2096. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  2097. <contact>Novell, Inc.</contact>
  2098. </source>
  2099. <output>
  2100. <status event-id="0" level="success"/>
  2101. </output>
  2102. </nds>
  2103. [07/10/12 03:56:49.892]:ADTRACE ST: Applying policy: %+C%14CNOVLADENTEX-itp-InitEntitlementConfigurationResource%-C.
  2104. [07/10/12 03:56:49.892]:ADTRACE ST: Applying to status #1.
  2105. [07/10/12 03:56:49.892]:ADTRACE ST: Evaluating selection criteria for rule 'Make sure we only run once and when we're ready'.
  2106. [07/10/12 03:56:49.892]:ADTRACE ST: (if-local-variable 'objectClass' match ".+") = TRUE.
  2107. [07/10/12 03:56:49.892]:ADTRACE ST: (if-local-variable 'entConfigInitialized' equal "true") = TRUE.
  2108. [07/10/12 03:56:49.892]:ADTRACE ST: Rule selected.
  2109. [07/10/12 03:56:49.908]:ADTRACE ST: Applying rule 'Make sure we only run once and when we're ready'.
  2110. [07/10/12 03:56:49.908]:ADTRACE ST: Action: do-break().
  2111. [07/10/12 03:56:49.908]:ADTRACE ST: Policy returned:
  2112. [07/10/12 03:56:49.908]:ADTRACE ST:
  2113. <nds dtdversion="1.1" ndsversion="8.7">
  2114. <source>
  2115. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  2116. <contact>Novell, Inc.</contact>
  2117. </source>
  2118. <output>
  2119. <status event-id="0" level="success"/>
  2120. </output>
  2121. </nds>
  2122. [07/10/12 03:56:49.908]:ADTRACE ST: Applying policy: %+C%14CNOVLADMSINFO-itp-InitManagedSystemInfo%-C.
  2123. [07/10/12 03:56:49.908]:ADTRACE ST: Applying to status #1.
  2124. [07/10/12 03:56:49.908]:ADTRACE ST: Evaluating selection criteria for rule 'Make sure we only run once and when we're ready'.
  2125. [07/10/12 03:56:49.908]:ADTRACE ST: (if-local-variable 'objectClass' match ".+") = TRUE.
  2126. [07/10/12 03:56:49.908]:ADTRACE ST: (if-local-variable 'mSysInfoInitialized' equal "true") = TRUE.
  2127. [07/10/12 03:56:49.908]:ADTRACE ST: Rule selected.
  2128. [07/10/12 03:56:49.908]:ADTRACE ST: Applying rule 'Make sure we only run once and when we're ready'.
  2129. [07/10/12 03:56:49.908]:ADTRACE ST: Action: do-break().
  2130. [07/10/12 03:56:49.908]:ADTRACE ST: Policy returned:
  2131. [07/10/12 03:56:49.908]:ADTRACE ST:
  2132. <nds dtdversion="1.1" ndsversion="8.7">
  2133. <source>
  2134. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  2135. <contact>Novell, Inc.</contact>
  2136. </source>
  2137. <output>
  2138. <status event-id="0" level="success"/>
  2139. </output>
  2140. </nds>
  2141. [07/10/12 03:56:49.908]:ADTRACE ST: Applying policy: %+C%14CNOVLATRKBASE-itp-Publish%-C.
  2142. [07/10/12 03:56:49.908]:ADTRACE ST: Applying to status #1.
  2143. [07/10/12 03:56:49.908]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled or wrong object class'.
  2144. [07/10/12 03:56:49.908]:ADTRACE ST: Rule selected.
  2145. [07/10/12 03:56:49.908]:ADTRACE ST: Applying rule 'AccountTracking - disregard if disabled or wrong object class'.
  2146. [07/10/12 03:56:49.908]:ADTRACE ST: Action: do-if().
  2147. [07/10/12 03:56:49.908]:ADTRACE ST: Evaluating conditions.
  2148. [07/10/12 03:56:49.908]:ADTRACE ST: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  2149. [07/10/12 03:56:49.908]:ADTRACE ST: Performing else actions.
  2150. [07/10/12 03:56:49.908]:ADTRACE ST: Action: do-if().
  2151. [07/10/12 03:56:49.908]:ADTRACE ST: Evaluating conditions.
  2152. [07/10/12 03:56:49.908]:ADTRACE ST: (if-class-name available) = FALSE.
  2153. [07/10/12 03:56:49.908]:ADTRACE ST: Performing else actions.
  2154. [07/10/12 03:56:49.908]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - on add-association sync the operation-properties to status operations'.
  2155. [07/10/12 03:56:49.908]:ADTRACE ST: (if-operation equal "add-association") = FALSE.
  2156. [07/10/12 03:56:49.908]:ADTRACE ST: Rule rejected.
  2157. [07/10/12 03:56:49.908]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - Query for destination DN using Association'.
  2158. [07/10/12 03:56:49.908]:ADTRACE ST: (if-operation match "modify|delete|move|rename") = FALSE.
  2159. [07/10/12 03:56:49.908]:ADTRACE ST: Rule rejected.
  2160. [07/10/12 03:56:49.908]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - add interested properties to current doc for future use.'.
  2161. [07/10/12 03:56:49.908]:ADTRACE ST: (if-operation match "add|modify|delete|rename|move|status") = TRUE.
  2162. [07/10/12 03:56:49.908]:ADTRACE ST: Rule selected.
  2163. [07/10/12 03:56:49.908]:ADTRACE ST: Applying rule 'AccountTracking - add interested properties to current doc for future use.'.
  2164. [07/10/12 03:56:49.908]:ADTRACE ST: Action: do-for-each(arg-node-set(token-global-variable("drv.acctTrk.identifiers"))).
  2165. [07/10/12 03:56:49.908]:ADTRACE ST: arg-node-set(token-global-variable("drv.acctTrk.identifiers"))
  2166. [07/10/12 03:56:49.908]:ADTRACE ST: token-global-variable("drv.acctTrk.identifiers")
  2167. [07/10/12 03:56:49.908]:ADTRACE ST: Token Value: {"sAMAccountName","userPrincipalName","LDAPDN","association"}.
  2168. [07/10/12 03:56:49.908]:ADTRACE ST: Arg Value: {"sAMAccountName","userPrincipalName","LDAPDN","association"}.
  2169. [07/10/12 03:56:49.908]:ADTRACE ST: Performing actions for local-variable(current-node) = "sAMAccountName".
  2170. [07/10/12 03:56:49.908]:ADTRACE ST: Action: do-if().
  2171. [07/10/12 03:56:49.923]:ADTRACE ST: Evaluating conditions.
  2172. [07/10/12 03:56:49.923]:ADTRACE ST: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  2173. [07/10/12 03:56:49.923]:ADTRACE ST: Performing else actions.
  2174. [07/10/12 03:56:49.923]:ADTRACE ST: Action: do-if().
  2175. [07/10/12 03:56:49.923]:ADTRACE ST: Evaluating conditions.
  2176. [07/10/12 03:56:49.923]:ADTRACE ST: (if-local-variable 'current-node' equal "association") = FALSE.
  2177. [07/10/12 03:56:49.923]:ADTRACE ST: Performing else actions.
  2178. [07/10/12 03:56:49.923]:ADTRACE ST: Action: do-if().
  2179. [07/10/12 03:56:49.923]:ADTRACE ST: Evaluating conditions.
  2180. [07/10/12 03:56:49.923]:ADTRACE ST: Expanded variable reference '$current-node$' to 'sAMAccountName'.
  2181. [07/10/12 03:56:49.923]:ADTRACE ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  2182. [07/10/12 03:56:49.923]:ADTRACE ST: Expanded variable reference '$current-node$' to 'sAMAccountName'.
  2183. [07/10/12 03:56:49.923]:ADTRACE ST: (if-op-attr '$current-node$' available) = FALSE.
  2184. [07/10/12 03:56:49.923]:ADTRACE ST: Performing else actions.
  2185. [07/10/12 03:56:49.923]:ADTRACE ST: Performing actions for local-variable(current-node) = "userPrincipalName".
  2186. [07/10/12 03:56:49.923]:ADTRACE ST: Action: do-if().
  2187. [07/10/12 03:56:49.923]:ADTRACE ST: Evaluating conditions.
  2188. [07/10/12 03:56:49.923]:ADTRACE ST: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  2189. [07/10/12 03:56:49.923]:ADTRACE ST: Performing else actions.
  2190. [07/10/12 03:56:49.923]:ADTRACE ST: Action: do-if().
  2191. [07/10/12 03:56:49.923]:ADTRACE ST: Evaluating conditions.
  2192. [07/10/12 03:56:49.923]:ADTRACE ST: (if-local-variable 'current-node' equal "association") = FALSE.
  2193. [07/10/12 03:56:49.923]:ADTRACE ST: Performing else actions.
  2194. [07/10/12 03:56:49.923]:ADTRACE ST: Action: do-if().
  2195. [07/10/12 03:56:49.923]:ADTRACE ST: Evaluating conditions.
  2196. [07/10/12 03:56:49.923]:ADTRACE ST: Expanded variable reference '$current-node$' to 'userPrincipalName'.
  2197. [07/10/12 03:56:49.923]:ADTRACE ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  2198. [07/10/12 03:56:49.923]:ADTRACE ST: Expanded variable reference '$current-node$' to 'userPrincipalName'.
  2199. [07/10/12 03:56:49.923]:ADTRACE ST: (if-op-attr '$current-node$' available) = FALSE.
  2200. [07/10/12 03:56:49.923]:ADTRACE ST: Performing else actions.
  2201. [07/10/12 03:56:49.923]:ADTRACE ST: Performing actions for local-variable(current-node) = "LDAPDN".
  2202. [07/10/12 03:56:49.923]:ADTRACE ST: Action: do-if().
  2203. [07/10/12 03:56:49.923]:ADTRACE ST: Evaluating conditions.
  2204. [07/10/12 03:56:49.923]:ADTRACE ST: (if-local-variable 'current-node' equal "LDAPDN") = TRUE.
  2205. [07/10/12 03:56:49.923]:ADTRACE ST: Expanded variable reference '$current-node$' to 'LDAPDN'.
  2206. [07/10/12 03:56:49.923]:ADTRACE ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  2207. [07/10/12 03:56:49.923]:ADTRACE ST: (if-src-dn available) = FALSE.
  2208. [07/10/12 03:56:49.923]:ADTRACE ST: Performing else actions.
  2209. [07/10/12 03:56:49.923]:ADTRACE ST: Action: do-if().
  2210. [07/10/12 03:56:49.923]:ADTRACE ST: Evaluating conditions.
  2211. [07/10/12 03:56:49.923]:ADTRACE ST: (if-local-variable 'current-node' equal "association") = FALSE.
  2212. [07/10/12 03:56:49.923]:ADTRACE ST: Performing else actions.
  2213. [07/10/12 03:56:49.923]:ADTRACE ST: Action: do-if().
  2214. [07/10/12 03:56:49.923]:ADTRACE ST: Evaluating conditions.
  2215. [07/10/12 03:56:49.923]:ADTRACE ST: Expanded variable reference '$current-node$' to 'LDAPDN'.
  2216. [07/10/12 03:56:49.923]:ADTRACE ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  2217. [07/10/12 03:56:49.923]:ADTRACE ST: Expanded variable reference '$current-node$' to 'LDAPDN'.
  2218. [07/10/12 03:56:49.939]:ADTRACE ST: (if-op-attr '$current-node$' available) = FALSE.
  2219. [07/10/12 03:56:49.939]:ADTRACE ST: Performing else actions.
  2220. [07/10/12 03:56:49.939]:ADTRACE ST: Performing actions for local-variable(current-node) = "association".
  2221. [07/10/12 03:56:49.939]:ADTRACE ST: Action: do-if().
  2222. [07/10/12 03:56:49.939]:ADTRACE ST: Evaluating conditions.
  2223. [07/10/12 03:56:49.939]:ADTRACE ST: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  2224. [07/10/12 03:56:49.939]:ADTRACE ST: Performing else actions.
  2225. [07/10/12 03:56:49.939]:ADTRACE ST: Action: do-if().
  2226. [07/10/12 03:56:49.939]:ADTRACE ST: Evaluating conditions.
  2227. [07/10/12 03:56:49.939]:ADTRACE ST: (if-local-variable 'current-node' equal "association") = TRUE.
  2228. [07/10/12 03:56:49.939]:ADTRACE ST: Expanded variable reference '$current-node$' to 'association'.
  2229. [07/10/12 03:56:49.939]:ADTRACE ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  2230. [07/10/12 03:56:49.939]:ADTRACE ST: (if-association available) = FALSE.
  2231. [07/10/12 03:56:49.939]:ADTRACE ST: Performing else actions.
  2232. [07/10/12 03:56:49.939]:ADTRACE ST: Action: do-if().
  2233. [07/10/12 03:56:49.939]:ADTRACE ST: Evaluating conditions.
  2234. [07/10/12 03:56:49.939]:ADTRACE ST: Expanded variable reference '$current-node$' to 'association'.
  2235. [07/10/12 03:56:49.939]:ADTRACE ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  2236. [07/10/12 03:56:49.939]:ADTRACE ST: Expanded variable reference '$current-node$' to 'association'.
  2237. [07/10/12 03:56:49.939]:ADTRACE ST: (if-op-attr '$current-node$' available) = FALSE.
  2238. [07/10/12 03:56:49.939]:ADTRACE ST: Performing else actions.
  2239. [07/10/12 03:56:49.939]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - Initialize status properties on published events'.
  2240. [07/10/12 03:56:49.939]:ADTRACE ST: (if-operation match "add|modify|delete|rename|move") = FALSE.
  2241. [07/10/12 03:56:49.939]:ADTRACE ST: Rule rejected.
  2242. [07/10/12 03:56:49.939]:ADTRACE ST: Policy returned:
  2243. [07/10/12 03:56:49.939]:ADTRACE ST:
  2244. <nds dtdversion="1.1" ndsversion="8.7">
  2245. <source>
  2246. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  2247. <contact>Novell, Inc.</contact>
  2248. </source>
  2249. <output>
  2250. <status event-id="0" level="success"/>
  2251. </output>
  2252. </nds>
  2253. [07/10/12 03:56:49.939]:ADTRACE ST: Applying policy: %+C%14CNOVLATRKBASE-itp-WriteAccounts%-C.
  2254. [07/10/12 03:56:49.939]:ADTRACE ST: Applying to status #1.
  2255. [07/10/12 03:56:49.939]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - Initialize Realm Mapping'.
  2256. [07/10/12 03:56:49.939]:ADTRACE ST: (if-global-variable 'drv.acctTrk.enable' equal "true") = TRUE.
  2257. [07/10/12 03:56:49.939]:ADTRACE ST: (if-global-variable 'drv.acctTrk.mode' equal "fanout") = FALSE.
  2258. [07/10/12 03:56:49.939]:ADTRACE ST: Rule rejected.
  2259. [07/10/12 03:56:49.939]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled'.
  2260. [07/10/12 03:56:49.939]:ADTRACE ST: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  2261. [07/10/12 03:56:49.939]:ADTRACE ST: Rule rejected.
  2262. [07/10/12 03:56:49.939]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - query DirXML-Accounts Attribute'.
  2263. [07/10/12 03:56:49.939]:ADTRACE ST: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  2264. [07/10/12 03:56:49.939]:ADTRACE ST: Rule rejected.
  2265. [07/10/12 03:56:49.939]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - remove Dirxml-Account values on regular delete operation'.
  2266. [07/10/12 03:56:49.939]:ADTRACE ST: (if-operation match "delete|remove-association") = FALSE.
  2267. [07/10/12 03:56:49.939]:ADTRACE ST: (if-operation equal "status") = TRUE.
  2268. [07/10/12 03:56:49.939]:ADTRACE ST: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  2269. [07/10/12 03:56:49.939]:ADTRACE ST: Rule rejected.
  2270. [07/10/12 03:56:49.939]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - update DirXMLAccounts attribute on regular operations'.
  2271. [07/10/12 03:56:49.939]:ADTRACE ST: (if-op-property 'AccountTracking-Operation' not-available) = TRUE.
  2272. [07/10/12 03:56:49.939]:ADTRACE ST: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  2273. [07/10/12 03:56:49.939]:ADTRACE ST: (if-operation equal "status") = TRUE.
  2274. [07/10/12 03:56:49.954]:ADTRACE ST: (if-xpath true "./@level='success' or ./@level='warning'") = TRUE.
  2275. [07/10/12 03:56:49.954]:ADTRACE ST: (if-op-property 'AccountTracking-Operation' available) = FALSE.
  2276. [07/10/12 03:56:49.954]:ADTRACE ST: Rule rejected.
  2277. [07/10/12 03:56:49.954]:ADTRACE ST: Evaluating selection criteria for rule 'AccountTracking - update DirXMLAccounts attribute on mapped operations'.
  2278. [07/10/12 03:56:49.954]:ADTRACE ST: (if-xpath true "operation-data/account-tracking-operation") = FALSE.
  2279. [07/10/12 03:56:49.954]:ADTRACE ST: (if-xpath true "operation-data/account-tracking-operation") = FALSE.
  2280. [07/10/12 03:56:49.954]:ADTRACE ST: Rule rejected.
  2281. [07/10/12 03:56:49.954]:ADTRACE ST: Policy returned:
  2282. [07/10/12 03:56:49.954]:ADTRACE ST:
  2283. <nds dtdversion="1.1" ndsversion="8.7">
  2284. <source>
  2285. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  2286. <contact>Novell, Inc.</contact>
  2287. </source>
  2288. <output>
  2289. <status event-id="0" level="success"/>
  2290. </output>
  2291. </nds>
  2292. [07/10/12 03:56:49.954]:ADTRACE ST: Applying policy: %+C%14CNOVLADDCFG-itp-SubscriberUserAdd%-C.
  2293. [07/10/12 03:56:49.954]:ADTRACE ST: Applying to status #1.
  2294. [07/10/12 03:56:49.954]:ADTRACE ST: Evaluating selection criteria for rule 'Populate DirXML-ADContext on initial user add'.
  2295. [07/10/12 03:56:49.954]:ADTRACE ST: (if-operation equal "add-association") = FALSE.
  2296. [07/10/12 03:56:49.954]:ADTRACE ST: Rule rejected.
  2297. [07/10/12 03:56:49.954]:ADTRACE ST: Policy returned:
  2298. [07/10/12 03:56:49.954]:ADTRACE ST:
  2299. <nds dtdversion="1.1" ndsversion="8.7">
  2300. <source>
  2301. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  2302. <contact>Novell, Inc.</contact>
  2303. </source>
  2304. <output>
  2305. <status event-id="0" level="success"/>
  2306. </output>
  2307. </nds>
  2308. [07/10/12 03:56:49.954]:ADTRACE ST: Applying policy: %+C%14CNOVLADDCFG-itp-FormatConversions%-C.
  2309. [07/10/12 03:56:49.954]:ADTRACE ST: Applying to status #1.
  2310. [07/10/12 03:56:49.954]:ADTRACE ST: Evaluating selection criteria for rule 'streetAddress: Convert CR-LF to LF'.
  2311. [07/10/12 03:56:49.954]:ADTRACE ST: Rule selected.
  2312. [07/10/12 03:56:49.954]:ADTRACE ST: Applying rule 'streetAddress: Convert CR-LF to LF'.
  2313. [07/10/12 03:56:49.954]:ADTRACE ST: Action: do-reformat-op-attr("streetAddress",token-replace-all("\r\n","\r",token-local-variable("current-value"))).
  2314. [07/10/12 03:56:49.954]:ADTRACE ST: Evaluating selection criteria for rule 'logonHours: Convert to Login Allowed Time Map form'.
  2315. [07/10/12 03:56:49.954]:ADTRACE ST: Rule selected.
  2316. [07/10/12 03:56:49.954]:ADTRACE ST: Applying rule 'logonHours: Convert to Login Allowed Time Map form'.
  2317. [07/10/12 03:56:49.954]:ADTRACE ST: Action: do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2eDir($current-value)")).
  2318. [07/10/12 03:56:49.954]:ADTRACE ST: Evaluating selection criteria for rule 'accountExpires: Convert to Identity Vault time format'.
  2319. [07/10/12 03:56:49.954]:ADTRACE ST: Rule selected.
  2320. [07/10/12 03:56:49.954]:ADTRACE ST: Applying rule 'accountExpires: Convert to Identity Vault time format'.
  2321. [07/10/12 03:56:49.954]:ADTRACE ST: Action: do-reformat-op-attr("accountExpires",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
  2322. [07/10/12 03:56:49.954]:ADTRACE ST: Evaluating selection criteria for rule 'lockoutTime: Convert to Identity Vault time format'.
  2323. [07/10/12 03:56:49.954]:ADTRACE ST: Rule selected.
  2324. [07/10/12 03:56:49.954]:ADTRACE ST: Applying rule 'lockoutTime: Convert to Identity Vault time format'.
  2325. [07/10/12 03:56:49.954]:ADTRACE ST: Action: do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
  2326. [07/10/12 03:56:49.954]:ADTRACE ST: Policy returned:
  2327. [07/10/12 03:56:49.954]:ADTRACE ST:
  2328. <nds dtdversion="1.1" ndsversion="8.7">
  2329. <source>
  2330. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  2331. <contact>Novell, Inc.</contact>
  2332. </source>
  2333. <output>
  2334. <status event-id="0" level="success"/>
  2335. </output>
  2336. </nds>
  2337. [07/10/12 03:56:49.954]:ADTRACE ST: Applying policy: %+C%14CNOVLDATACOLL-itp-DataCollectionQuerySupport%-C.
  2338. [07/10/12 03:56:49.954]:ADTRACE ST: Applying to status #1.
  2339. [07/10/12 03:56:49.954]:ADTRACE ST: Evaluating selection criteria for rule 'Rename @association-ref to @association and change @type from "dn" to "{dn}"'.
  2340. [07/10/12 03:56:49.970]:ADTRACE ST: (if-operation equal "instance") = FALSE.
  2341. [07/10/12 03:56:49.970]:ADTRACE ST: Rule rejected.
  2342. [07/10/12 03:56:49.970]:ADTRACE ST: Policy returned:
  2343. [07/10/12 03:56:49.970]:ADTRACE ST:
  2344. <nds dtdversion="1.1" ndsversion="8.7">
  2345. <source>
  2346. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  2347. <contact>Novell, Inc.</contact>
  2348. </source>
  2349. <output>
  2350. <status event-id="0" level="success"/>
  2351. </output>
  2352. </nds>
  2353. [07/10/12 03:56:49.970]:ADTRACE ST: Applying policy: %+C%14CNOVLADENTEX-itp-EntitlementsImpl%-C.
  2354. [07/10/12 03:56:49.970]:ADTRACE ST: Applying to status #1.
  2355. [07/10/12 03:56:49.970]:ADTRACE ST: Evaluating selection criteria for rule 'Intercept ADDomain (tagged identity query) query response'.
  2356. [07/10/12 03:56:49.970]:ADTRACE ST: (if-operation equal "instance") = FALSE.
  2357. [07/10/12 03:56:49.970]:ADTRACE ST: Rule rejected.
  2358. [07/10/12 03:56:49.970]:ADTRACE ST: Evaluating selection criteria for rule 'Intercept ADDomain (tagged identity query) query status'.
  2359. [07/10/12 03:56:49.970]:ADTRACE ST: (if-xpath true "../status[@event-id='query-driver-ident']/operation-data/@UserAccountEntitlementQuery") = FALSE.
  2360. [07/10/12 03:56:49.970]:ADTRACE ST: Rule rejected.
  2361. [07/10/12 03:56:49.970]:ADTRACE ST: Evaluating selection criteria for rule 'Check target of add-association for group membership entitlements'.
  2362. [07/10/12 03:56:49.970]:ADTRACE ST: (if-global-variable 'drv.entitlement.Group' equal "true") = TRUE.
  2363. [07/10/12 03:56:49.970]:ADTRACE ST: (if-operation equal "add-association") = FALSE.
  2364. [07/10/12 03:56:49.970]:ADTRACE ST: Rule rejected.
  2365. [07/10/12 03:56:49.970]:ADTRACE ST: Evaluating selection criteria for rule 'Check target of add-association for Exchange mailbox entitlements'.
  2366. [07/10/12 03:56:49.970]:ADTRACE ST: (if-global-variable 'drv.exchMailboxMethod' equal "entitlement") = FALSE.
  2367. [07/10/12 03:56:49.970]:ADTRACE ST: Rule rejected.
  2368. [07/10/12 03:56:49.970]:ADTRACE ST: Policy returned:
  2369. [07/10/12 03:56:49.970]:ADTRACE ST:
  2370. <nds dtdversion="1.1" ndsversion="8.7">
  2371. <source>
  2372. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  2373. <contact>Novell, Inc.</contact>
  2374. </source>
  2375. <output>
  2376. <status event-id="0" level="success"/>
  2377. </output>
  2378. </nds>
  2379. [07/10/12 03:56:49.970]:ADTRACE ST: Applying policy: %+C%14CNOVLPWDSYNC-itp-EmailOnFailedPwdSub%-C.
  2380. [07/10/12 03:56:49.970]:ADTRACE ST: Applying to status #1.
  2381. [07/10/12 03:56:49.970]:ADTRACE ST: Evaluating selection criteria for rule 'Send e-mail on a failure when subscribing to passwords'.
  2382. [07/10/12 03:56:49.970]:ADTRACE ST: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  2383. [07/10/12 03:56:49.970]:ADTRACE ST: (if-operation equal "status") = TRUE.
  2384. [07/10/12 03:56:49.970]:ADTRACE ST: (if-xpath true "self::status[@level != 'success'][text() != '']/operation-data/password-subscribe-status/association[text() != '']") = FALSE.
  2385. [07/10/12 03:56:49.970]:ADTRACE ST: Rule rejected.
  2386. [07/10/12 03:56:49.970]:ADTRACE ST: Evaluating selection criteria for rule 'Send e-mail on failure to reset connected system password using the Identity Vault password'.
  2387. [07/10/12 03:56:49.970]:ADTRACE ST: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  2388. [07/10/12 03:56:49.970]:ADTRACE ST: (if-operation equal "status") = TRUE.
  2389. [07/10/12 03:56:49.986]:ADTRACE ST: (if-xpath true "self::status[@level != 'success']/operation-data/password-reset-status") = FALSE.
  2390. [07/10/12 03:56:49.986]:ADTRACE ST: Rule rejected.
  2391. [07/10/12 03:56:49.986]:ADTRACE ST: Policy returned:
  2392. [07/10/12 03:56:49.986]:ADTRACE ST:
  2393. <nds dtdversion="1.1" ndsversion="8.7">
  2394. <source>
  2395. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  2396. <contact>Novell, Inc.</contact>
  2397. </source>
  2398. <output>
  2399. <status event-id="0" level="success"/>
  2400. </output>
  2401. </nds>
  2402. [07/10/12 03:56:49.986]:ADTRACE ST: Applying schema mapping policies to input.
  2403. [07/10/12 03:56:49.986]:ADTRACE ST: Applying policy: %+C%14CNOVLDATACOLL-smp-SkipSchemaMapping%-C.
  2404. [07/10/12 03:56:49.986]:ADTRACE ST: Applying to status #1.
  2405. [07/10/12 03:56:49.986]:ADTRACE ST: Evaluating selection criteria for rule 'skip'.
  2406. [07/10/12 03:56:49.986]:ADTRACE ST: (if-operation equal "instance") = FALSE.
  2407. [07/10/12 03:56:49.986]:ADTRACE ST: Rule rejected.
  2408. [07/10/12 03:56:49.986]:ADTRACE ST: Evaluating selection criteria for rule 'restore'.
  2409. [07/10/12 03:56:49.986]:ADTRACE ST: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  2410. [07/10/12 03:56:49.986]:ADTRACE ST: Rule rejected.
  2411. [07/10/12 03:56:49.986]:ADTRACE ST: Policy returned:
  2412. [07/10/12 03:56:49.986]:ADTRACE ST:
  2413. <nds dtdversion="1.1" ndsversion="8.7">
  2414. <source>
  2415. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  2416. <contact>Novell, Inc.</contact>
  2417. </source>
  2418. <output>
  2419. <status event-id="0" level="success"/>
  2420. </output>
  2421. </nds>
  2422. [07/10/12 03:56:49.986]:ADTRACE ST: Applying policy: %+C%14CNOVLADDCFG-smp%-C.
  2423. [07/10/12 03:56:49.986]:ADTRACE ST: Applying policy: %+C%14CNOVLDATACOLL-smp-SkipSchemaMapping%-C.
  2424. [07/10/12 03:56:49.986]:ADTRACE ST: Applying to status #1.
  2425. [07/10/12 03:56:49.986]:ADTRACE ST: Evaluating selection criteria for rule 'skip'.
  2426. [07/10/12 03:56:49.986]:ADTRACE ST: (if-operation equal "instance") = FALSE.
  2427. [07/10/12 03:56:49.986]:ADTRACE ST: Rule rejected.
  2428. [07/10/12 03:56:49.986]:ADTRACE ST: Evaluating selection criteria for rule 'restore'.
  2429. [07/10/12 03:56:49.986]:ADTRACE ST: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  2430. [07/10/12 03:56:49.986]:ADTRACE ST: Rule rejected.
  2431. [07/10/12 03:56:49.986]:ADTRACE ST: Policy returned:
  2432. [07/10/12 03:56:49.986]:ADTRACE ST:
  2433. <nds dtdversion="1.1" ndsversion="8.7">
  2434. <source>
  2435. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  2436. <contact>Novell, Inc.</contact>
  2437. </source>
  2438. <output>
  2439. <status event-id="0" level="success"/>
  2440. </output>
  2441. </nds>
  2442. [07/10/12 03:56:49.986]:ADTRACE ST: Resolving association references.
  2443. [07/10/12 03:56:49.986]:ADTRACE ST: Query from policy result
  2444. [07/10/12 03:56:49.986]:ADTRACE ST:
  2445. <nds dtdversion="1.1" ndsversion="8.7">
  2446. <source>
  2447. <product asn1id="" build="20110211_120000" instance="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver" version="3.5.14">AD</product>
  2448. <contact>Novell, Inc.</contact>
  2449. </source>
  2450. <output>
  2451. <status event-id="0" level="success"/>
  2452. </output>
  2453. </nds>
  2454. [07/10/12 03:56:49.986]:ADTRACE ST: No matches found.
  2455. [07/10/12 03:56:49.986]:ADTRACE ST: Direct command from policy
  2456. [07/10/12 03:56:49.986]:ADTRACE ST:
  2457. <nds dtdversion="4.0" ndsversion="8.x">
  2458. <source>
  2459. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  2460. <contact>Novell, Inc.</contact>
  2461. </source>
  2462. <input>
  2463. <modify class-name="User" dest-dn="\xxxxxIDM\xxxxx\data\users\testuser1" dest-entry-id="34037" event-id="WINIDM-NDS#20120710105648#1#1:32cdb17f-3b3d-4aab-93f5-f1ae52b7e86c">
  2464. <modify-attr attr-name="Full Name">
  2465. <remove-all-values/>
  2466. <add-value>
  2467. <value>test user1</value>
  2468. </add-value>
  2469. </modify-attr>
  2470. </modify>
  2471. </input>
  2472. </nds>
  2473. [07/10/12 03:56:49.986]:ADTRACE ST: Pumping XDS to eDirectory.
  2474. [07/10/12 03:56:49.986]:ADTRACE ST: Performing operation modify for \xxxxxIDM\xxxxx\data\users\testuser1.
  2475. [07/10/12 03:56:49.986]:ADTRACE ST: --JCLNT-- \xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver : Duplicating : context = 979763278, tempContext = 979763260
  2476. [07/10/12 03:56:49.986]:ADTRACE ST: --JCLNT-- \xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver : Calling free on tempContext = 979763260
  2477. [07/10/12 03:56:50.220]:ADTRACE ST: Processing returned document.
  2478. [07/10/12 03:56:50.220]:ADTRACE ST: Processing operation <status> for .
  2479. [07/10/12 03:56:50.220]:ADTRACE ST:
  2480. DirXML Log Event -------------------
  2481. Driver: \xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver
  2482. Channel: Subscriber
  2483. Object: \xxxxxIDM\xxxxx\data\users\testuser1
  2484. Status: Error
  2485. Message: Code(-9010) An exception occurred: novell.jclient.JCException: modifyEntry -672 ERR_NO_ACCESS
  2486. [07/10/12 03:56:50.454]:ADTRACE ST: Direct command from policy result
  2487. [07/10/12 03:56:50.454]:ADTRACE ST:
  2488. <nds dtdversion="4.0" ndsversion="8.x">
  2489. <source>
  2490. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  2491. <contact>Novell, Inc.</contact>
  2492. </source>
  2493. <output>
  2494. <status event-id="WINIDM-NDS#20120710105648#1#1:32cdb17f-3b3d-4aab-93f5-f1ae52b7e86c" level="error">Code(-9010) An exception occurred: novell.jclient.JCException: modifyEntry -672 ERR_NO_ACCESS<application>DirXML</application>
  2495. <module>Active Directory Driver</module>
  2496. <object-dn>\xxxxxIDM\xxxxx\data\users\testuser1</object-dn>
  2497. <component>Subscriber</component>
  2498. </status>
  2499. </output>
  2500. </nds>
  2501. [07/10/12 03:56:50.454]:ADTRACE ST:Policy returned:
  2502. [07/10/12 03:56:50.454]:ADTRACE ST:
  2503. <nds dtdversion="4.0" ndsversion="8.x">
  2504. <source>
  2505. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  2506. <contact>Novell, Inc.</contact>
  2507. </source>
  2508. <input>
  2509. <add cached-time="20120710105648.783Z" class-name="User" event-id="WINIDM-NDS#20120710105648#1#1:32cdb17f-3b3d-4aab-93f5-f1ae52b7e86c" qualified-src-dn="O=xxxxx\OU=data\OU=users\CN=testuser1" src-dn="\xxxxxIDM\xxxxx\data\users\testuser1" src-entry-id="34037" timestamp="0#0">
  2510. <add-attr attr-name="Given Name">
  2511. <value timestamp="1341840499#5" type="string">test</value>
  2512. </add-attr>
  2513. <add-attr attr-name="Surname">
  2514. <value timestamp="1341840499#4" type="string">user1</value>
  2515. </add-attr>
  2516. <add-attr attr-name="Full Name">
  2517. <value>test user1</value>
  2518. </add-attr>
  2519. <operation-data attempt-to-match="false" unmatched-src-dn="CN=testuser1"/>
  2520. </add>
  2521. </input>
  2522. </nds>
  2523. [07/10/12 03:56:50.470]:ADTRACE ST:No match found.
  2524. [07/10/12 03:56:50.470]:ADTRACE ST:Applying object creation policies.
  2525. [07/10/12 03:56:50.470]:ADTRACE ST:Applying policy: %+C%14CNOVLADENTEX-sub-cp-EntitlementsImpl%-C.
  2526. [07/10/12 03:56:50.470]:ADTRACE ST: Applying to add #1.
  2527. [07/10/12 03:56:50.470]:ADTRACE ST: Evaluating selection criteria for rule 'UserAccount entitlement: Veto account creation when entitlement not granted'.
  2528. [07/10/12 03:56:50.470]:ADTRACE ST: (if-global-variable 'drv.entitlement.UserAccount' equal "true") = TRUE.
  2529. [07/10/12 03:56:50.470]:ADTRACE ST: (if-class-name equal "User") = TRUE.
  2530. [07/10/12 03:56:50.470]:ADTRACE ST: Query from policy
  2531. [07/10/12 03:56:50.470]:ADTRACE ST:
  2532. <nds dtdversion="4.0" ndsversion="8.x">
  2533. <source>
  2534. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  2535. <contact>Novell, Inc.</contact>
  2536. </source>
  2537. <input>
  2538. <query class-name="User" dest-dn="\xxxxxIDM\xxxxx\data\users\testuser1" dest-entry-id="34037" scope="entry">
  2539. <read-attr attr-name="DirXML-EntitlementRef"/>
  2540. </query>
  2541. </input>
  2542. </nds>
  2543. [07/10/12 03:56:50.470]:ADTRACE ST: Pumping XDS to eDirectory.
  2544. [07/10/12 03:56:50.470]:ADTRACE ST: Performing operation query for \xxxxxIDM\xxxxx\data\users\testuser1.
  2545. [07/10/12 03:56:50.470]:ADTRACE ST: --JCLNT-- \xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver : Duplicating : context = 979763259, tempContext = 979763260
  2546. [07/10/12 03:56:50.470]:ADTRACE ST: --JCLNT-- \xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver : Calling free on tempContext = 979763260
  2547. [07/10/12 03:56:50.470]:ADTRACE ST: Query from policy result
  2548. [07/10/12 03:56:50.470]:ADTRACE ST:
  2549. <nds dtdversion="4.0" ndsversion="8.x">
  2550. <source>
  2551. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  2552. <contact>Novell, Inc.</contact>
  2553. </source>
  2554. <output>
  2555. <instance class-name="User" qualified-src-dn="O=xxxxx\OU=data\OU=users\CN=testuser1" src-dn="\xxxxxIDM\xxxxx\data\users\testuser1" src-entry-id="34037">
  2556. <association state="migrate"></association>
  2557. </instance>
  2558. <status level="success"></status>
  2559. </output>
  2560. </nds>
  2561. [07/10/12 03:56:50.470]:ADTRACE ST: (if-entitlement 'UserAccount' not-available) = TRUE.
  2562. [07/10/12 03:56:50.470]:ADTRACE ST: Rule selected.
  2563. [07/10/12 03:56:50.470]:ADTRACE ST: Applying rule 'UserAccount entitlement: Veto account creation when entitlement not granted'.
  2564. [07/10/12 03:56:50.470]:ADTRACE ST: Action: do-add-src-object(class-name="User",arg-dn("OU=users,OU=NOVELLUSER,DC=idm,DC=com")).
  2565. [07/10/12 03:56:50.470]:ADTRACE ST: arg-dn("OU=users,OU=NOVELLUSER,DC=idm,DC=com")
  2566. [07/10/12 03:56:50.470]:ADTRACE ST: token-text("OU=users,OU=NOVELLUSER,DC=idm,DC=com")
  2567. [07/10/12 03:56:50.470]:ADTRACE ST: Arg Value: "OU=users,OU=NOVELLUSER,DC=idm,DC=com".
  2568. [07/10/12 03:56:50.486]:ADTRACE ST: Evaluating selection criteria for rule 'Prepare to check group entitlements after add'.
  2569. [07/10/12 03:56:50.486]:ADTRACE ST: (if-global-variable 'drv.entitlement.Group' equal "true") = TRUE.
  2570. [07/10/12 03:56:50.486]:ADTRACE ST: (if-class-name equal "User") = TRUE.
  2571. [07/10/12 03:56:50.486]:ADTRACE ST: (if-entitlement 'Group' available) = FALSE.
  2572. [07/10/12 03:56:50.486]:ADTRACE ST: Rule rejected.
  2573. [07/10/12 03:56:50.486]:ADTRACE ST: Evaluating selection criteria for rule 'Prepare to check Exchange entitlements after the add'.
  2574. [07/10/12 03:56:50.486]:ADTRACE ST: (if-global-variable 'drv.exchMailboxMethod' equal "entitlement") = FALSE.
  2575. [07/10/12 03:56:50.486]:ADTRACE ST: Rule rejected.
  2576. [07/10/12 03:56:50.486]:ADTRACE ST: Direct command from policy
  2577. [07/10/12 03:56:50.486]:ADTRACE ST:
  2578. <nds dtdversion="4.0" ndsversion="8.x">
  2579. <source>
  2580. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  2581. <contact>Novell, Inc.</contact>
  2582. </source>
  2583. <input>
  2584. <add class-name="User" dest-dn="OU=users,OU=NOVELLUSER,DC=idm,DC=com" event-id="WINIDM-NDS#20120710105648#1#1:32cdb17f-3b3d-4aab-93f5-f1ae52b7e86c"/>
  2585. </input>
  2586. </nds>
  2587. [07/10/12 03:56:50.486]:ADTRACE ST: Pumping XDS to eDirectory.
  2588. [07/10/12 03:56:50.486]:ADTRACE ST: Performing operation add for OU=users,OU=NOVELLUSER,DC=idm,DC=com.
  2589. [07/10/12 03:56:50.486]:ADTRACE ST: --JCLNT-- \xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver : Duplicating : context = 979763278, tempContext = 979763260
  2590. [07/10/12 03:56:50.486]:ADTRACE ST: Adding entry OU=users,OU=NOVELLUSER,DC=idm,DC=com.
  2591. [07/10/12 03:56:50.486]:ADTRACE ST: Creating RDN in context ..
  2592. [07/10/12 03:56:50.486]:ADTRACE ST: --JCLNT-- \xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver : Calling free on tempContext = 979763260
  2593. [07/10/12 03:56:50.720]:ADTRACE ST: Processing returned document.
  2594. [07/10/12 03:56:50.720]:ADTRACE ST: Processing operation <status> for .
  2595. [07/10/12 03:56:50.720]:ADTRACE ST:
  2596. DirXML Log Event -------------------
  2597. Driver: \xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver
  2598. Channel: Subscriber
  2599. Object: \xxxxxIDM\xxxxx\data\users\testuser1
  2600. Status: Error
  2601. Message: Code(-9010) An exception occurred: novell.jclient.JCException: createEntry -672 ERR_NO_ACCESS
  2602. [07/10/12 03:56:50.939]:ADTRACE ST: Direct command from policy result
  2603. [07/10/12 03:56:50.939]:ADTRACE ST:
  2604. <nds dtdversion="4.0" ndsversion="8.x">
  2605. <source>
  2606. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  2607. <contact>Novell, Inc.</contact>
  2608. </source>
  2609. <output>
  2610. <status event-id="WINIDM-NDS#20120710105648#1#1:32cdb17f-3b3d-4aab-93f5-f1ae52b7e86c" level="error">Code(-9010) An exception occurred: novell.jclient.JCException: createEntry -672 ERR_NO_ACCESS<application>DirXML</application>
  2611. <module>Active Directory Driver</module>
  2612. <object-dn>\xxxxxIDM\xxxxx\data\users\testuser1</object-dn>
  2613. <component>Subscriber</component>
  2614. </status>
  2615. </output>
  2616. </nds>
  2617. [07/10/12 03:56:50.939]:ADTRACE ST:Policy returned:
  2618. [07/10/12 03:56:50.939]:ADTRACE ST:
  2619. <nds dtdversion="4.0" ndsversion="8.x">
  2620. <source>
  2621. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  2622. <contact>Novell, Inc.</contact>
  2623. </source>
  2624. <input>
  2625. <add cached-time="20120710105648.783Z" class-name="User" event-id="WINIDM-NDS#20120710105648#1#1:32cdb17f-3b3d-4aab-93f5-f1ae52b7e86c" qualified-src-dn="O=xxxxx\OU=data\OU=users\CN=testuser1" src-dn="\xxxxxIDM\xxxxx\data\users\testuser1" src-entry-id="34037" timestamp="0#0">
  2626. <add-attr attr-name="Given Name">
  2627. <value timestamp="1341840499#5" type="string">test</value>
  2628. </add-attr>
  2629. <add-attr attr-name="Surname">
  2630. <value timestamp="1341840499#4" type="string">user1</value>
  2631. </add-attr>
  2632. <add-attr attr-name="Full Name">
  2633. <value>test user1</value>
  2634. </add-attr>
  2635. <operation-data attempt-to-match="false" unmatched-src-dn="CN=testuser1"/>
  2636. </add>
  2637. </input>
  2638. </nds>
  2639. [07/10/12 03:56:50.939]:ADTRACE ST:Applying policy: %+C%14CNOVLADDCFG-sub-cp-Users%-C.
  2640. [07/10/12 03:56:50.939]:ADTRACE ST: Applying to add #1.
  2641. [07/10/12 03:56:50.939]:ADTRACE ST: Evaluating selection criteria for rule 'Break if not a User'.
  2642. [07/10/12 03:56:50.954]:ADTRACE ST: (if-class-name not-equal "User") = FALSE.
  2643. [07/10/12 03:56:50.954]:ADTRACE ST: Rule rejected.
  2644. [07/10/12 03:56:50.954]:ADTRACE ST: Evaluating selection criteria for rule 'Veto if nspmDistributionPassword is not available'.
  2645. [07/10/12 03:56:50.954]:ADTRACE ST: Rule selected.
  2646. [07/10/12 03:56:50.954]:ADTRACE ST: Applying rule 'Veto if nspmDistributionPassword is not available'.
  2647. [07/10/12 03:56:50.954]:ADTRACE ST: Action: do-veto-if-op-attr-not-available("nspmDistributionPassword").
  2648. [07/10/12 03:56:50.954]:ADTRACE ST:Policy returned:
  2649. [07/10/12 03:56:50.954]:ADTRACE ST:
  2650. <nds dtdversion="4.0" ndsversion="8.x">
  2651. <source>
  2652. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  2653. <contact>Novell, Inc.</contact>
  2654. </source>
  2655. <input/>
  2656. </nds>
  2657. [07/10/12 03:56:50.954]:ADTRACE ST:Applying policy: %+C%14CNOVLADDCFG-sub-cp-Groups%-C.
  2658. [07/10/12 03:56:50.954]:ADTRACE ST:Policy returned:
  2659. [07/10/12 03:56:50.954]:ADTRACE ST:
  2660. <nds dtdversion="4.0" ndsversion="8.x">
  2661. <source>
  2662. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  2663. <contact>Novell, Inc.</contact>
  2664. </source>
  2665. <input/>
  2666. </nds>
  2667. [07/10/12 03:56:50.954]:ADTRACE ST:Applying policy: %+C%14CNOVLADENTEX-sub-cp-ExchMailboxPolicy%-C.
  2668. [07/10/12 03:56:50.954]:ADTRACE ST:Policy returned:
  2669. [07/10/12 03:56:50.954]:ADTRACE ST:
  2670. <nds dtdversion="4.0" ndsversion="8.x">
  2671. <source>
  2672. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  2673. <contact>Novell, Inc.</contact>
  2674. </source>
  2675. <input/>
  2676. </nds>
  2677. [07/10/12 03:56:50.954]:ADTRACE ST:Processing returned document.
  2678. [07/10/12 03:56:50.954]:ADTRACE ST:Processing operation <status> for .
  2679. [07/10/12 03:56:50.954]:ADTRACE ST:
  2680. DirXML Log Event -------------------
  2681. Driver: \xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver
  2682. Channel: Subscriber
  2683. Object: \xxxxxIDM\xxxxx\data\users\testuser1
  2684. Status: Warning
  2685. Message: Code(-8017) Operation vetoed by object creation policy.
  2686. [07/10/12 03:56:51.204]:ADTRACE ST:End transaction.
  2687. [07/10/12 03:57:08.642]:ADTRACE :Remote Interface Driver: Received.
  2688. [07/10/12 03:57:08.642]:ADTRACE :
  2689. <nds dtdversion="2.2">
  2690. <source>
  2691. <product version="4.0.1.0">DirXML</product>
  2692. <contact>Novell, Inc.</contact>
  2693. </source>
  2694. <input>
  2695. <status level="success" type="heartbeat"/>
  2696. </input>
  2697. </nds>
  2698. [07/10/12 03:57:08.642]:ADTRACE :Remote Interface Driver: Received document for publisher channel
  2699. [07/10/12 03:57:08.642]:ADTRACE :Remote Interface Driver: Waiting for receive...
  2700. [07/10/12 03:57:08.642]:ADTRACE PT:Receiving DOM document from application.
  2701. [07/10/12 03:57:08.642]:ADTRACE PT:
  2702. <nds dtdversion="2.2">
  2703. <source>
  2704. <product version="4.0.1.0">DirXML</product>
  2705. <contact>Novell, Inc.</contact>
  2706. </source>
  2707. <input>
  2708. <status level="success" type="heartbeat"/>
  2709. </input>
  2710. </nds>
  2711. [07/10/12 03:57:08.642]:ADTRACE PT:Applying input transformation policies.
  2712. [07/10/12 03:57:08.642]:ADTRACE PT:Applying policy: %+C%14CNOVLAUDTENTC-itp-SendEntitlementsEvents%-C.
  2713. [07/10/12 03:57:08.642]:ADTRACE PT: Applying to status #1.
  2714. [07/10/12 03:57:08.642]:ADTRACE PT: Evaluating selection criteria for rule '00031200 - Account Create By Entitlement Grant'.
  2715. [07/10/12 03:57:08.642]:ADTRACE PT: (if-operation equal "status") = TRUE.
  2716. [07/10/12 03:57:08.642]:ADTRACE PT: (if-op-property 'accountAction' equal "accountCreateByEntitlementGrant") = FALSE.
  2717. [07/10/12 03:57:08.642]:ADTRACE PT: Rule rejected.
  2718. [07/10/12 03:57:08.642]:ADTRACE PT: Evaluating selection criteria for rule '00031201 - Account Delete By Entitlement Revoke'.
  2719. [07/10/12 03:57:08.642]:ADTRACE PT: (if-operation equal "status") = TRUE.
  2720. [07/10/12 03:57:08.658]:ADTRACE PT: (if-xpath true "./operation-data/entitlement-impl/@state = '0'") = FALSE.
  2721. [07/10/12 03:57:08.658]:ADTRACE PT: (if-operation equal "status") = TRUE.
  2722. [07/10/12 03:57:08.658]:ADTRACE PT: (if-op-property 'accountAction' equal "accountDeleteByEntitlementRevoke") = FALSE.
  2723. [07/10/12 03:57:08.658]:ADTRACE PT: Rule rejected.
  2724. [07/10/12 03:57:08.658]:ADTRACE PT: Evaluating selection criteria for rule '00031202 - Account Disable By Entitlement Revoke'.
  2725. [07/10/12 03:57:08.658]:ADTRACE PT: (if-operation equal "status") = TRUE.
  2726. [07/10/12 03:57:08.658]:ADTRACE PT: (if-op-property 'accountAction' equal "accountDisableByEntitlementRevoke") = FALSE.
  2727. [07/10/12 03:57:08.658]:ADTRACE PT: Rule rejected.
  2728. [07/10/12 03:57:08.658]:ADTRACE PT: Evaluating selection criteria for rule '00031203 - Account Enable By Entitlement Grant'.
  2729. [07/10/12 03:57:08.658]:ADTRACE PT: (if-operation equal "status") = TRUE.
  2730. [07/10/12 03:57:08.658]:ADTRACE PT: (if-op-property 'accountAction' equal "accountEnableByEntitlementGrant") = FALSE.
  2731. [07/10/12 03:57:08.658]:ADTRACE PT: Rule rejected.
  2732. [07/10/12 03:57:08.658]:ADTRACE PT: Evaluating selection criteria for rule 'Generate Audit Event'.
  2733. [07/10/12 03:57:08.658]:ADTRACE PT: (if-operation equal "status") = TRUE.
  2734. [07/10/12 03:57:08.658]:ADTRACE PT: (if-local-variable 'auditEventID' available) = FALSE.
  2735. [07/10/12 03:57:08.658]:ADTRACE PT: Rule rejected.
  2736. [07/10/12 03:57:08.658]:ADTRACE PT:Policy returned:
  2737. [07/10/12 03:57:08.658]:ADTRACE PT:
  2738. <nds dtdversion="2.2">
  2739. <source>
  2740. <product version="4.0.1.0">DirXML</product>
  2741. <contact>Novell, Inc.</contact>
  2742. </source>
  2743. <input>
  2744. <status level="success" type="heartbeat"/>
  2745. </input>
  2746. </nds>
  2747. [07/10/12 03:57:08.658]:ADTRACE PT:Applying policy: %+C%14CNOVLADENTEX-itp-InitEntitlementConfigurationResource%-C.
  2748. [07/10/12 03:57:08.658]:ADTRACE PT: Applying to status #1.
  2749. [07/10/12 03:57:08.658]:ADTRACE PT: Evaluating selection criteria for rule 'Make sure we only run once and when we're ready'.
  2750. [07/10/12 03:57:08.658]:ADTRACE PT: (if-local-variable 'objectClass' match ".+") = TRUE.
  2751. [07/10/12 03:57:08.658]:ADTRACE PT: (if-local-variable 'entConfigInitialized' equal "true") = TRUE.
  2752. [07/10/12 03:57:08.658]:ADTRACE PT: Rule selected.
  2753. [07/10/12 03:57:08.658]:ADTRACE PT: Applying rule 'Make sure we only run once and when we're ready'.
  2754. [07/10/12 03:57:08.658]:ADTRACE PT: Action: do-break().
  2755. [07/10/12 03:57:08.658]:ADTRACE PT:Policy returned:
  2756. [07/10/12 03:57:08.658]:ADTRACE PT:
  2757. <nds dtdversion="2.2">
  2758. <source>
  2759. <product version="4.0.1.0">DirXML</product>
  2760. <contact>Novell, Inc.</contact>
  2761. </source>
  2762. <input>
  2763. <status level="success" type="heartbeat"/>
  2764. </input>
  2765. </nds>
  2766. [07/10/12 03:57:08.658]:ADTRACE PT:Applying policy: %+C%14CNOVLADMSINFO-itp-InitManagedSystemInfo%-C.
  2767. [07/10/12 03:57:08.658]:ADTRACE PT: Applying to status #1.
  2768. [07/10/12 03:57:08.658]:ADTRACE PT: Evaluating selection criteria for rule 'Make sure we only run once and when we're ready'.
  2769. [07/10/12 03:57:08.658]:ADTRACE PT: (if-local-variable 'objectClass' match ".+") = TRUE.
  2770. [07/10/12 03:57:08.658]:ADTRACE PT: (if-local-variable 'mSysInfoInitialized' equal "true") = TRUE.
  2771. [07/10/12 03:57:08.658]:ADTRACE PT: Rule selected.
  2772. [07/10/12 03:57:08.658]:ADTRACE PT: Applying rule 'Make sure we only run once and when we're ready'.
  2773. [07/10/12 03:57:08.658]:ADTRACE PT: Action: do-break().
  2774. [07/10/12 03:57:08.658]:ADTRACE PT:Policy returned:
  2775. [07/10/12 03:57:08.658]:ADTRACE PT:
  2776. <nds dtdversion="2.2">
  2777. <source>
  2778. <product version="4.0.1.0">DirXML</product>
  2779. <contact>Novell, Inc.</contact>
  2780. </source>
  2781. <input>
  2782. <status level="success" type="heartbeat"/>
  2783. </input>
  2784. </nds>
  2785. [07/10/12 03:57:08.658]:ADTRACE PT:Applying policy: %+C%14CNOVLATRKBASE-itp-Publish%-C.
  2786. [07/10/12 03:57:08.658]:ADTRACE PT: Applying to status #1.
  2787. [07/10/12 03:57:08.658]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled or wrong object class'.
  2788. [07/10/12 03:57:08.658]:ADTRACE PT: Rule selected.
  2789. [07/10/12 03:57:08.658]:ADTRACE PT: Applying rule 'AccountTracking - disregard if disabled or wrong object class'.
  2790. [07/10/12 03:57:08.658]:ADTRACE PT: Action: do-if().
  2791. [07/10/12 03:57:08.658]:ADTRACE PT: Evaluating conditions.
  2792. [07/10/12 03:57:08.658]:ADTRACE PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  2793. [07/10/12 03:57:08.658]:ADTRACE PT: Performing else actions.
  2794. [07/10/12 03:57:08.673]:ADTRACE PT: Action: do-if().
  2795. [07/10/12 03:57:08.673]:ADTRACE PT: Evaluating conditions.
  2796. [07/10/12 03:57:08.673]:ADTRACE PT: (if-class-name available) = FALSE.
  2797. [07/10/12 03:57:08.673]:ADTRACE PT: Performing else actions.
  2798. [07/10/12 03:57:08.673]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - on add-association sync the operation-properties to status operations'.
  2799. [07/10/12 03:57:08.673]:ADTRACE PT: (if-operation equal "add-association") = FALSE.
  2800. [07/10/12 03:57:08.673]:ADTRACE PT: Rule rejected.
  2801. [07/10/12 03:57:08.673]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - Query for destination DN using Association'.
  2802. [07/10/12 03:57:08.673]:ADTRACE PT: (if-operation match "modify|delete|move|rename") = FALSE.
  2803. [07/10/12 03:57:08.673]:ADTRACE PT: Rule rejected.
  2804. [07/10/12 03:57:08.673]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - add interested properties to current doc for future use.'.
  2805. [07/10/12 03:57:08.673]:ADTRACE PT: (if-operation match "add|modify|delete|rename|move|status") = TRUE.
  2806. [07/10/12 03:57:08.673]:ADTRACE PT: Rule selected.
  2807. [07/10/12 03:57:08.673]:ADTRACE PT: Applying rule 'AccountTracking - add interested properties to current doc for future use.'.
  2808. [07/10/12 03:57:08.673]:ADTRACE PT: Action: do-for-each(arg-node-set(token-global-variable("drv.acctTrk.identifiers"))).
  2809. [07/10/12 03:57:08.673]:ADTRACE PT: arg-node-set(token-global-variable("drv.acctTrk.identifiers"))
  2810. [07/10/12 03:57:08.673]:ADTRACE PT: token-global-variable("drv.acctTrk.identifiers")
  2811. [07/10/12 03:57:08.673]:ADTRACE PT: Token Value: {"sAMAccountName","userPrincipalName","LDAPDN","association"}.
  2812. [07/10/12 03:57:08.673]:ADTRACE PT: Arg Value: {"sAMAccountName","userPrincipalName","LDAPDN","association"}.
  2813. [07/10/12 03:57:08.673]:ADTRACE PT: Performing actions for local-variable(current-node) = "sAMAccountName".
  2814. [07/10/12 03:57:08.673]:ADTRACE PT: Action: do-if().
  2815. [07/10/12 03:57:08.673]:ADTRACE PT: Evaluating conditions.
  2816. [07/10/12 03:57:08.673]:ADTRACE PT: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  2817. [07/10/12 03:57:08.673]:ADTRACE PT: Performing else actions.
  2818. [07/10/12 03:57:08.673]:ADTRACE PT: Action: do-if().
  2819. [07/10/12 03:57:08.673]:ADTRACE PT: Evaluating conditions.
  2820. [07/10/12 03:57:08.673]:ADTRACE PT: (if-local-variable 'current-node' equal "association") = FALSE.
  2821. [07/10/12 03:57:08.673]:ADTRACE PT: Performing else actions.
  2822. [07/10/12 03:57:08.673]:ADTRACE PT: Action: do-if().
  2823. [07/10/12 03:57:08.673]:ADTRACE PT: Evaluating conditions.
  2824. [07/10/12 03:57:08.673]:ADTRACE PT: Expanded variable reference '$current-node$' to 'sAMAccountName'.
  2825. [07/10/12 03:57:08.673]:ADTRACE PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  2826. [07/10/12 03:57:08.673]:ADTRACE PT: Expanded variable reference '$current-node$' to 'sAMAccountName'.
  2827. [07/10/12 03:57:08.673]:ADTRACE PT: (if-op-attr '$current-node$' available) = FALSE.
  2828. [07/10/12 03:57:08.673]:ADTRACE PT: Performing else actions.
  2829. [07/10/12 03:57:08.673]:ADTRACE PT: Performing actions for local-variable(current-node) = "userPrincipalName".
  2830. [07/10/12 03:57:08.673]:ADTRACE PT: Action: do-if().
  2831. [07/10/12 03:57:08.673]:ADTRACE PT: Evaluating conditions.
  2832. [07/10/12 03:57:08.673]:ADTRACE PT: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  2833. [07/10/12 03:57:08.673]:ADTRACE PT: Performing else actions.
  2834. [07/10/12 03:57:08.673]:ADTRACE PT: Action: do-if().
  2835. [07/10/12 03:57:08.673]:ADTRACE PT: Evaluating conditions.
  2836. [07/10/12 03:57:08.673]:ADTRACE PT: (if-local-variable 'current-node' equal "association") = FALSE.
  2837. [07/10/12 03:57:08.673]:ADTRACE PT: Performing else actions.
  2838. [07/10/12 03:57:08.673]:ADTRACE PT: Action: do-if().
  2839. [07/10/12 03:57:08.673]:ADTRACE PT: Evaluating conditions.
  2840. [07/10/12 03:57:08.673]:ADTRACE PT: Expanded variable reference '$current-node$' to 'userPrincipalName'.
  2841. [07/10/12 03:57:08.673]:ADTRACE PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  2842. [07/10/12 03:57:08.673]:ADTRACE PT: Expanded variable reference '$current-node$' to 'userPrincipalName'.
  2843. [07/10/12 03:57:08.673]:ADTRACE PT: (if-op-attr '$current-node$' available) = FALSE.
  2844. [07/10/12 03:57:08.673]:ADTRACE PT: Performing else actions.
  2845. [07/10/12 03:57:08.673]:ADTRACE PT: Performing actions for local-variable(current-node) = "LDAPDN".
  2846. [07/10/12 03:57:08.673]:ADTRACE PT: Action: do-if().
  2847. [07/10/12 03:57:08.673]:ADTRACE PT: Evaluating conditions.
  2848. [07/10/12 03:57:08.689]:ADTRACE PT: (if-local-variable 'current-node' equal "LDAPDN") = TRUE.
  2849. [07/10/12 03:57:08.689]:ADTRACE PT: Expanded variable reference '$current-node$' to 'LDAPDN'.
  2850. [07/10/12 03:57:08.689]:ADTRACE PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  2851. [07/10/12 03:57:08.689]:ADTRACE PT: (if-src-dn available) = FALSE.
  2852. [07/10/12 03:57:08.689]:ADTRACE PT: Performing else actions.
  2853. [07/10/12 03:57:08.689]:ADTRACE PT: Action: do-if().
  2854. [07/10/12 03:57:08.689]:ADTRACE PT: Evaluating conditions.
  2855. [07/10/12 03:57:08.689]:ADTRACE PT: (if-local-variable 'current-node' equal "association") = FALSE.
  2856. [07/10/12 03:57:08.689]:ADTRACE PT: Performing else actions.
  2857. [07/10/12 03:57:08.689]:ADTRACE PT: Action: do-if().
  2858. [07/10/12 03:57:08.689]:ADTRACE PT: Evaluating conditions.
  2859. [07/10/12 03:57:08.689]:ADTRACE PT: Expanded variable reference '$current-node$' to 'LDAPDN'.
  2860. [07/10/12 03:57:08.689]:ADTRACE PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  2861. [07/10/12 03:57:08.689]:ADTRACE PT: Expanded variable reference '$current-node$' to 'LDAPDN'.
  2862. [07/10/12 03:57:08.689]:ADTRACE PT: (if-op-attr '$current-node$' available) = FALSE.
  2863. [07/10/12 03:57:08.689]:ADTRACE PT: Performing else actions.
  2864. [07/10/12 03:57:08.689]:ADTRACE PT: Performing actions for local-variable(current-node) = "association".
  2865. [07/10/12 03:57:08.689]:ADTRACE PT: Action: do-if().
  2866. [07/10/12 03:57:08.689]:ADTRACE PT: Evaluating conditions.
  2867. [07/10/12 03:57:08.689]:ADTRACE PT: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  2868. [07/10/12 03:57:08.689]:ADTRACE PT: Performing else actions.
  2869. [07/10/12 03:57:08.689]:ADTRACE PT: Action: do-if().
  2870. [07/10/12 03:57:08.689]:ADTRACE PT: Evaluating conditions.
  2871. [07/10/12 03:57:08.689]:ADTRACE PT: (if-local-variable 'current-node' equal "association") = TRUE.
  2872. [07/10/12 03:57:08.689]:ADTRACE PT: Expanded variable reference '$current-node$' to 'association'.
  2873. [07/10/12 03:57:08.689]:ADTRACE PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  2874. [07/10/12 03:57:08.689]:ADTRACE PT: (if-association available) = FALSE.
  2875. [07/10/12 03:57:08.689]:ADTRACE PT: Performing else actions.
  2876. [07/10/12 03:57:08.689]:ADTRACE PT: Action: do-if().
  2877. [07/10/12 03:57:08.689]:ADTRACE PT: Evaluating conditions.
  2878. [07/10/12 03:57:08.689]:ADTRACE PT: Expanded variable reference '$current-node$' to 'association'.
  2879. [07/10/12 03:57:08.689]:ADTRACE PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  2880. [07/10/12 03:57:08.689]:ADTRACE PT: Expanded variable reference '$current-node$' to 'association'.
  2881. [07/10/12 03:57:08.689]:ADTRACE PT: (if-op-attr '$current-node$' available) = FALSE.
  2882. [07/10/12 03:57:08.689]:ADTRACE PT: Performing else actions.
  2883. [07/10/12 03:57:08.689]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - Initialize status properties on published events'.
  2884. [07/10/12 03:57:08.689]:ADTRACE PT: (if-operation match "add|modify|delete|rename|move") = FALSE.
  2885. [07/10/12 03:57:08.689]:ADTRACE PT: Rule rejected.
  2886. [07/10/12 03:57:08.689]:ADTRACE PT:Policy returned:
  2887. [07/10/12 03:57:08.689]:ADTRACE PT:
  2888. <nds dtdversion="2.2">
  2889. <source>
  2890. <product version="4.0.1.0">DirXML</product>
  2891. <contact>Novell, Inc.</contact>
  2892. </source>
  2893. <input>
  2894. <status level="success" type="heartbeat"/>
  2895. </input>
  2896. </nds>
  2897. [07/10/12 03:57:08.689]:ADTRACE PT:Applying policy: %+C%14CNOVLATRKBASE-itp-WriteAccounts%-C.
  2898. [07/10/12 03:57:08.689]:ADTRACE PT: Applying to status #1.
  2899. [07/10/12 03:57:08.689]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - Initialize Realm Mapping'.
  2900. [07/10/12 03:57:08.689]:ADTRACE PT: (if-global-variable 'drv.acctTrk.enable' equal "true") = TRUE.
  2901. [07/10/12 03:57:08.689]:ADTRACE PT: (if-global-variable 'drv.acctTrk.mode' equal "fanout") = FALSE.
  2902. [07/10/12 03:57:08.689]:ADTRACE PT: Rule rejected.
  2903. [07/10/12 03:57:08.689]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled'.
  2904. [07/10/12 03:57:08.689]:ADTRACE PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  2905. [07/10/12 03:57:08.689]:ADTRACE PT: Rule rejected.
  2906. [07/10/12 03:57:08.689]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - query DirXML-Accounts Attribute'.
  2907. [07/10/12 03:57:08.689]:ADTRACE PT: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  2908. [07/10/12 03:57:08.704]:ADTRACE PT: Rule rejected.
  2909. [07/10/12 03:57:08.704]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - remove Dirxml-Account values on regular delete operation'.
  2910. [07/10/12 03:57:08.704]:ADTRACE PT: (if-operation match "delete|remove-association") = FALSE.
  2911. [07/10/12 03:57:08.704]:ADTRACE PT: (if-operation equal "status") = TRUE.
  2912. [07/10/12 03:57:08.704]:ADTRACE PT: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  2913. [07/10/12 03:57:08.704]:ADTRACE PT: Rule rejected.
  2914. [07/10/12 03:57:08.704]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - update DirXMLAccounts attribute on regular operations'.
  2915. [07/10/12 03:57:08.704]:ADTRACE PT: (if-op-property 'AccountTracking-Operation' not-available) = TRUE.
  2916. [07/10/12 03:57:08.704]:ADTRACE PT: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  2917. [07/10/12 03:57:08.704]:ADTRACE PT: (if-operation equal "status") = TRUE.
  2918. [07/10/12 03:57:08.704]:ADTRACE PT: (if-xpath true "./@level='success' or ./@level='warning'") = TRUE.
  2919. [07/10/12 03:57:08.704]:ADTRACE PT: (if-op-property 'AccountTracking-Operation' available) = FALSE.
  2920. [07/10/12 03:57:08.704]:ADTRACE PT: Rule rejected.
  2921. [07/10/12 03:57:08.704]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - update DirXMLAccounts attribute on mapped operations'.
  2922. [07/10/12 03:57:08.704]:ADTRACE PT: (if-xpath true "operation-data/account-tracking-operation") = FALSE.
  2923. [07/10/12 03:57:08.704]:ADTRACE PT: (if-xpath true "operation-data/account-tracking-operation") = FALSE.
  2924. [07/10/12 03:57:08.704]:ADTRACE PT: Rule rejected.
  2925. [07/10/12 03:57:08.704]:ADTRACE PT:Policy returned:
  2926. [07/10/12 03:57:08.704]:ADTRACE PT:
  2927. <nds dtdversion="2.2">
  2928. <source>
  2929. <product version="4.0.1.0">DirXML</product>
  2930. <contact>Novell, Inc.</contact>
  2931. </source>
  2932. <input>
  2933. <status level="success" type="heartbeat"/>
  2934. </input>
  2935. </nds>
  2936. [07/10/12 03:57:08.704]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-itp-SubscriberUserAdd%-C.
  2937. [07/10/12 03:57:08.704]:ADTRACE PT: Applying to status #1.
  2938. [07/10/12 03:57:08.704]:ADTRACE PT: Evaluating selection criteria for rule 'Populate DirXML-ADContext on initial user add'.
  2939. [07/10/12 03:57:08.704]:ADTRACE PT: (if-operation equal "add-association") = FALSE.
  2940. [07/10/12 03:57:08.704]:ADTRACE PT: Rule rejected.
  2941. [07/10/12 03:57:08.704]:ADTRACE PT:Policy returned:
  2942. [07/10/12 03:57:08.704]:ADTRACE PT:
  2943. <nds dtdversion="2.2">
  2944. <source>
  2945. <product version="4.0.1.0">DirXML</product>
  2946. <contact>Novell, Inc.</contact>
  2947. </source>
  2948. <input>
  2949. <status level="success" type="heartbeat"/>
  2950. </input>
  2951. </nds>
  2952. [07/10/12 03:57:08.704]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-itp-FormatConversions%-C.
  2953. [07/10/12 03:57:08.704]:ADTRACE PT: Applying to status #1.
  2954. [07/10/12 03:57:08.704]:ADTRACE PT: Evaluating selection criteria for rule 'streetAddress: Convert CR-LF to LF'.
  2955. [07/10/12 03:57:08.704]:ADTRACE PT: Rule selected.
  2956. [07/10/12 03:57:08.704]:ADTRACE PT: Applying rule 'streetAddress: Convert CR-LF to LF'.
  2957. [07/10/12 03:57:08.704]:ADTRACE PT: Action: do-reformat-op-attr("streetAddress",token-replace-all("\r\n","\r",token-local-variable("current-value"))).
  2958. [07/10/12 03:57:08.704]:ADTRACE PT: Evaluating selection criteria for rule 'logonHours: Convert to Login Allowed Time Map form'.
  2959. [07/10/12 03:57:08.704]:ADTRACE PT: Rule selected.
  2960. [07/10/12 03:57:08.704]:ADTRACE PT: Applying rule 'logonHours: Convert to Login Allowed Time Map form'.
  2961. [07/10/12 03:57:08.704]:ADTRACE PT: Action: do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2eDir($current-value)")).
  2962. [07/10/12 03:57:08.704]:ADTRACE PT: Evaluating selection criteria for rule 'accountExpires: Convert to Identity Vault time format'.
  2963. [07/10/12 03:57:08.704]:ADTRACE PT: Rule selected.
  2964. [07/10/12 03:57:08.704]:ADTRACE PT: Applying rule 'accountExpires: Convert to Identity Vault time format'.
  2965. [07/10/12 03:57:08.704]:ADTRACE PT: Action: do-reformat-op-attr("accountExpires",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
  2966. [07/10/12 03:57:08.704]:ADTRACE PT: Evaluating selection criteria for rule 'lockoutTime: Convert to Identity Vault time format'.
  2967. [07/10/12 03:57:08.704]:ADTRACE PT: Rule selected.
  2968. [07/10/12 03:57:08.704]:ADTRACE PT: Applying rule 'lockoutTime: Convert to Identity Vault time format'.
  2969. [07/10/12 03:57:08.704]:ADTRACE PT: Action: do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
  2970. [07/10/12 03:57:08.704]:ADTRACE PT:Policy returned:
  2971. [07/10/12 03:57:08.704]:ADTRACE PT:
  2972. <nds dtdversion="2.2">
  2973. <source>
  2974. <product version="4.0.1.0">DirXML</product>
  2975. <contact>Novell, Inc.</contact>
  2976. </source>
  2977. <input>
  2978. <status level="success" type="heartbeat"/>
  2979. </input>
  2980. </nds>
  2981. [07/10/12 03:57:08.704]:ADTRACE PT:Applying policy: %+C%14CNOVLDATACOLL-itp-DataCollectionQuerySupport%-C.
  2982. [07/10/12 03:57:08.704]:ADTRACE PT: Applying to status #1.
  2983. [07/10/12 03:57:08.704]:ADTRACE PT: Evaluating selection criteria for rule 'Rename @association-ref to @association and change @type from "dn" to "{dn}"'.
  2984. [07/10/12 03:57:08.720]:ADTRACE PT: (if-operation equal "instance") = FALSE.
  2985. [07/10/12 03:57:08.720]:ADTRACE PT: Rule rejected.
  2986. [07/10/12 03:57:08.720]:ADTRACE PT:Policy returned:
  2987. [07/10/12 03:57:08.720]:ADTRACE PT:
  2988. <nds dtdversion="2.2">
  2989. <source>
  2990. <product version="4.0.1.0">DirXML</product>
  2991. <contact>Novell, Inc.</contact>
  2992. </source>
  2993. <input>
  2994. <status level="success" type="heartbeat"/>
  2995. </input>
  2996. </nds>
  2997. [07/10/12 03:57:08.720]:ADTRACE PT:Applying policy: %+C%14CNOVLADENTEX-itp-EntitlementsImpl%-C.
  2998. [07/10/12 03:57:08.720]:ADTRACE PT: Applying to status #1.
  2999. [07/10/12 03:57:08.720]:ADTRACE PT: Evaluating selection criteria for rule 'Intercept ADDomain (tagged identity query) query response'.
  3000. [07/10/12 03:57:08.720]:ADTRACE PT: (if-operation equal "instance") = FALSE.
  3001. [07/10/12 03:57:08.720]:ADTRACE PT: Rule rejected.
  3002. [07/10/12 03:57:08.720]:ADTRACE PT: Evaluating selection criteria for rule 'Intercept ADDomain (tagged identity query) query status'.
  3003. [07/10/12 03:57:08.720]:ADTRACE PT: (if-xpath true "../status[@event-id='query-driver-ident']/operation-data/@UserAccountEntitlementQuery") = FALSE.
  3004. [07/10/12 03:57:08.720]:ADTRACE PT: Rule rejected.
  3005. [07/10/12 03:57:08.720]:ADTRACE PT: Evaluating selection criteria for rule 'Check target of add-association for group membership entitlements'.
  3006. [07/10/12 03:57:08.720]:ADTRACE PT: (if-global-variable 'drv.entitlement.Group' equal "true") = TRUE.
  3007. [07/10/12 03:57:08.720]:ADTRACE PT: (if-operation equal "add-association") = FALSE.
  3008. [07/10/12 03:57:08.720]:ADTRACE PT: Rule rejected.
  3009. [07/10/12 03:57:08.720]:ADTRACE PT: Evaluating selection criteria for rule 'Check target of add-association for Exchange mailbox entitlements'.
  3010. [07/10/12 03:57:08.720]:ADTRACE PT: (if-global-variable 'drv.exchMailboxMethod' equal "entitlement") = FALSE.
  3011. [07/10/12 03:57:08.720]:ADTRACE PT: Rule rejected.
  3012. [07/10/12 03:57:08.720]:ADTRACE PT:Policy returned:
  3013. [07/10/12 03:57:08.720]:ADTRACE PT:
  3014. <nds dtdversion="2.2">
  3015. <source>
  3016. <product version="4.0.1.0">DirXML</product>
  3017. <contact>Novell, Inc.</contact>
  3018. </source>
  3019. <input>
  3020. <status level="success" type="heartbeat"/>
  3021. </input>
  3022. </nds>
  3023. [07/10/12 03:57:08.720]:ADTRACE PT:Applying policy: %+C%14CNOVLPWDSYNC-itp-EmailOnFailedPwdSub%-C.
  3024. [07/10/12 03:57:08.720]:ADTRACE PT: Applying to status #1.
  3025. [07/10/12 03:57:08.720]:ADTRACE PT: Evaluating selection criteria for rule 'Send e-mail on a failure when subscribing to passwords'.
  3026. [07/10/12 03:57:08.720]:ADTRACE PT: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  3027. [07/10/12 03:57:08.720]:ADTRACE PT: (if-operation equal "status") = TRUE.
  3028. [07/10/12 03:57:08.720]:ADTRACE PT: (if-xpath true "self::status[@level != 'success'][text() != '']/operation-data/password-subscribe-status/association[text() != '']") = FALSE.
  3029. [07/10/12 03:57:08.720]:ADTRACE PT: Rule rejected.
  3030. [07/10/12 03:57:08.720]:ADTRACE PT: Evaluating selection criteria for rule 'Send e-mail on failure to reset connected system password using the Identity Vault password'.
  3031. [07/10/12 03:57:08.720]:ADTRACE PT: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  3032. [07/10/12 03:57:08.720]:ADTRACE PT: (if-operation equal "status") = TRUE.
  3033. [07/10/12 03:57:08.720]:ADTRACE PT: (if-xpath true "self::status[@level != 'success']/operation-data/password-reset-status") = FALSE.
  3034. [07/10/12 03:57:08.720]:ADTRACE PT: Rule rejected.
  3035. [07/10/12 03:57:08.720]:ADTRACE PT:Policy returned:
  3036. [07/10/12 03:57:08.720]:ADTRACE PT:
  3037. <nds dtdversion="2.2">
  3038. <source>
  3039. <product version="4.0.1.0">DirXML</product>
  3040. <contact>Novell, Inc.</contact>
  3041. </source>
  3042. <input>
  3043. <status level="success" type="heartbeat"/>
  3044. </input>
  3045. </nds>
  3046. [07/10/12 03:57:08.720]:ADTRACE PT:Applying schema mapping policies to input.
  3047. [07/10/12 03:57:08.720]:ADTRACE PT:Applying policy: %+C%14CNOVLDATACOLL-smp-SkipSchemaMapping%-C.
  3048. [07/10/12 03:57:08.720]:ADTRACE PT: Applying to status #1.
  3049. [07/10/12 03:57:08.720]:ADTRACE PT: Evaluating selection criteria for rule 'skip'.
  3050. [07/10/12 03:57:08.720]:ADTRACE PT: (if-operation equal "instance") = FALSE.
  3051. [07/10/12 03:57:08.720]:ADTRACE PT: Rule rejected.
  3052. [07/10/12 03:57:08.720]:ADTRACE PT: Evaluating selection criteria for rule 'restore'.
  3053. [07/10/12 03:57:08.720]:ADTRACE PT: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  3054. [07/10/12 03:57:08.720]:ADTRACE PT: Rule rejected.
  3055. [07/10/12 03:57:08.720]:ADTRACE PT:Policy returned:
  3056. [07/10/12 03:57:08.736]:ADTRACE PT:
  3057. <nds dtdversion="2.2">
  3058. <source>
  3059. <product version="4.0.1.0">DirXML</product>
  3060. <contact>Novell, Inc.</contact>
  3061. </source>
  3062. <input>
  3063. <status level="success" type="heartbeat"/>
  3064. </input>
  3065. </nds>
  3066. [07/10/12 03:57:08.736]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-smp%-C.
  3067. [07/10/12 03:57:08.736]:ADTRACE PT:Applying policy: %+C%14CNOVLDATACOLL-smp-SkipSchemaMapping%-C.
  3068. [07/10/12 03:57:08.736]:ADTRACE PT: Applying to status #1.
  3069. [07/10/12 03:57:08.736]:ADTRACE PT: Evaluating selection criteria for rule 'skip'.
  3070. [07/10/12 03:57:08.736]:ADTRACE PT: (if-operation equal "instance") = FALSE.
  3071. [07/10/12 03:57:08.736]:ADTRACE PT: Rule rejected.
  3072. [07/10/12 03:57:08.736]:ADTRACE PT: Evaluating selection criteria for rule 'restore'.
  3073. [07/10/12 03:57:08.736]:ADTRACE PT: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  3074. [07/10/12 03:57:08.736]:ADTRACE PT: Rule rejected.
  3075. [07/10/12 03:57:08.736]:ADTRACE PT:Policy returned:
  3076. [07/10/12 03:57:08.736]:ADTRACE PT:
  3077. <nds dtdversion="2.2">
  3078. <source>
  3079. <product version="4.0.1.0">DirXML</product>
  3080. <contact>Novell, Inc.</contact>
  3081. </source>
  3082. <input>
  3083. <status level="success" type="heartbeat"/>
  3084. </input>
  3085. </nds>
  3086. [07/10/12 03:57:08.736]:ADTRACE PT:Resolving association references.
  3087. [07/10/12 03:57:08.736]:ADTRACE PT:Applying event transformation policies.
  3088. [07/10/12 03:57:08.736]:ADTRACE PT:Applying policy: %+C%14CNOVLADENTEX-pub-etp-EntitlementsImpl%-C.
  3089. [07/10/12 03:57:08.736]:ADTRACE PT: Applying to status #1.
  3090. [07/10/12 03:57:08.736]:ADTRACE PT: Evaluating selection criteria for rule 'Disallow user account delete when using entitlements'.
  3091. [07/10/12 03:57:08.736]:ADTRACE PT: (if-operation equal "delete") = FALSE.
  3092. [07/10/12 03:57:08.736]:ADTRACE PT: Rule rejected.
  3093. [07/10/12 03:57:08.736]:ADTRACE PT: Evaluating selection criteria for rule 'Strip Login Disabled from operation (Disable Option)'.
  3094. [07/10/12 03:57:08.736]:ADTRACE PT: (if-global-variable 'drv.entitlement.UserAccount' equal "true") = TRUE.
  3095. [07/10/12 03:57:08.736]:ADTRACE PT: (if-global-variable 'drv.entitlement.remove' equal "disable") = TRUE.
  3096. [07/10/12 03:57:08.736]:ADTRACE PT: (if-class-name equal "User") = FALSE.
  3097. [07/10/12 03:57:08.736]:ADTRACE PT: Rule rejected.
  3098. [07/10/12 03:57:08.736]:ADTRACE PT:Policy returned:
  3099. [07/10/12 03:57:08.736]:ADTRACE PT:
  3100. <nds dtdversion="2.2">
  3101. <source>
  3102. <product version="4.0.1.0">DirXML</product>
  3103. <contact>Novell, Inc.</contact>
  3104. </source>
  3105. <input>
  3106. <status level="success" type="heartbeat"/>
  3107. </input>
  3108. </nds>
  3109. [07/10/12 03:57:08.736]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-pub-etp-HandleMovesAndRenames%-C.
  3110. [07/10/12 03:57:08.736]:ADTRACE PT: Applying to status #1.
  3111. [07/10/12 03:57:08.736]:ADTRACE PT: Evaluating selection criteria for rule 'break if not a move or rename'.
  3112. [07/10/12 03:57:08.736]:ADTRACE PT: (if-operation not-match "move|rename") = TRUE.
  3113. [07/10/12 03:57:08.736]:ADTRACE PT: Rule selected.
  3114. [07/10/12 03:57:08.736]:ADTRACE PT: Applying rule 'break if not a move or rename'.
  3115. [07/10/12 03:57:08.736]:ADTRACE PT: Action: do-break().
  3116. [07/10/12 03:57:08.736]:ADTRACE PT:Policy returned:
  3117. [07/10/12 03:57:08.736]:ADTRACE PT:
  3118. <nds dtdversion="2.2">
  3119. <source>
  3120. <product version="4.0.1.0">DirXML</product>
  3121. <contact>Novell, Inc.</contact>
  3122. </source>
  3123. <input>
  3124. <status level="success" type="heartbeat"/>
  3125. </input>
  3126. </nds>
  3127. [07/10/12 03:57:08.736]:ADTRACE PT:Applying publisher filter.
  3128. [07/10/12 03:57:08.736]:ADTRACE PT:Publisher processing status for .
  3129. [07/10/12 03:57:08.736]:ADTRACE PT:Applying command transformation policies.
  3130. [07/10/12 03:57:08.736]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-pub-ctp-UserNameMap%-C.
  3131. [07/10/12 03:57:08.736]:ADTRACE PT: Applying to status #1.
  3132. [07/10/12 03:57:08.736]:ADTRACE PT: Evaluating selection criteria for rule 'consider user objects when name mapping is enabled'.
  3133. [07/10/12 03:57:08.736]:ADTRACE PT: (if-class-name not-equal "User") = TRUE.
  3134. [07/10/12 03:57:08.736]:ADTRACE PT: Rule selected.
  3135. [07/10/12 03:57:08.736]:ADTRACE PT: Applying rule 'consider user objects when name mapping is enabled'.
  3136. [07/10/12 03:57:08.736]:ADTRACE PT: Action: do-break().
  3137. [07/10/12 03:57:08.736]:ADTRACE PT:Policy returned:
  3138. [07/10/12 03:57:08.736]:ADTRACE PT:
  3139. <nds dtdversion="2.2">
  3140. <source>
  3141. <product version="4.0.1.0">DirXML</product>
  3142. <contact>Novell, Inc.</contact>
  3143. </source>
  3144. <input>
  3145. <status level="success" type="heartbeat"/>
  3146. </input>
  3147. </nds>
  3148. [07/10/12 03:57:08.736]:ADTRACE PT:Applying policy: %+C%14CNOVLPWDSYNC-pub-ctp-DefaultPwd%-C.
  3149. [07/10/12 03:57:08.736]:ADTRACE PT: Applying to status #1.
  3150. [07/10/12 03:57:08.736]:ADTRACE PT: Evaluating selection criteria for rule 'On User add, provide default password of @Dirxml1 if no password exists'.
  3151. [07/10/12 03:57:08.736]:ADTRACE PT: (if-operation equal "add") = FALSE.
  3152. [07/10/12 03:57:08.736]:ADTRACE PT: Rule rejected.
  3153. [07/10/12 03:57:08.736]:ADTRACE PT:Policy returned:
  3154. [07/10/12 03:57:08.736]:ADTRACE PT:
  3155. <nds dtdversion="2.2">
  3156. <source>
  3157. <product version="4.0.1.0">DirXML</product>
  3158. <contact>Novell, Inc.</contact>
  3159. </source>
  3160. <input>
  3161. <status level="success" type="heartbeat"/>
  3162. </input>
  3163. </nds>
  3164. [07/10/12 03:57:08.751]:ADTRACE PT:Applying policy: %+C%14CNOVLPWDSYNC-pub-ctp-CheckPwdGCV%-C.
  3165. [07/10/12 03:57:08.751]:ADTRACE PT: Applying to status #1.
  3166. [07/10/12 03:57:08.751]:ADTRACE PT: Evaluating selection criteria for rule 'Block publishing passwords to the Identity Vault when adding an object'.
  3167. [07/10/12 03:57:08.751]:ADTRACE PT: (if-global-variable 'enable-password-publish' equal "false") = FALSE.
  3168. [07/10/12 03:57:08.751]:ADTRACE PT: Rule rejected.
  3169. [07/10/12 03:57:08.751]:ADTRACE PT: Evaluating selection criteria for rule 'Block sending modify-password changes to the Identity Vault'.
  3170. [07/10/12 03:57:08.751]:ADTRACE PT: (if-global-variable 'enable-password-publish' equal "false") = FALSE.
  3171. [07/10/12 03:57:08.751]:ADTRACE PT: Rule rejected.
  3172. [07/10/12 03:57:08.751]:ADTRACE PT:Policy returned:
  3173. [07/10/12 03:57:08.751]:ADTRACE PT:
  3174. <nds dtdversion="2.2">
  3175. <source>
  3176. <product version="4.0.1.0">DirXML</product>
  3177. <contact>Novell, Inc.</contact>
  3178. </source>
  3179. <input>
  3180. <status level="success" type="heartbeat"/>
  3181. </input>
  3182. </nds>
  3183. [07/10/12 03:57:08.751]:ADTRACE PT:Applying policy: %+C%14CNOVLPWDSYNC-pub-ctp-PublishDistPwd%-C.
  3184. [07/10/12 03:57:08.751]:ADTRACE PT: Applying to status #1.
  3185. [07/10/12 03:57:08.751]:ADTRACE PT: Evaluating selection criteria for rule 'Add nspmDistributionAttribute attribute to add operation'.
  3186. [07/10/12 03:57:08.751]:ADTRACE PT: (if-global-variable 'publish-password-to-dp' equal "true") = FALSE.
  3187. [07/10/12 03:57:08.751]:ADTRACE PT: Rule rejected.
  3188. [07/10/12 03:57:08.751]:ADTRACE PT: Evaluating selection criteria for rule 'Change modify-password operations to a modify'.
  3189. [07/10/12 03:57:08.751]:ADTRACE PT: (if-global-variable 'publish-password-to-dp' equal "true") = FALSE.
  3190. [07/10/12 03:57:08.751]:ADTRACE PT: Rule rejected.
  3191. [07/10/12 03:57:08.751]:ADTRACE PT:Policy returned:
  3192. [07/10/12 03:57:08.751]:ADTRACE PT:
  3193. <nds dtdversion="2.2">
  3194. <source>
  3195. <product version="4.0.1.0">DirXML</product>
  3196. <contact>Novell, Inc.</contact>
  3197. </source>
  3198. <input>
  3199. <status level="success" type="heartbeat"/>
  3200. </input>
  3201. </nds>
  3202. [07/10/12 03:57:08.751]:ADTRACE PT:Applying policy: %+C%14CNOVLPWDSYNC-pub-ctp-PublishNDSPwd%-C.
  3203. [07/10/12 03:57:08.751]:ADTRACE PT: Applying to status #1.
  3204. [07/10/12 03:57:08.751]:ADTRACE PT: Evaluating selection criteria for rule 'Block publishing passwords to eDirectory password'.
  3205. [07/10/12 03:57:08.751]:ADTRACE PT: (if-global-variable 'publish-password-to-nds' equal "false") = FALSE.
  3206. [07/10/12 03:57:08.751]:ADTRACE PT: Rule rejected.
  3207. [07/10/12 03:57:08.751]:ADTRACE PT: Evaluating selection criteria for rule 'Block sending modify-password changes to the eDirectory password'.
  3208. [07/10/12 03:57:08.751]:ADTRACE PT: (if-global-variable 'publish-password-to-nds' equal "false") = FALSE.
  3209. [07/10/12 03:57:08.751]:ADTRACE PT: Rule rejected.
  3210. [07/10/12 03:57:08.751]:ADTRACE PT:Policy returned:
  3211. [07/10/12 03:57:08.751]:ADTRACE PT:
  3212. <nds dtdversion="2.2">
  3213. <source>
  3214. <product version="4.0.1.0">DirXML</product>
  3215. <contact>Novell, Inc.</contact>
  3216. </source>
  3217. <input>
  3218. <status level="success" type="heartbeat"/>
  3219. </input>
  3220. </nds>
  3221. [07/10/12 03:57:08.751]:ADTRACE PT:Applying policy: %+C%14CNOVLPWDSYNC-pub-ctp-AddPwdPayload%-C.
  3222. [07/10/12 03:57:08.751]:ADTRACE PT: Applying to status #1.
  3223. [07/10/12 03:57:08.751]:ADTRACE PT: Evaluating selection criteria for rule 'Add operation-data element to password operations'.
  3224. [07/10/12 03:57:08.751]:ADTRACE PT: (if-operation equal "add") = FALSE.
  3225. [07/10/12 03:57:08.751]:ADTRACE PT: (if-operation equal "add") = FALSE.
  3226. [07/10/12 03:57:08.751]:ADTRACE PT: (if-operation equal "modify-password") = FALSE.
  3227. [07/10/12 03:57:08.751]:ADTRACE PT: (if-operation equal "modify") = FALSE.
  3228. [07/10/12 03:57:08.751]:ADTRACE PT: Rule rejected.
  3229. [07/10/12 03:57:08.751]:ADTRACE PT: Evaluating selection criteria for rule 'Add payload data to password operations'.
  3230. [07/10/12 03:57:08.751]:ADTRACE PT: (if-operation equal "add") = FALSE.
  3231. [07/10/12 03:57:08.751]:ADTRACE PT: (if-operation equal "add") = FALSE.
  3232. [07/10/12 03:57:08.751]:ADTRACE PT: (if-operation equal "modify-password") = FALSE.
  3233. [07/10/12 03:57:08.751]:ADTRACE PT: (if-operation equal "modify") = FALSE.
  3234. [07/10/12 03:57:08.751]:ADTRACE PT: Rule rejected.
  3235. [07/10/12 03:57:08.751]:ADTRACE PT:Policy returned:
  3236. [07/10/12 03:57:08.751]:ADTRACE PT:
  3237. <nds dtdversion="2.2">
  3238. <source>
  3239. <product version="4.0.1.0">DirXML</product>
  3240. <contact>Novell, Inc.</contact>
  3241. </source>
  3242. <input>
  3243. <status level="success" type="heartbeat"/>
  3244. </input>
  3245. </nds>
  3246. [07/10/12 03:57:08.751]:ADTRACE PT:Applying policy: %+C%14CNOVLATRKBASE-pub-ctp-WriteAccountsOnAdds%-C.
  3247. [07/10/12 03:57:08.751]:ADTRACE PT: Applying to status #1.
  3248. [07/10/12 03:57:08.751]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - disregard policy if disabled'.
  3249. [07/10/12 03:57:08.751]:ADTRACE PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  3250. [07/10/12 03:57:08.751]:ADTRACE PT: Rule rejected.
  3251. [07/10/12 03:57:08.751]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - on add operation add Dirxml-Accounts'.
  3252. [07/10/12 03:57:08.767]:ADTRACE PT: (if-operation equal "add") = FALSE.
  3253. [07/10/12 03:57:08.767]:ADTRACE PT: Rule rejected.
  3254. [07/10/12 03:57:08.767]:ADTRACE PT:Policy returned:
  3255. [07/10/12 03:57:08.767]:ADTRACE PT:
  3256. <nds dtdversion="2.2">
  3257. <source>
  3258. <product version="4.0.1.0">DirXML</product>
  3259. <contact>Novell, Inc.</contact>
  3260. </source>
  3261. <input>
  3262. <status level="success" type="heartbeat"/>
  3263. </input>
  3264. </nds>
  3265. [07/10/12 03:57:08.767]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-pub-ctp%-C.
  3266. [07/10/12 03:57:08.767]:ADTRACE PT: Applying to status #1.
  3267. [07/10/12 03:57:08.767]:ADTRACE PT: Evaluating selection criteria for rule 'set cached context value on merge'.
  3268. [07/10/12 03:57:08.767]:ADTRACE PT: (if-operation equal "modify") = FALSE.
  3269. [07/10/12 03:57:08.767]:ADTRACE PT: Rule rejected.
  3270. [07/10/12 03:57:08.767]:ADTRACE PT: Evaluating selection criteria for rule 'remove managed attributes when object disassociated'.
  3271. [07/10/12 03:57:08.767]:ADTRACE PT: (if-operation equal "remove-association") = FALSE.
  3272. [07/10/12 03:57:08.767]:ADTRACE PT: Rule rejected.
  3273. [07/10/12 03:57:08.767]:ADTRACE PT: Evaluating selection criteria for rule 'Prevent unassociated users from being removed from groups'.
  3274. [07/10/12 03:57:08.767]:ADTRACE PT: (if-operation equal "modify") = FALSE.
  3275. [07/10/12 03:57:08.767]:ADTRACE PT: Rule rejected.
  3276. [07/10/12 03:57:08.767]:ADTRACE PT: Evaluating selection criteria for rule 'Set Equivalent To Me when group members change'.
  3277. [07/10/12 03:57:08.767]:ADTRACE PT: (if-class-name equal "Group") = FALSE.
  3278. [07/10/12 03:57:08.767]:ADTRACE PT: Rule rejected.
  3279. [07/10/12 03:57:08.767]:ADTRACE PT:Policy returned:
  3280. [07/10/12 03:57:08.767]:ADTRACE PT:
  3281. <nds dtdversion="2.2">
  3282. <source>
  3283. <product version="4.0.1.0">DirXML</product>
  3284. <contact>Novell, Inc.</contact>
  3285. </source>
  3286. <input>
  3287. <status level="success" type="heartbeat"/>
  3288. </input>
  3289. </nds>
  3290. [07/10/12 03:57:08.767]:ADTRACE PT:Applying XSLT policy: %+C%14CNOVLADDCFG-pub-cts%-C.
  3291. [07/10/12 03:57:08.767]:ADTRACE PT:Policy returned:
  3292. [07/10/12 03:57:08.767]:ADTRACE PT:
  3293. <nds dtdversion="2.2">
  3294. <source>
  3295. <product version="4.0.1.0">DirXML</product>
  3296. <contact>Novell, Inc.</contact>
  3297. </source>
  3298. <input>
  3299. <status level="success" type="heartbeat"/>
  3300. </input>
  3301. </nds>
  3302. [07/10/12 03:57:08.767]:ADTRACE PT:Filtering out notification-only attributes.
  3303. [07/10/12 03:57:08.767]:ADTRACE PT:Pumping XDS to eDirectory.
  3304. [07/10/12 03:57:08.767]:ADTRACE PT:Performing operation status for .
  3305. [07/10/12 03:57:08.767]:ADTRACE PT:
  3306. DirXML Log Event -------------------
  3307. Driver: \xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver
  3308. Channel: Publisher
  3309. Status: Success
  3310. [07/10/12 03:57:08.767]:ADTRACE PT:Fixing up association references.
  3311. [07/10/12 03:57:08.767]:ADTRACE PT:Applying schema mapping policies to output.
  3312. [07/10/12 03:57:08.767]:ADTRACE PT:Applying policy: %+C%14CNOVLDATACOLL-smp-SkipSchemaMapping%-C.
  3313. [07/10/12 03:57:08.767]:ADTRACE PT: Applying to status #1.
  3314. [07/10/12 03:57:08.767]:ADTRACE PT: Evaluating selection criteria for rule 'skip'.
  3315. [07/10/12 03:57:08.767]:ADTRACE PT: (if-operation equal "instance") = FALSE.
  3316. [07/10/12 03:57:08.767]:ADTRACE PT: Rule rejected.
  3317. [07/10/12 03:57:08.767]:ADTRACE PT: Evaluating selection criteria for rule 'restore'.
  3318. [07/10/12 03:57:08.767]:ADTRACE PT: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  3319. [07/10/12 03:57:08.767]:ADTRACE PT: Rule rejected.
  3320. [07/10/12 03:57:08.767]:ADTRACE PT:Policy returned:
  3321. [07/10/12 03:57:08.767]:ADTRACE PT:
  3322. <nds dtdversion="4.0" ndsversion="8.x">
  3323. <source>
  3324. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  3325. <contact>Novell, Inc.</contact>
  3326. </source>
  3327. <output>
  3328. <status event-id="0" level="success"></status>
  3329. </output>
  3330. </nds>
  3331. [07/10/12 03:57:08.767]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-smp%-C.
  3332. [07/10/12 03:57:08.767]:ADTRACE PT:Applying policy: %+C%14CNOVLDATACOLL-smp-SkipSchemaMapping%-C.
  3333. [07/10/12 03:57:08.767]:ADTRACE PT: Applying to status #1.
  3334. [07/10/12 03:57:08.767]:ADTRACE PT: Evaluating selection criteria for rule 'skip'.
  3335. [07/10/12 03:57:08.767]:ADTRACE PT: (if-operation equal "instance") = FALSE.
  3336. [07/10/12 03:57:08.767]:ADTRACE PT: Rule rejected.
  3337. [07/10/12 03:57:08.783]:ADTRACE PT: Evaluating selection criteria for rule 'restore'.
  3338. [07/10/12 03:57:08.783]:ADTRACE PT: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  3339. [07/10/12 03:57:08.783]:ADTRACE PT: Rule rejected.
  3340. [07/10/12 03:57:08.783]:ADTRACE PT:Policy returned:
  3341. [07/10/12 03:57:08.783]:ADTRACE PT:
  3342. <nds dtdversion="4.0" ndsversion="8.x">
  3343. <source>
  3344. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  3345. <contact>Novell, Inc.</contact>
  3346. </source>
  3347. <output>
  3348. <status event-id="0" level="success"></status>
  3349. </output>
  3350. </nds>
  3351. [07/10/12 03:57:08.783]:ADTRACE PT:Applying output transformation policies.
  3352. [07/10/12 03:57:08.783]:ADTRACE PT:Applying policy: %+C%14CNOVLADENTEX-otp-EntitlementsImpl%-C.
  3353. [07/10/12 03:57:08.783]:ADTRACE PT: Applying to status #1.
  3354. [07/10/12 03:57:08.783]:ADTRACE PT: Evaluating selection criteria for rule 'Intercept outbound queries for ADDomain'.
  3355. [07/10/12 03:57:08.783]:ADTRACE PT: (if-class-name equal "ADDomain") = FALSE.
  3356. [07/10/12 03:57:08.783]:ADTRACE PT: Rule rejected.
  3357. [07/10/12 03:57:08.783]:ADTRACE PT:Policy returned:
  3358. [07/10/12 03:57:08.783]:ADTRACE PT:
  3359. <nds dtdversion="4.0" ndsversion="8.x">
  3360. <source>
  3361. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  3362. <contact>Novell, Inc.</contact>
  3363. </source>
  3364. <output>
  3365. <status event-id="0" level="success"></status>
  3366. </output>
  3367. </nds>
  3368. [07/10/12 03:57:08.783]:ADTRACE PT:Applying policy: %+C%14CNOVLADENTEX-otp-ExchangeMailboxPolicy%-C.
  3369. [07/10/12 03:57:08.783]:ADTRACE PT: Applying to status #1.
  3370. [07/10/12 03:57:08.783]:ADTRACE PT: Evaluating selection criteria for rule 'Exchange: Remove HomeMDB when disabled'.
  3371. [07/10/12 03:57:08.783]:ADTRACE PT: (if-global-variable 'drv.exchMailboxMethod' equal "disabled") = TRUE.
  3372. [07/10/12 03:57:08.783]:ADTRACE PT: Rule selected.
  3373. [07/10/12 03:57:08.783]:ADTRACE PT: Applying rule 'Exchange: Remove HomeMDB when disabled'.
  3374. [07/10/12 03:57:08.783]:ADTRACE PT: Action: do-strip-op-attr("homeMDB").
  3375. [07/10/12 03:57:08.783]:ADTRACE PT:Policy returned:
  3376. [07/10/12 03:57:08.783]:ADTRACE PT:
  3377. <nds dtdversion="4.0" ndsversion="8.x">
  3378. <source>
  3379. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  3380. <contact>Novell, Inc.</contact>
  3381. </source>
  3382. <output>
  3383. <status event-id="0" level="success"></status>
  3384. </output>
  3385. </nds>
  3386. [07/10/12 03:57:08.783]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-otp-FormatConversions%-C.
  3387. [07/10/12 03:57:08.783]:ADTRACE PT: Applying to status #1.
  3388. [07/10/12 03:57:08.783]:ADTRACE PT: Evaluating selection criteria for rule 'Street Address: Convert LF to CR-LF'.
  3389. [07/10/12 03:57:08.783]:ADTRACE PT: Rule selected.
  3390. [07/10/12 03:57:08.783]:ADTRACE PT: Applying rule 'Street Address: Convert LF to CR-LF'.
  3391. [07/10/12 03:57:08.783]:ADTRACE PT: Action: do-reformat-op-attr("streetAddress",token-replace-all("[^\r]\n","\r\n",token-local-variable("current-value"))).
  3392. [07/10/12 03:57:08.783]:ADTRACE PT: Evaluating selection criteria for rule 'logonHours: Convert to Active Directory form'.
  3393. [07/10/12 03:57:08.783]:ADTRACE PT: Rule selected.
  3394. [07/10/12 03:57:08.783]:ADTRACE PT: Applying rule 'logonHours: Convert to Active Directory form'.
  3395. [07/10/12 03:57:08.783]:ADTRACE PT: Action: do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2ADLenient($current-value)")).
  3396. [07/10/12 03:57:08.783]:ADTRACE PT: Evaluating selection criteria for rule 'accountExpires: Convert to Active Directory form'.
  3397. [07/10/12 03:57:08.783]:ADTRACE PT: (if-op-attr 'accountExpires' changing) = FALSE.
  3398. [07/10/12 03:57:08.783]:ADTRACE PT: Rule rejected.
  3399. [07/10/12 03:57:08.783]:ADTRACE PT: Evaluating selection criteria for rule 'lockoutTime: Convert to Active Directory form'.
  3400. [07/10/12 03:57:08.783]:ADTRACE PT: Rule selected.
  3401. [07/10/12 03:57:08.783]:ADTRACE PT: Applying rule 'lockoutTime: Convert to Active Directory form'.
  3402. [07/10/12 03:57:08.783]:ADTRACE PT: Action: do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateEpoch2FileTime($current-value)")).
  3403. [07/10/12 03:57:08.783]:ADTRACE PT: Evaluating selection criteria for rule 'Add: User - convert multi-valued Telephone to single value'.
  3404. [07/10/12 03:57:08.783]:ADTRACE PT: (if-operation equal "add") = FALSE.
  3405. [07/10/12 03:57:08.783]:ADTRACE PT: Rule rejected.
  3406. [07/10/12 03:57:08.783]:ADTRACE PT: Evaluating selection criteria for rule 'update Active Directory logon name'.
  3407. [07/10/12 03:57:08.783]:ADTRACE PT: (if-xpath true "self::status[@level = 'success']/operation-data/windows-2000-logon-name") = FALSE.
  3408. [07/10/12 03:57:08.783]:ADTRACE PT: Rule rejected.
  3409. [07/10/12 03:57:08.783]:ADTRACE PT:Policy returned:
  3410. [07/10/12 03:57:08.783]:ADTRACE PT:
  3411. <nds dtdversion="4.0" ndsversion="8.x">
  3412. <source>
  3413. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  3414. <contact>Novell, Inc.</contact>
  3415. </source>
  3416. <output>
  3417. <status event-id="0" level="success"></status>
  3418. </output>
  3419. </nds>
  3420. [07/10/12 03:57:08.798]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-otp-ExchangeEntitlementQuery%-C.
  3421. [07/10/12 03:57:08.798]:ADTRACE PT: Applying to status #1.
  3422. [07/10/12 03:57:08.798]:ADTRACE PT: Evaluating selection criteria for rule 'Add dest-dn to the Exchange Entitlement Query'.
  3423. [07/10/12 03:57:08.798]:ADTRACE PT: (if-operation equal "query") = FALSE.
  3424. [07/10/12 03:57:08.798]:ADTRACE PT: Rule rejected.
  3425. [07/10/12 03:57:08.798]:ADTRACE PT:Policy returned:
  3426. [07/10/12 03:57:08.798]:ADTRACE PT:
  3427. <nds dtdversion="4.0" ndsversion="8.x">
  3428. <source>
  3429. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  3430. <contact>Novell, Inc.</contact>
  3431. </source>
  3432. <output>
  3433. <status event-id="0" level="success"></status>
  3434. </output>
  3435. </nds>
  3436. [07/10/12 03:57:08.798]:ADTRACE PT:Applying policy: %+C%14CNOVLPWDSYNC-otp-EmailOnFailedPwdPub%-C.
  3437. [07/10/12 03:57:08.798]:ADTRACE PT: Applying to status #1.
  3438. [07/10/12 03:57:08.798]:ADTRACE PT: Evaluating selection criteria for rule 'Send e-mail for a failed publish password operation'.
  3439. [07/10/12 03:57:08.798]:ADTRACE PT: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  3440. [07/10/12 03:57:08.798]:ADTRACE PT: (if-operation equal "status") = TRUE.
  3441. [07/10/12 03:57:08.798]:ADTRACE PT: (if-xpath true "self::status[@level != 'success']/operation-data/password-publish-status") = FALSE.
  3442. [07/10/12 03:57:08.798]:ADTRACE PT: Rule rejected.
  3443. [07/10/12 03:57:08.798]:ADTRACE PT:Policy returned:
  3444. [07/10/12 03:57:08.798]:ADTRACE PT:
  3445. <nds dtdversion="4.0" ndsversion="8.x">
  3446. <source>
  3447. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  3448. <contact>Novell, Inc.</contact>
  3449. </source>
  3450. <output>
  3451. <status event-id="0" level="success"></status>
  3452. </output>
  3453. </nds>
  3454. [07/10/12 03:57:08.798]:ADTRACE PT:Applying policy: %+C%14CNOVLATRKBASE-otp-Subscribe%-C.
  3455. [07/10/12 03:57:08.798]:ADTRACE PT: Applying to status #1.
  3456. [07/10/12 03:57:08.798]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - Initialize Realm Mapping'.
  3457. [07/10/12 03:57:08.798]:ADTRACE PT: (if-global-variable 'drv.acctTrk.enable' equal "true") = TRUE.
  3458. [07/10/12 03:57:08.798]:ADTRACE PT: (if-global-variable 'drv.acctTrk.mode' equal "fanout") = FALSE.
  3459. [07/10/12 03:57:08.798]:ADTRACE PT: Rule rejected.
  3460. [07/10/12 03:57:08.798]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled or wrong object class'.
  3461. [07/10/12 03:57:08.798]:ADTRACE PT: Rule selected.
  3462. [07/10/12 03:57:08.798]:ADTRACE PT: Applying rule 'AccountTracking - disregard if disabled or wrong object class'.
  3463. [07/10/12 03:57:08.798]:ADTRACE PT: Action: do-if().
  3464. [07/10/12 03:57:08.798]:ADTRACE PT: Evaluating conditions.
  3465. [07/10/12 03:57:08.798]:ADTRACE PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  3466. [07/10/12 03:57:08.798]:ADTRACE PT: Performing else actions.
  3467. [07/10/12 03:57:08.798]:ADTRACE PT: Action: do-for-each(arg-node-set(token-global-variable("drv.acctTrk.objectClass"))).
  3468. [07/10/12 03:57:08.798]:ADTRACE PT: arg-node-set(token-global-variable("drv.acctTrk.objectClass"))
  3469. [07/10/12 03:57:08.798]:ADTRACE PT: token-global-variable("drv.acctTrk.objectClass")
  3470. [07/10/12 03:57:08.798]:ADTRACE PT: Token Value: {"user"}.
  3471. [07/10/12 03:57:08.798]:ADTRACE PT: Arg Value: {"user"}.
  3472. [07/10/12 03:57:08.798]:ADTRACE PT: Performing actions for local-variable(current-node) = "user".
  3473. [07/10/12 03:57:08.798]:ADTRACE PT: Action: do-if().
  3474. [07/10/12 03:57:08.798]:ADTRACE PT: Evaluating conditions.
  3475. [07/10/12 03:57:08.798]:ADTRACE PT: (if-class-name equal "$current-node$") = FALSE.
  3476. [07/10/12 03:57:08.798]:ADTRACE PT: Performing else actions.
  3477. [07/10/12 03:57:08.798]:ADTRACE PT: Action: do-if().
  3478. [07/10/12 03:57:08.798]:ADTRACE PT: Evaluating conditions.
  3479. [07/10/12 03:57:08.798]:ADTRACE PT: (if-local-variable 'pass' not-available) = TRUE.
  3480. [07/10/12 03:57:08.798]:ADTRACE PT: Performing if actions.
  3481. [07/10/12 03:57:08.798]:ADTRACE PT: Action: do-break().
  3482. [07/10/12 03:57:08.798]:ADTRACE PT:Policy returned:
  3483. [07/10/12 03:57:08.798]:ADTRACE PT:
  3484. <nds dtdversion="4.0" ndsversion="8.x">
  3485. <source>
  3486. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  3487. <contact>Novell, Inc.</contact>
  3488. </source>
  3489. <output>
  3490. <status event-id="0" level="success"></status>
  3491. </output>
  3492. </nds>
  3493. [07/10/12 03:57:08.798]:ADTRACE PT:
  3494. <nds dtdversion="4.0" ndsversion="8.x">
  3495. <source>
  3496. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  3497. <contact>Novell, Inc.</contact>
  3498. </source>
  3499. <output>
  3500. <status event-id="0" level="success"></status>
  3501. </output>
  3502. </nds>
  3503. [07/10/12 03:57:08.798]:ADTRACE PT:Remote Interface Driver: Sending...
  3504. [07/10/12 03:57:08.798]:ADTRACE PT:
  3505. <nds dtdversion="4.0" ndsversion="8.x">
  3506. <source>
  3507. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  3508. <contact>Novell, Inc.</contact>
  3509. </source>
  3510. <output>
  3511. <status event-id="0" level="success"></status>
  3512. </output>
  3513. </nds>
  3514. [07/10/12 03:57:08.814]:ADTRACE PT:Remote Interface Driver: Document sent.
  3515. [07/10/12 03:58:08.658]:ADTRACE :Remote Interface Driver: Received.
  3516. [07/10/12 03:58:08.658]:ADTRACE :
  3517. <nds dtdversion="2.2">
  3518. <source>
  3519. <product version="4.0.1.0">DirXML</product>
  3520. <contact>Novell, Inc.</contact>
  3521. </source>
  3522. <input>
  3523. <status level="success" type="heartbeat"/>
  3524. </input>
  3525. </nds>
  3526. [07/10/12 03:58:08.658]:ADTRACE :Remote Interface Driver: Received document for publisher channel
  3527. [07/10/12 03:58:08.658]:ADTRACE :Remote Interface Driver: Waiting for receive...
  3528. [07/10/12 03:58:08.658]:ADTRACE PT:Receiving DOM document from application.
  3529. [07/10/12 03:58:08.658]:ADTRACE PT:
  3530. <nds dtdversion="2.2">
  3531. <source>
  3532. <product version="4.0.1.0">DirXML</product>
  3533. <contact>Novell, Inc.</contact>
  3534. </source>
  3535. <input>
  3536. <status level="success" type="heartbeat"/>
  3537. </input>
  3538. </nds>
  3539. [07/10/12 03:58:08.658]:ADTRACE PT:Applying input transformation policies.
  3540. [07/10/12 03:58:08.658]:ADTRACE PT:Applying policy: %+C%14CNOVLAUDTENTC-itp-SendEntitlementsEvents%-C.
  3541. [07/10/12 03:58:08.673]:ADTRACE PT: Applying to status #1.
  3542. [07/10/12 03:58:08.673]:ADTRACE PT: Evaluating selection criteria for rule '00031200 - Account Create By Entitlement Grant'.
  3543. [07/10/12 03:58:08.673]:ADTRACE PT: (if-operation equal "status") = TRUE.
  3544. [07/10/12 03:58:08.673]:ADTRACE PT: (if-op-property 'accountAction' equal "accountCreateByEntitlementGrant") = FALSE.
  3545. [07/10/12 03:58:08.673]:ADTRACE PT: Rule rejected.
  3546. [07/10/12 03:58:08.673]:ADTRACE PT: Evaluating selection criteria for rule '00031201 - Account Delete By Entitlement Revoke'.
  3547. [07/10/12 03:58:08.673]:ADTRACE PT: (if-operation equal "status") = TRUE.
  3548. [07/10/12 03:58:08.673]:ADTRACE PT: (if-xpath true "./operation-data/entitlement-impl/@state = '0'") = FALSE.
  3549. [07/10/12 03:58:08.673]:ADTRACE PT: (if-operation equal "status") = TRUE.
  3550. [07/10/12 03:58:08.673]:ADTRACE PT: (if-op-property 'accountAction' equal "accountDeleteByEntitlementRevoke") = FALSE.
  3551. [07/10/12 03:58:08.673]:ADTRACE PT: Rule rejected.
  3552. [07/10/12 03:58:08.673]:ADTRACE PT: Evaluating selection criteria for rule '00031202 - Account Disable By Entitlement Revoke'.
  3553. [07/10/12 03:58:08.673]:ADTRACE PT: (if-operation equal "status") = TRUE.
  3554. [07/10/12 03:58:08.673]:ADTRACE PT: (if-op-property 'accountAction' equal "accountDisableByEntitlementRevoke") = FALSE.
  3555. [07/10/12 03:58:08.673]:ADTRACE PT: Rule rejected.
  3556. [07/10/12 03:58:08.673]:ADTRACE PT: Evaluating selection criteria for rule '00031203 - Account Enable By Entitlement Grant'.
  3557. [07/10/12 03:58:08.673]:ADTRACE PT: (if-operation equal "status") = TRUE.
  3558. [07/10/12 03:58:08.673]:ADTRACE PT: (if-op-property 'accountAction' equal "accountEnableByEntitlementGrant") = FALSE.
  3559. [07/10/12 03:58:08.673]:ADTRACE PT: Rule rejected.
  3560. [07/10/12 03:58:08.673]:ADTRACE PT: Evaluating selection criteria for rule 'Generate Audit Event'.
  3561. [07/10/12 03:58:08.673]:ADTRACE PT: (if-operation equal "status") = TRUE.
  3562. [07/10/12 03:58:08.673]:ADTRACE PT: (if-local-variable 'auditEventID' available) = FALSE.
  3563. [07/10/12 03:58:08.673]:ADTRACE PT: Rule rejected.
  3564. [07/10/12 03:58:08.673]:ADTRACE PT:Policy returned:
  3565. [07/10/12 03:58:08.673]:ADTRACE PT:
  3566. <nds dtdversion="2.2">
  3567. <source>
  3568. <product version="4.0.1.0">DirXML</product>
  3569. <contact>Novell, Inc.</contact>
  3570. </source>
  3571. <input>
  3572. <status level="success" type="heartbeat"/>
  3573. </input>
  3574. </nds>
  3575. [07/10/12 03:58:08.673]:ADTRACE PT:Applying policy: %+C%14CNOVLADENTEX-itp-InitEntitlementConfigurationResource%-C.
  3576. [07/10/12 03:58:08.673]:ADTRACE PT: Applying to status #1.
  3577. [07/10/12 03:58:08.689]:ADTRACE PT: Evaluating selection criteria for rule 'Make sure we only run once and when we're ready'.
  3578. [07/10/12 03:58:08.689]:ADTRACE PT: (if-local-variable 'objectClass' match ".+") = TRUE.
  3579. [07/10/12 03:58:08.689]:ADTRACE PT: (if-local-variable 'entConfigInitialized' equal "true") = TRUE.
  3580. [07/10/12 03:58:08.689]:ADTRACE PT: Rule selected.
  3581. [07/10/12 03:58:08.689]:ADTRACE PT: Applying rule 'Make sure we only run once and when we're ready'.
  3582. [07/10/12 03:58:08.689]:ADTRACE PT: Action: do-break().
  3583. [07/10/12 03:58:08.689]:ADTRACE PT:Policy returned:
  3584. [07/10/12 03:58:08.689]:ADTRACE PT:
  3585. <nds dtdversion="2.2">
  3586. <source>
  3587. <product version="4.0.1.0">DirXML</product>
  3588. <contact>Novell, Inc.</contact>
  3589. </source>
  3590. <input>
  3591. <status level="success" type="heartbeat"/>
  3592. </input>
  3593. </nds>
  3594. [07/10/12 03:58:08.689]:ADTRACE PT:Applying policy: %+C%14CNOVLADMSINFO-itp-InitManagedSystemInfo%-C.
  3595. [07/10/12 03:58:08.689]:ADTRACE PT: Applying to status #1.
  3596. [07/10/12 03:58:08.689]:ADTRACE PT: Evaluating selection criteria for rule 'Make sure we only run once and when we're ready'.
  3597. [07/10/12 03:58:08.689]:ADTRACE PT: (if-local-variable 'objectClass' match ".+") = TRUE.
  3598. [07/10/12 03:58:08.689]:ADTRACE PT: (if-local-variable 'mSysInfoInitialized' equal "true") = TRUE.
  3599. [07/10/12 03:58:08.689]:ADTRACE PT: Rule selected.
  3600. [07/10/12 03:58:08.689]:ADTRACE PT: Applying rule 'Make sure we only run once and when we're ready'.
  3601. [07/10/12 03:58:08.689]:ADTRACE PT: Action: do-break().
  3602. [07/10/12 03:58:08.689]:ADTRACE PT:Policy returned:
  3603. [07/10/12 03:58:08.689]:ADTRACE PT:
  3604. <nds dtdversion="2.2">
  3605. <source>
  3606. <product version="4.0.1.0">DirXML</product>
  3607. <contact>Novell, Inc.</contact>
  3608. </source>
  3609. <input>
  3610. <status level="success" type="heartbeat"/>
  3611. </input>
  3612. </nds>
  3613. [07/10/12 03:58:08.689]:ADTRACE PT:Applying policy: %+C%14CNOVLATRKBASE-itp-Publish%-C.
  3614. [07/10/12 03:58:08.689]:ADTRACE PT: Applying to status #1.
  3615. [07/10/12 03:58:08.689]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled or wrong object class'.
  3616. [07/10/12 03:58:08.689]:ADTRACE PT: Rule selected.
  3617. [07/10/12 03:58:08.689]:ADTRACE PT: Applying rule 'AccountTracking - disregard if disabled or wrong object class'.
  3618. [07/10/12 03:58:08.689]:ADTRACE PT: Action: do-if().
  3619. [07/10/12 03:58:08.689]:ADTRACE PT: Evaluating conditions.
  3620. [07/10/12 03:58:08.689]:ADTRACE PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  3621. [07/10/12 03:58:08.689]:ADTRACE PT: Performing else actions.
  3622. [07/10/12 03:58:08.689]:ADTRACE PT: Action: do-if().
  3623. [07/10/12 03:58:08.689]:ADTRACE PT: Evaluating conditions.
  3624. [07/10/12 03:58:08.689]:ADTRACE PT: (if-class-name available) = FALSE.
  3625. [07/10/12 03:58:08.689]:ADTRACE PT: Performing else actions.
  3626. [07/10/12 03:58:08.689]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - on add-association sync the operation-properties to status operations'.
  3627. [07/10/12 03:58:08.689]:ADTRACE PT: (if-operation equal "add-association") = FALSE.
  3628. [07/10/12 03:58:08.689]:ADTRACE PT: Rule rejected.
  3629. [07/10/12 03:58:08.689]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - Query for destination DN using Association'.
  3630. [07/10/12 03:58:08.689]:ADTRACE PT: (if-operation match "modify|delete|move|rename") = FALSE.
  3631. [07/10/12 03:58:08.689]:ADTRACE PT: Rule rejected.
  3632. [07/10/12 03:58:08.689]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - add interested properties to current doc for future use.'.
  3633. [07/10/12 03:58:08.689]:ADTRACE PT: (if-operation match "add|modify|delete|rename|move|status") = TRUE.
  3634. [07/10/12 03:58:08.689]:ADTRACE PT: Rule selected.
  3635. [07/10/12 03:58:08.689]:ADTRACE PT: Applying rule 'AccountTracking - add interested properties to current doc for future use.'.
  3636. [07/10/12 03:58:08.689]:ADTRACE PT: Action: do-for-each(arg-node-set(token-global-variable("drv.acctTrk.identifiers"))).
  3637. [07/10/12 03:58:08.689]:ADTRACE PT: arg-node-set(token-global-variable("drv.acctTrk.identifiers"))
  3638. [07/10/12 03:58:08.689]:ADTRACE PT: token-global-variable("drv.acctTrk.identifiers")
  3639. [07/10/12 03:58:08.689]:ADTRACE PT: Token Value: {"sAMAccountName","userPrincipalName","LDAPDN","association"}.
  3640. [07/10/12 03:58:08.689]:ADTRACE PT: Arg Value: {"sAMAccountName","userPrincipalName","LDAPDN","association"}.
  3641. [07/10/12 03:58:08.689]:ADTRACE PT: Performing actions for local-variable(current-node) = "sAMAccountName".
  3642. [07/10/12 03:58:08.689]:ADTRACE PT: Action: do-if().
  3643. [07/10/12 03:58:08.689]:ADTRACE PT: Evaluating conditions.
  3644. [07/10/12 03:58:08.689]:ADTRACE PT: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  3645. [07/10/12 03:58:08.689]:ADTRACE PT: Performing else actions.
  3646. [07/10/12 03:58:08.689]:ADTRACE PT: Action: do-if().
  3647. [07/10/12 03:58:08.689]:ADTRACE PT: Evaluating conditions.
  3648. [07/10/12 03:58:08.689]:ADTRACE PT: (if-local-variable 'current-node' equal "association") = FALSE.
  3649. [07/10/12 03:58:08.704]:ADTRACE PT: Performing else actions.
  3650. [07/10/12 03:58:08.704]:ADTRACE PT: Action: do-if().
  3651. [07/10/12 03:58:08.704]:ADTRACE PT: Evaluating conditions.
  3652. [07/10/12 03:58:08.704]:ADTRACE PT: Expanded variable reference '$current-node$' to 'sAMAccountName'.
  3653. [07/10/12 03:58:08.704]:ADTRACE PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  3654. [07/10/12 03:58:08.704]:ADTRACE PT: Expanded variable reference '$current-node$' to 'sAMAccountName'.
  3655. [07/10/12 03:58:08.704]:ADTRACE PT: (if-op-attr '$current-node$' available) = FALSE.
  3656. [07/10/12 03:58:08.704]:ADTRACE PT: Performing else actions.
  3657. [07/10/12 03:58:08.704]:ADTRACE PT: Performing actions for local-variable(current-node) = "userPrincipalName".
  3658. [07/10/12 03:58:08.704]:ADTRACE PT: Action: do-if().
  3659. [07/10/12 03:58:08.704]:ADTRACE PT: Evaluating conditions.
  3660. [07/10/12 03:58:08.704]:ADTRACE PT: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  3661. [07/10/12 03:58:08.704]:ADTRACE PT: Performing else actions.
  3662. [07/10/12 03:58:08.704]:ADTRACE PT: Action: do-if().
  3663. [07/10/12 03:58:08.704]:ADTRACE PT: Evaluating conditions.
  3664. [07/10/12 03:58:08.704]:ADTRACE PT: (if-local-variable 'current-node' equal "association") = FALSE.
  3665. [07/10/12 03:58:08.704]:ADTRACE PT: Performing else actions.
  3666. [07/10/12 03:58:08.704]:ADTRACE PT: Action: do-if().
  3667. [07/10/12 03:58:08.704]:ADTRACE PT: Evaluating conditions.
  3668. [07/10/12 03:58:08.704]:ADTRACE PT: Expanded variable reference '$current-node$' to 'userPrincipalName'.
  3669. [07/10/12 03:58:08.704]:ADTRACE PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  3670. [07/10/12 03:58:08.704]:ADTRACE PT: Expanded variable reference '$current-node$' to 'userPrincipalName'.
  3671. [07/10/12 03:58:08.704]:ADTRACE PT: (if-op-attr '$current-node$' available) = FALSE.
  3672. [07/10/12 03:58:08.704]:ADTRACE PT: Performing else actions.
  3673. [07/10/12 03:58:08.704]:ADTRACE PT: Performing actions for local-variable(current-node) = "LDAPDN".
  3674. [07/10/12 03:58:08.704]:ADTRACE PT: Action: do-if().
  3675. [07/10/12 03:58:08.704]:ADTRACE PT: Evaluating conditions.
  3676. [07/10/12 03:58:08.704]:ADTRACE PT: (if-local-variable 'current-node' equal "LDAPDN") = TRUE.
  3677. [07/10/12 03:58:08.704]:ADTRACE PT: Expanded variable reference '$current-node$' to 'LDAPDN'.
  3678. [07/10/12 03:58:08.704]:ADTRACE PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  3679. [07/10/12 03:58:08.704]:ADTRACE PT: (if-src-dn available) = FALSE.
  3680. [07/10/12 03:58:08.704]:ADTRACE PT: Performing else actions.
  3681. [07/10/12 03:58:08.704]:ADTRACE PT: Action: do-if().
  3682. [07/10/12 03:58:08.704]:ADTRACE PT: Evaluating conditions.
  3683. [07/10/12 03:58:08.704]:ADTRACE PT: (if-local-variable 'current-node' equal "association") = FALSE.
  3684. [07/10/12 03:58:08.704]:ADTRACE PT: Performing else actions.
  3685. [07/10/12 03:58:08.704]:ADTRACE PT: Action: do-if().
  3686. [07/10/12 03:58:08.704]:ADTRACE PT: Evaluating conditions.
  3687. [07/10/12 03:58:08.704]:ADTRACE PT: Expanded variable reference '$current-node$' to 'LDAPDN'.
  3688. [07/10/12 03:58:08.704]:ADTRACE PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  3689. [07/10/12 03:58:08.704]:ADTRACE PT: Expanded variable reference '$current-node$' to 'LDAPDN'.
  3690. [07/10/12 03:58:08.704]:ADTRACE PT: (if-op-attr '$current-node$' available) = FALSE.
  3691. [07/10/12 03:58:08.704]:ADTRACE PT: Performing else actions.
  3692. [07/10/12 03:58:08.704]:ADTRACE PT: Performing actions for local-variable(current-node) = "association".
  3693. [07/10/12 03:58:08.704]:ADTRACE PT: Action: do-if().
  3694. [07/10/12 03:58:08.704]:ADTRACE PT: Evaluating conditions.
  3695. [07/10/12 03:58:08.704]:ADTRACE PT: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  3696. [07/10/12 03:58:08.704]:ADTRACE PT: Performing else actions.
  3697. [07/10/12 03:58:08.704]:ADTRACE PT: Action: do-if().
  3698. [07/10/12 03:58:08.704]:ADTRACE PT: Evaluating conditions.
  3699. [07/10/12 03:58:08.704]:ADTRACE PT: (if-local-variable 'current-node' equal "association") = TRUE.
  3700. [07/10/12 03:58:08.704]:ADTRACE PT: Expanded variable reference '$current-node$' to 'association'.
  3701. [07/10/12 03:58:08.704]:ADTRACE PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  3702. [07/10/12 03:58:08.720]:ADTRACE PT: (if-association available) = FALSE.
  3703. [07/10/12 03:58:08.720]:ADTRACE PT: Performing else actions.
  3704. [07/10/12 03:58:08.720]:ADTRACE PT: Action: do-if().
  3705. [07/10/12 03:58:08.720]:ADTRACE PT: Evaluating conditions.
  3706. [07/10/12 03:58:08.720]:ADTRACE PT: Expanded variable reference '$current-node$' to 'association'.
  3707. [07/10/12 03:58:08.720]:ADTRACE PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  3708. [07/10/12 03:58:08.720]:ADTRACE PT: Expanded variable reference '$current-node$' to 'association'.
  3709. [07/10/12 03:58:08.720]:ADTRACE PT: (if-op-attr '$current-node$' available) = FALSE.
  3710. [07/10/12 03:58:08.720]:ADTRACE PT: Performing else actions.
  3711. [07/10/12 03:58:08.720]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - Initialize status properties on published events'.
  3712. [07/10/12 03:58:08.720]:ADTRACE PT: (if-operation match "add|modify|delete|rename|move") = FALSE.
  3713. [07/10/12 03:58:08.720]:ADTRACE PT: Rule rejected.
  3714. [07/10/12 03:58:08.720]:ADTRACE PT:Policy returned:
  3715. [07/10/12 03:58:08.720]:ADTRACE PT:
  3716. <nds dtdversion="2.2">
  3717. <source>
  3718. <product version="4.0.1.0">DirXML</product>
  3719. <contact>Novell, Inc.</contact>
  3720. </source>
  3721. <input>
  3722. <status level="success" type="heartbeat"/>
  3723. </input>
  3724. </nds>
  3725. [07/10/12 03:58:08.720]:ADTRACE PT:Applying policy: %+C%14CNOVLATRKBASE-itp-WriteAccounts%-C.
  3726. [07/10/12 03:58:08.720]:ADTRACE PT: Applying to status #1.
  3727. [07/10/12 03:58:08.720]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - Initialize Realm Mapping'.
  3728. [07/10/12 03:58:08.720]:ADTRACE PT: (if-global-variable 'drv.acctTrk.enable' equal "true") = TRUE.
  3729. [07/10/12 03:58:08.720]:ADTRACE PT: (if-global-variable 'drv.acctTrk.mode' equal "fanout") = FALSE.
  3730. [07/10/12 03:58:08.720]:ADTRACE PT: Rule rejected.
  3731. [07/10/12 03:58:08.720]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled'.
  3732. [07/10/12 03:58:08.720]:ADTRACE PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  3733. [07/10/12 03:58:08.720]:ADTRACE PT: Rule rejected.
  3734. [07/10/12 03:58:08.720]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - query DirXML-Accounts Attribute'.
  3735. [07/10/12 03:58:08.720]:ADTRACE PT: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  3736. [07/10/12 03:58:08.720]:ADTRACE PT: Rule rejected.
  3737. [07/10/12 03:58:08.720]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - remove Dirxml-Account values on regular delete operation'.
  3738. [07/10/12 03:58:08.720]:ADTRACE PT: (if-operation match "delete|remove-association") = FALSE.
  3739. [07/10/12 03:58:08.720]:ADTRACE PT: (if-operation equal "status") = TRUE.
  3740. [07/10/12 03:58:08.720]:ADTRACE PT: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  3741. [07/10/12 03:58:08.720]:ADTRACE PT: Rule rejected.
  3742. [07/10/12 03:58:08.720]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - update DirXMLAccounts attribute on regular operations'.
  3743. [07/10/12 03:58:08.720]:ADTRACE PT: (if-op-property 'AccountTracking-Operation' not-available) = TRUE.
  3744. [07/10/12 03:58:08.720]:ADTRACE PT: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  3745. [07/10/12 03:58:08.720]:ADTRACE PT: (if-operation equal "status") = TRUE.
  3746. [07/10/12 03:58:08.720]:ADTRACE PT: (if-xpath true "./@level='success' or ./@level='warning'") = TRUE.
  3747. [07/10/12 03:58:08.720]:ADTRACE PT: (if-op-property 'AccountTracking-Operation' available) = FALSE.
  3748. [07/10/12 03:58:08.720]:ADTRACE PT: Rule rejected.
  3749. [07/10/12 03:58:08.720]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - update DirXMLAccounts attribute on mapped operations'.
  3750. [07/10/12 03:58:08.720]:ADTRACE PT: (if-xpath true "operation-data/account-tracking-operation") = FALSE.
  3751. [07/10/12 03:58:08.720]:ADTRACE PT: (if-xpath true "operation-data/account-tracking-operation") = FALSE.
  3752. [07/10/12 03:58:08.720]:ADTRACE PT: Rule rejected.
  3753. [07/10/12 03:58:08.720]:ADTRACE PT:Policy returned:
  3754. [07/10/12 03:58:08.720]:ADTRACE PT:
  3755. <nds dtdversion="2.2">
  3756. <source>
  3757. <product version="4.0.1.0">DirXML</product>
  3758. <contact>Novell, Inc.</contact>
  3759. </source>
  3760. <input>
  3761. <status level="success" type="heartbeat"/>
  3762. </input>
  3763. </nds>
  3764. [07/10/12 03:58:08.720]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-itp-SubscriberUserAdd%-C.
  3765. [07/10/12 03:58:08.720]:ADTRACE PT: Applying to status #1.
  3766. [07/10/12 03:58:08.720]:ADTRACE PT: Evaluating selection criteria for rule 'Populate DirXML-ADContext on initial user add'.
  3767. [07/10/12 03:58:08.720]:ADTRACE PT: (if-operation equal "add-association") = FALSE.
  3768. [07/10/12 03:58:08.736]:ADTRACE PT: Rule rejected.
  3769. [07/10/12 03:58:08.736]:ADTRACE PT:Policy returned:
  3770. [07/10/12 03:58:08.736]:ADTRACE PT:
  3771. <nds dtdversion="2.2">
  3772. <source>
  3773. <product version="4.0.1.0">DirXML</product>
  3774. <contact>Novell, Inc.</contact>
  3775. </source>
  3776. <input>
  3777. <status level="success" type="heartbeat"/>
  3778. </input>
  3779. </nds>
  3780. [07/10/12 03:58:08.736]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-itp-FormatConversions%-C.
  3781. [07/10/12 03:58:08.736]:ADTRACE PT: Applying to status #1.
  3782. [07/10/12 03:58:08.736]:ADTRACE PT: Evaluating selection criteria for rule 'streetAddress: Convert CR-LF to LF'.
  3783. [07/10/12 03:58:08.736]:ADTRACE PT: Rule selected.
  3784. [07/10/12 03:58:08.736]:ADTRACE PT: Applying rule 'streetAddress: Convert CR-LF to LF'.
  3785. [07/10/12 03:58:08.736]:ADTRACE PT: Action: do-reformat-op-attr("streetAddress",token-replace-all("\r\n","\r",token-local-variable("current-value"))).
  3786. [07/10/12 03:58:08.736]:ADTRACE PT: Evaluating selection criteria for rule 'logonHours: Convert to Login Allowed Time Map form'.
  3787. [07/10/12 03:58:08.736]:ADTRACE PT: Rule selected.
  3788. [07/10/12 03:58:08.736]:ADTRACE PT: Applying rule 'logonHours: Convert to Login Allowed Time Map form'.
  3789. [07/10/12 03:58:08.736]:ADTRACE PT: Action: do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2eDir($current-value)")).
  3790. [07/10/12 03:58:08.736]:ADTRACE PT: Evaluating selection criteria for rule 'accountExpires: Convert to Identity Vault time format'.
  3791. [07/10/12 03:58:08.736]:ADTRACE PT: Rule selected.
  3792. [07/10/12 03:58:08.736]:ADTRACE PT: Applying rule 'accountExpires: Convert to Identity Vault time format'.
  3793. [07/10/12 03:58:08.736]:ADTRACE PT: Action: do-reformat-op-attr("accountExpires",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
  3794. [07/10/12 03:58:08.736]:ADTRACE PT: Evaluating selection criteria for rule 'lockoutTime: Convert to Identity Vault time format'.
  3795. [07/10/12 03:58:08.736]:ADTRACE PT: Rule selected.
  3796. [07/10/12 03:58:08.736]:ADTRACE PT: Applying rule 'lockoutTime: Convert to Identity Vault time format'.
  3797. [07/10/12 03:58:08.736]:ADTRACE PT: Action: do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
  3798. [07/10/12 03:58:08.736]:ADTRACE PT:Policy returned:
  3799. [07/10/12 03:58:08.736]:ADTRACE PT:
  3800. <nds dtdversion="2.2">
  3801. <source>
  3802. <product version="4.0.1.0">DirXML</product>
  3803. <contact>Novell, Inc.</contact>
  3804. </source>
  3805. <input>
  3806. <status level="success" type="heartbeat"/>
  3807. </input>
  3808. </nds>
  3809. [07/10/12 03:58:08.736]:ADTRACE PT:Applying policy: %+C%14CNOVLDATACOLL-itp-DataCollectionQuerySupport%-C.
  3810. [07/10/12 03:58:08.736]:ADTRACE PT: Applying to status #1.
  3811. [07/10/12 03:58:08.736]:ADTRACE PT: Evaluating selection criteria for rule 'Rename @association-ref to @association and change @type from "dn" to "{dn}"'.
  3812. [07/10/12 03:58:08.736]:ADTRACE PT: (if-operation equal "instance") = FALSE.
  3813. [07/10/12 03:58:08.736]:ADTRACE PT: Rule rejected.
  3814. [07/10/12 03:58:08.736]:ADTRACE PT:Policy returned:
  3815. [07/10/12 03:58:08.736]:ADTRACE PT:
  3816. <nds dtdversion="2.2">
  3817. <source>
  3818. <product version="4.0.1.0">DirXML</product>
  3819. <contact>Novell, Inc.</contact>
  3820. </source>
  3821. <input>
  3822. <status level="success" type="heartbeat"/>
  3823. </input>
  3824. </nds>
  3825. [07/10/12 03:58:08.736]:ADTRACE PT:Applying policy: %+C%14CNOVLADENTEX-itp-EntitlementsImpl%-C.
  3826. [07/10/12 03:58:08.736]:ADTRACE PT: Applying to status #1.
  3827. [07/10/12 03:58:08.736]:ADTRACE PT: Evaluating selection criteria for rule 'Intercept ADDomain (tagged identity query) query response'.
  3828. [07/10/12 03:58:08.736]:ADTRACE PT: (if-operation equal "instance") = FALSE.
  3829. [07/10/12 03:58:08.736]:ADTRACE PT: Rule rejected.
  3830. [07/10/12 03:58:08.736]:ADTRACE PT: Evaluating selection criteria for rule 'Intercept ADDomain (tagged identity query) query status'.
  3831. [07/10/12 03:58:08.736]:ADTRACE PT: (if-xpath true "../status[@event-id='query-driver-ident']/operation-data/@UserAccountEntitlementQuery") = FALSE.
  3832. [07/10/12 03:58:08.736]:ADTRACE PT: Rule rejected.
  3833. [07/10/12 03:58:08.736]:ADTRACE PT: Evaluating selection criteria for rule 'Check target of add-association for group membership entitlements'.
  3834. [07/10/12 03:58:08.736]:ADTRACE PT: (if-global-variable 'drv.entitlement.Group' equal "true") = TRUE.
  3835. [07/10/12 03:58:08.736]:ADTRACE PT: (if-operation equal "add-association") = FALSE.
  3836. [07/10/12 03:58:08.736]:ADTRACE PT: Rule rejected.
  3837. [07/10/12 03:58:08.736]:ADTRACE PT: Evaluating selection criteria for rule 'Check target of add-association for Exchange mailbox entitlements'.
  3838. [07/10/12 03:58:08.736]:ADTRACE PT: (if-global-variable 'drv.exchMailboxMethod' equal "entitlement") = FALSE.
  3839. [07/10/12 03:58:08.736]:ADTRACE PT: Rule rejected.
  3840. [07/10/12 03:58:08.736]:ADTRACE PT:Policy returned:
  3841. [07/10/12 03:58:08.736]:ADTRACE PT:
  3842. <nds dtdversion="2.2">
  3843. <source>
  3844. <product version="4.0.1.0">DirXML</product>
  3845. <contact>Novell, Inc.</contact>
  3846. </source>
  3847. <input>
  3848. <status level="success" type="heartbeat"/>
  3849. </input>
  3850. </nds>
  3851. [07/10/12 03:58:08.751]:ADTRACE PT:Applying policy: %+C%14CNOVLPWDSYNC-itp-EmailOnFailedPwdSub%-C.
  3852. [07/10/12 03:58:08.751]:ADTRACE PT: Applying to status #1.
  3853. [07/10/12 03:58:08.751]:ADTRACE PT: Evaluating selection criteria for rule 'Send e-mail on a failure when subscribing to passwords'.
  3854. [07/10/12 03:58:08.751]:ADTRACE PT: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  3855. [07/10/12 03:58:08.751]:ADTRACE PT: (if-operation equal "status") = TRUE.
  3856. [07/10/12 03:58:08.751]:ADTRACE PT: (if-xpath true "self::status[@level != 'success'][text() != '']/operation-data/password-subscribe-status/association[text() != '']") = FALSE.
  3857. [07/10/12 03:58:08.751]:ADTRACE PT: Rule rejected.
  3858. [07/10/12 03:58:08.751]:ADTRACE PT: Evaluating selection criteria for rule 'Send e-mail on failure to reset connected system password using the Identity Vault password'.
  3859. [07/10/12 03:58:08.751]:ADTRACE PT: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  3860. [07/10/12 03:58:08.751]:ADTRACE PT: (if-operation equal "status") = TRUE.
  3861. [07/10/12 03:58:08.751]:ADTRACE PT: (if-xpath true "self::status[@level != 'success']/operation-data/password-reset-status") = FALSE.
  3862. [07/10/12 03:58:08.751]:ADTRACE PT: Rule rejected.
  3863. [07/10/12 03:58:08.751]:ADTRACE PT:Policy returned:
  3864. [07/10/12 03:58:08.751]:ADTRACE PT:
  3865. <nds dtdversion="2.2">
  3866. <source>
  3867. <product version="4.0.1.0">DirXML</product>
  3868. <contact>Novell, Inc.</contact>
  3869. </source>
  3870. <input>
  3871. <status level="success" type="heartbeat"/>
  3872. </input>
  3873. </nds>
  3874. [07/10/12 03:58:08.751]:ADTRACE PT:Applying schema mapping policies to input.
  3875. [07/10/12 03:58:08.751]:ADTRACE PT:Applying policy: %+C%14CNOVLDATACOLL-smp-SkipSchemaMapping%-C.
  3876. [07/10/12 03:58:08.751]:ADTRACE PT: Applying to status #1.
  3877. [07/10/12 03:58:08.751]:ADTRACE PT: Evaluating selection criteria for rule 'skip'.
  3878. [07/10/12 03:58:08.751]:ADTRACE PT: (if-operation equal "instance") = FALSE.
  3879. [07/10/12 03:58:08.751]:ADTRACE PT: Rule rejected.
  3880. [07/10/12 03:58:08.751]:ADTRACE PT: Evaluating selection criteria for rule 'restore'.
  3881. [07/10/12 03:58:08.751]:ADTRACE PT: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  3882. [07/10/12 03:58:08.751]:ADTRACE PT: Rule rejected.
  3883. [07/10/12 03:58:08.751]:ADTRACE PT:Policy returned:
  3884. [07/10/12 03:58:08.751]:ADTRACE PT:
  3885. <nds dtdversion="2.2">
  3886. <source>
  3887. <product version="4.0.1.0">DirXML</product>
  3888. <contact>Novell, Inc.</contact>
  3889. </source>
  3890. <input>
  3891. <status level="success" type="heartbeat"/>
  3892. </input>
  3893. </nds>
  3894. [07/10/12 03:58:08.751]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-smp%-C.
  3895. [07/10/12 03:58:08.751]:ADTRACE PT:Applying policy: %+C%14CNOVLDATACOLL-smp-SkipSchemaMapping%-C.
  3896. [07/10/12 03:58:08.751]:ADTRACE PT: Applying to status #1.
  3897. [07/10/12 03:58:08.751]:ADTRACE PT: Evaluating selection criteria for rule 'skip'.
  3898. [07/10/12 03:58:08.751]:ADTRACE PT: (if-operation equal "instance") = FALSE.
  3899. [07/10/12 03:58:08.751]:ADTRACE PT: Rule rejected.
  3900. [07/10/12 03:58:08.751]:ADTRACE PT: Evaluating selection criteria for rule 'restore'.
  3901. [07/10/12 03:58:08.751]:ADTRACE PT: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  3902. [07/10/12 03:58:08.751]:ADTRACE PT: Rule rejected.
  3903. [07/10/12 03:58:08.751]:ADTRACE PT:Policy returned:
  3904. [07/10/12 03:58:08.751]:ADTRACE PT:
  3905. <nds dtdversion="2.2">
  3906. <source>
  3907. <product version="4.0.1.0">DirXML</product>
  3908. <contact>Novell, Inc.</contact>
  3909. </source>
  3910. <input>
  3911. <status level="success" type="heartbeat"/>
  3912. </input>
  3913. </nds>
  3914. [07/10/12 03:58:08.751]:ADTRACE PT:Resolving association references.
  3915. [07/10/12 03:58:08.751]:ADTRACE PT:Applying event transformation policies.
  3916. [07/10/12 03:58:08.751]:ADTRACE PT:Applying policy: %+C%14CNOVLADENTEX-pub-etp-EntitlementsImpl%-C.
  3917. [07/10/12 03:58:08.751]:ADTRACE PT: Applying to status #1.
  3918. [07/10/12 03:58:08.751]:ADTRACE PT: Evaluating selection criteria for rule 'Disallow user account delete when using entitlements'.
  3919. [07/10/12 03:58:08.751]:ADTRACE PT: (if-operation equal "delete") = FALSE.
  3920. [07/10/12 03:58:08.751]:ADTRACE PT: Rule rejected.
  3921. [07/10/12 03:58:08.751]:ADTRACE PT: Evaluating selection criteria for rule 'Strip Login Disabled from operation (Disable Option)'.
  3922. [07/10/12 03:58:08.751]:ADTRACE PT: (if-global-variable 'drv.entitlement.UserAccount' equal "true") = TRUE.
  3923. [07/10/12 03:58:08.751]:ADTRACE PT: (if-global-variable 'drv.entitlement.remove' equal "disable") = TRUE.
  3924. [07/10/12 03:58:08.751]:ADTRACE PT: (if-class-name equal "User") = FALSE.
  3925. [07/10/12 03:58:08.751]:ADTRACE PT: Rule rejected.
  3926. [07/10/12 03:58:08.751]:ADTRACE PT:Policy returned:
  3927. [07/10/12 03:58:08.751]:ADTRACE PT:
  3928. <nds dtdversion="2.2">
  3929. <source>
  3930. <product version="4.0.1.0">DirXML</product>
  3931. <contact>Novell, Inc.</contact>
  3932. </source>
  3933. <input>
  3934. <status level="success" type="heartbeat"/>
  3935. </input>
  3936. </nds>
  3937. [07/10/12 03:58:08.751]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-pub-etp-HandleMovesAndRenames%-C.
  3938. [07/10/12 03:58:08.751]:ADTRACE PT: Applying to status #1.
  3939. [07/10/12 03:58:08.751]:ADTRACE PT: Evaluating selection criteria for rule 'break if not a move or rename'.
  3940. [07/10/12 03:58:08.767]:ADTRACE PT: (if-operation not-match "move|rename") = TRUE.
  3941. [07/10/12 03:58:08.767]:ADTRACE PT: Rule selected.
  3942. [07/10/12 03:58:08.767]:ADTRACE PT: Applying rule 'break if not a move or rename'.
  3943. [07/10/12 03:58:08.767]:ADTRACE PT: Action: do-break().
  3944. [07/10/12 03:58:08.767]:ADTRACE PT:Policy returned:
  3945. [07/10/12 03:58:08.767]:ADTRACE PT:
  3946. <nds dtdversion="2.2">
  3947. <source>
  3948. <product version="4.0.1.0">DirXML</product>
  3949. <contact>Novell, Inc.</contact>
  3950. </source>
  3951. <input>
  3952. <status level="success" type="heartbeat"/>
  3953. </input>
  3954. </nds>
  3955. [07/10/12 03:58:08.767]:ADTRACE PT:Applying publisher filter.
  3956. [07/10/12 03:58:08.767]:ADTRACE PT:Publisher processing status for .
  3957. [07/10/12 03:58:08.767]:ADTRACE PT:Applying command transformation policies.
  3958. [07/10/12 03:58:08.767]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-pub-ctp-UserNameMap%-C.
  3959. [07/10/12 03:58:08.767]:ADTRACE PT: Applying to status #1.
  3960. [07/10/12 03:58:08.767]:ADTRACE PT: Evaluating selection criteria for rule 'consider user objects when name mapping is enabled'.
  3961. [07/10/12 03:58:08.767]:ADTRACE PT: (if-class-name not-equal "User") = TRUE.
  3962. [07/10/12 03:58:08.767]:ADTRACE PT: Rule selected.
  3963. [07/10/12 03:58:08.767]:ADTRACE PT: Applying rule 'consider user objects when name mapping is enabled'.
  3964. [07/10/12 03:58:08.767]:ADTRACE PT: Action: do-break().
  3965. [07/10/12 03:58:08.767]:ADTRACE PT:Policy returned:
  3966. [07/10/12 03:58:08.767]:ADTRACE PT:
  3967. <nds dtdversion="2.2">
  3968. <source>
  3969. <product version="4.0.1.0">DirXML</product>
  3970. <contact>Novell, Inc.</contact>
  3971. </source>
  3972. <input>
  3973. <status level="success" type="heartbeat"/>
  3974. </input>
  3975. </nds>
  3976. [07/10/12 03:58:08.767]:ADTRACE PT:Applying policy: %+C%14CNOVLPWDSYNC-pub-ctp-DefaultPwd%-C.
  3977. [07/10/12 03:58:08.767]:ADTRACE PT: Applying to status #1.
  3978. [07/10/12 03:58:08.767]:ADTRACE PT: Evaluating selection criteria for rule 'On User add, provide default password of @Dirxml1 if no password exists'.
  3979. [07/10/12 03:58:08.767]:ADTRACE PT: (if-operation equal "add") = FALSE.
  3980. [07/10/12 03:58:08.767]:ADTRACE PT: Rule rejected.
  3981. [07/10/12 03:58:08.767]:ADTRACE PT:Policy returned:
  3982. [07/10/12 03:58:08.767]:ADTRACE PT:
  3983. <nds dtdversion="2.2">
  3984. <source>
  3985. <product version="4.0.1.0">DirXML</product>
  3986. <contact>Novell, Inc.</contact>
  3987. </source>
  3988. <input>
  3989. <status level="success" type="heartbeat"/>
  3990. </input>
  3991. </nds>
  3992. [07/10/12 03:58:08.767]:ADTRACE PT:Applying policy: %+C%14CNOVLPWDSYNC-pub-ctp-CheckPwdGCV%-C.
  3993. [07/10/12 03:58:08.767]:ADTRACE PT: Applying to status #1.
  3994. [07/10/12 03:58:08.767]:ADTRACE PT: Evaluating selection criteria for rule 'Block publishing passwords to the Identity Vault when adding an object'.
  3995. [07/10/12 03:58:08.767]:ADTRACE PT: (if-global-variable 'enable-password-publish' equal "false") = FALSE.
  3996. [07/10/12 03:58:08.767]:ADTRACE PT: Rule rejected.
  3997. [07/10/12 03:58:08.767]:ADTRACE PT: Evaluating selection criteria for rule 'Block sending modify-password changes to the Identity Vault'.
  3998. [07/10/12 03:58:08.767]:ADTRACE PT: (if-global-variable 'enable-password-publish' equal "false") = FALSE.
  3999. [07/10/12 03:58:08.767]:ADTRACE PT: Rule rejected.
  4000. [07/10/12 03:58:08.767]:ADTRACE PT:Policy returned:
  4001. [07/10/12 03:58:08.767]:ADTRACE PT:
  4002. <nds dtdversion="2.2">
  4003. <source>
  4004. <product version="4.0.1.0">DirXML</product>
  4005. <contact>Novell, Inc.</contact>
  4006. </source>
  4007. <input>
  4008. <status level="success" type="heartbeat"/>
  4009. </input>
  4010. </nds>
  4011. [07/10/12 03:58:08.767]:ADTRACE PT:Applying policy: %+C%14CNOVLPWDSYNC-pub-ctp-PublishDistPwd%-C.
  4012. [07/10/12 03:58:08.767]:ADTRACE PT: Applying to status #1.
  4013. [07/10/12 03:58:08.767]:ADTRACE PT: Evaluating selection criteria for rule 'Add nspmDistributionAttribute attribute to add operation'.
  4014. [07/10/12 03:58:08.767]:ADTRACE PT: (if-global-variable 'publish-password-to-dp' equal "true") = FALSE.
  4015. [07/10/12 03:58:08.767]:ADTRACE PT: Rule rejected.
  4016. [07/10/12 03:58:08.767]:ADTRACE PT: Evaluating selection criteria for rule 'Change modify-password operations to a modify'.
  4017. [07/10/12 03:58:08.767]:ADTRACE PT: (if-global-variable 'publish-password-to-dp' equal "true") = FALSE.
  4018. [07/10/12 03:58:08.767]:ADTRACE PT: Rule rejected.
  4019. [07/10/12 03:58:08.767]:ADTRACE PT:Policy returned:
  4020. [07/10/12 03:58:08.767]:ADTRACE PT:
  4021. <nds dtdversion="2.2">
  4022. <source>
  4023. <product version="4.0.1.0">DirXML</product>
  4024. <contact>Novell, Inc.</contact>
  4025. </source>
  4026. <input>
  4027. <status level="success" type="heartbeat"/>
  4028. </input>
  4029. </nds>
  4030. [07/10/12 03:58:08.767]:ADTRACE PT:Applying policy: %+C%14CNOVLPWDSYNC-pub-ctp-PublishNDSPwd%-C.
  4031. [07/10/12 03:58:08.767]:ADTRACE PT: Applying to status #1.
  4032. [07/10/12 03:58:08.767]:ADTRACE PT: Evaluating selection criteria for rule 'Block publishing passwords to eDirectory password'.
  4033. [07/10/12 03:58:08.783]:ADTRACE PT: (if-global-variable 'publish-password-to-nds' equal "false") = FALSE.
  4034. [07/10/12 03:58:08.783]:ADTRACE PT: Rule rejected.
  4035. [07/10/12 03:58:08.783]:ADTRACE PT: Evaluating selection criteria for rule 'Block sending modify-password changes to the eDirectory password'.
  4036. [07/10/12 03:58:08.783]:ADTRACE PT: (if-global-variable 'publish-password-to-nds' equal "false") = FALSE.
  4037. [07/10/12 03:58:08.783]:ADTRACE PT: Rule rejected.
  4038. [07/10/12 03:58:08.783]:ADTRACE PT:Policy returned:
  4039. [07/10/12 03:58:08.783]:ADTRACE PT:
  4040. <nds dtdversion="2.2">
  4041. <source>
  4042. <product version="4.0.1.0">DirXML</product>
  4043. <contact>Novell, Inc.</contact>
  4044. </source>
  4045. <input>
  4046. <status level="success" type="heartbeat"/>
  4047. </input>
  4048. </nds>
  4049. [07/10/12 03:58:08.783]:ADTRACE PT:Applying policy: %+C%14CNOVLPWDSYNC-pub-ctp-AddPwdPayload%-C.
  4050. [07/10/12 03:58:08.783]:ADTRACE PT: Applying to status #1.
  4051. [07/10/12 03:58:08.783]:ADTRACE PT: Evaluating selection criteria for rule 'Add operation-data element to password operations'.
  4052. [07/10/12 03:58:08.783]:ADTRACE PT: (if-operation equal "add") = FALSE.
  4053. [07/10/12 03:58:08.783]:ADTRACE PT: (if-operation equal "add") = FALSE.
  4054. [07/10/12 03:58:08.783]:ADTRACE PT: (if-operation equal "modify-password") = FALSE.
  4055. [07/10/12 03:58:08.783]:ADTRACE PT: (if-operation equal "modify") = FALSE.
  4056. [07/10/12 03:58:08.783]:ADTRACE PT: Rule rejected.
  4057. [07/10/12 03:58:08.783]:ADTRACE PT: Evaluating selection criteria for rule 'Add payload data to password operations'.
  4058. [07/10/12 03:58:08.783]:ADTRACE PT: (if-operation equal "add") = FALSE.
  4059. [07/10/12 03:58:08.783]:ADTRACE PT: (if-operation equal "add") = FALSE.
  4060. [07/10/12 03:58:08.783]:ADTRACE PT: (if-operation equal "modify-password") = FALSE.
  4061. [07/10/12 03:58:08.783]:ADTRACE PT: (if-operation equal "modify") = FALSE.
  4062. [07/10/12 03:58:08.783]:ADTRACE PT: Rule rejected.
  4063. [07/10/12 03:58:08.783]:ADTRACE PT:Policy returned:
  4064. [07/10/12 03:58:08.783]:ADTRACE PT:
  4065. <nds dtdversion="2.2">
  4066. <source>
  4067. <product version="4.0.1.0">DirXML</product>
  4068. <contact>Novell, Inc.</contact>
  4069. </source>
  4070. <input>
  4071. <status level="success" type="heartbeat"/>
  4072. </input>
  4073. </nds>
  4074. [07/10/12 03:58:08.783]:ADTRACE PT:Applying policy: %+C%14CNOVLATRKBASE-pub-ctp-WriteAccountsOnAdds%-C.
  4075. [07/10/12 03:58:08.783]:ADTRACE PT: Applying to status #1.
  4076. [07/10/12 03:58:08.783]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - disregard policy if disabled'.
  4077. [07/10/12 03:58:08.783]:ADTRACE PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  4078. [07/10/12 03:58:08.783]:ADTRACE PT: Rule rejected.
  4079. [07/10/12 03:58:08.783]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - on add operation add Dirxml-Accounts'.
  4080. [07/10/12 03:58:08.783]:ADTRACE PT: (if-operation equal "add") = FALSE.
  4081. [07/10/12 03:58:08.783]:ADTRACE PT: Rule rejected.
  4082. [07/10/12 03:58:08.783]:ADTRACE PT:Policy returned:
  4083. [07/10/12 03:58:08.783]:ADTRACE PT:
  4084. <nds dtdversion="2.2">
  4085. <source>
  4086. <product version="4.0.1.0">DirXML</product>
  4087. <contact>Novell, Inc.</contact>
  4088. </source>
  4089. <input>
  4090. <status level="success" type="heartbeat"/>
  4091. </input>
  4092. </nds>
  4093. [07/10/12 03:58:08.783]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-pub-ctp%-C.
  4094. [07/10/12 03:58:08.783]:ADTRACE PT: Applying to status #1.
  4095. [07/10/12 03:58:08.783]:ADTRACE PT: Evaluating selection criteria for rule 'set cached context value on merge'.
  4096. [07/10/12 03:58:08.783]:ADTRACE PT: (if-operation equal "modify") = FALSE.
  4097. [07/10/12 03:58:08.783]:ADTRACE PT: Rule rejected.
  4098. [07/10/12 03:58:08.783]:ADTRACE PT: Evaluating selection criteria for rule 'remove managed attributes when object disassociated'.
  4099. [07/10/12 03:58:08.783]:ADTRACE PT: (if-operation equal "remove-association") = FALSE.
  4100. [07/10/12 03:58:08.783]:ADTRACE PT: Rule rejected.
  4101. [07/10/12 03:58:08.783]:ADTRACE PT: Evaluating selection criteria for rule 'Prevent unassociated users from being removed from groups'.
  4102. [07/10/12 03:58:08.783]:ADTRACE PT: (if-operation equal "modify") = FALSE.
  4103. [07/10/12 03:58:08.783]:ADTRACE PT: Rule rejected.
  4104. [07/10/12 03:58:08.783]:ADTRACE PT: Evaluating selection criteria for rule 'Set Equivalent To Me when group members change'.
  4105. [07/10/12 03:58:08.783]:ADTRACE PT: (if-class-name equal "Group") = FALSE.
  4106. [07/10/12 03:58:08.783]:ADTRACE PT: Rule rejected.
  4107. [07/10/12 03:58:08.783]:ADTRACE PT:Policy returned:
  4108. [07/10/12 03:58:08.783]:ADTRACE PT:
  4109. <nds dtdversion="2.2">
  4110. <source>
  4111. <product version="4.0.1.0">DirXML</product>
  4112. <contact>Novell, Inc.</contact>
  4113. </source>
  4114. <input>
  4115. <status level="success" type="heartbeat"/>
  4116. </input>
  4117. </nds>
  4118. [07/10/12 03:58:08.798]:ADTRACE PT:Applying XSLT policy: %+C%14CNOVLADDCFG-pub-cts%-C.
  4119. [07/10/12 03:58:08.798]:ADTRACE PT:Policy returned:
  4120. [07/10/12 03:58:08.798]:ADTRACE PT:
  4121. <nds dtdversion="2.2">
  4122. <source>
  4123. <product version="4.0.1.0">DirXML</product>
  4124. <contact>Novell, Inc.</contact>
  4125. </source>
  4126. <input>
  4127. <status level="success" type="heartbeat"/>
  4128. </input>
  4129. </nds>
  4130. [07/10/12 03:58:08.798]:ADTRACE PT:Filtering out notification-only attributes.
  4131. [07/10/12 03:58:08.798]:ADTRACE PT:Pumping XDS to eDirectory.
  4132. [07/10/12 03:58:08.798]:ADTRACE PT:Performing operation status for .
  4133. [07/10/12 03:58:08.798]:ADTRACE PT:
  4134. DirXML Log Event -------------------
  4135. Driver: \xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver
  4136. Channel: Publisher
  4137. Status: Success
  4138. [07/10/12 03:58:08.798]:ADTRACE PT:Fixing up association references.
  4139. [07/10/12 03:58:08.798]:ADTRACE PT:Applying schema mapping policies to output.
  4140. [07/10/12 03:58:08.798]:ADTRACE PT:Applying policy: %+C%14CNOVLDATACOLL-smp-SkipSchemaMapping%-C.
  4141. [07/10/12 03:58:08.798]:ADTRACE PT: Applying to status #1.
  4142. [07/10/12 03:58:08.798]:ADTRACE PT: Evaluating selection criteria for rule 'skip'.
  4143. [07/10/12 03:58:08.798]:ADTRACE PT: (if-operation equal "instance") = FALSE.
  4144. [07/10/12 03:58:08.798]:ADTRACE PT: Rule rejected.
  4145. [07/10/12 03:58:08.798]:ADTRACE PT: Evaluating selection criteria for rule 'restore'.
  4146. [07/10/12 03:58:08.798]:ADTRACE PT: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  4147. [07/10/12 03:58:08.798]:ADTRACE PT: Rule rejected.
  4148. [07/10/12 03:58:08.798]:ADTRACE PT:Policy returned:
  4149. [07/10/12 03:58:08.798]:ADTRACE PT:
  4150. <nds dtdversion="4.0" ndsversion="8.x">
  4151. <source>
  4152. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  4153. <contact>Novell, Inc.</contact>
  4154. </source>
  4155. <output>
  4156. <status event-id="0" level="success"></status>
  4157. </output>
  4158. </nds>
  4159. [07/10/12 03:58:08.798]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-smp%-C.
  4160. [07/10/12 03:58:08.798]:ADTRACE PT:Applying policy: %+C%14CNOVLDATACOLL-smp-SkipSchemaMapping%-C.
  4161. [07/10/12 03:58:08.798]:ADTRACE PT: Applying to status #1.
  4162. [07/10/12 03:58:08.798]:ADTRACE PT: Evaluating selection criteria for rule 'skip'.
  4163. [07/10/12 03:58:08.798]:ADTRACE PT: (if-operation equal "instance") = FALSE.
  4164. [07/10/12 03:58:08.798]:ADTRACE PT: Rule rejected.
  4165. [07/10/12 03:58:08.798]:ADTRACE PT: Evaluating selection criteria for rule 'restore'.
  4166. [07/10/12 03:58:08.798]:ADTRACE PT: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  4167. [07/10/12 03:58:08.798]:ADTRACE PT: Rule rejected.
  4168. [07/10/12 03:58:08.798]:ADTRACE PT:Policy returned:
  4169. [07/10/12 03:58:08.798]:ADTRACE PT:
  4170. <nds dtdversion="4.0" ndsversion="8.x">
  4171. <source>
  4172. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  4173. <contact>Novell, Inc.</contact>
  4174. </source>
  4175. <output>
  4176. <status event-id="0" level="success"></status>
  4177. </output>
  4178. </nds>
  4179. [07/10/12 03:58:08.798]:ADTRACE PT:Applying output transformation policies.
  4180. [07/10/12 03:58:08.798]:ADTRACE PT:Applying policy: %+C%14CNOVLADENTEX-otp-EntitlementsImpl%-C.
  4181. [07/10/12 03:58:08.798]:ADTRACE PT: Applying to status #1.
  4182. [07/10/12 03:58:08.798]:ADTRACE PT: Evaluating selection criteria for rule 'Intercept outbound queries for ADDomain'.
  4183. [07/10/12 03:58:08.798]:ADTRACE PT: (if-class-name equal "ADDomain") = FALSE.
  4184. [07/10/12 03:58:08.798]:ADTRACE PT: Rule rejected.
  4185. [07/10/12 03:58:08.798]:ADTRACE PT:Policy returned:
  4186. [07/10/12 03:58:08.798]:ADTRACE PT:
  4187. <nds dtdversion="4.0" ndsversion="8.x">
  4188. <source>
  4189. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  4190. <contact>Novell, Inc.</contact>
  4191. </source>
  4192. <output>
  4193. <status event-id="0" level="success"></status>
  4194. </output>
  4195. </nds>
  4196. [07/10/12 03:58:08.798]:ADTRACE PT:Applying policy: %+C%14CNOVLADENTEX-otp-ExchangeMailboxPolicy%-C.
  4197. [07/10/12 03:58:08.798]:ADTRACE PT: Applying to status #1.
  4198. [07/10/12 03:58:08.798]:ADTRACE PT: Evaluating selection criteria for rule 'Exchange: Remove HomeMDB when disabled'.
  4199. [07/10/12 03:58:08.814]:ADTRACE PT: (if-global-variable 'drv.exchMailboxMethod' equal "disabled") = TRUE.
  4200. [07/10/12 03:58:08.814]:ADTRACE PT: Rule selected.
  4201. [07/10/12 03:58:08.814]:ADTRACE PT: Applying rule 'Exchange: Remove HomeMDB when disabled'.
  4202. [07/10/12 03:58:08.814]:ADTRACE PT: Action: do-strip-op-attr("homeMDB").
  4203. [07/10/12 03:58:08.814]:ADTRACE PT:Policy returned:
  4204. [07/10/12 03:58:08.814]:ADTRACE PT:
  4205. <nds dtdversion="4.0" ndsversion="8.x">
  4206. <source>
  4207. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  4208. <contact>Novell, Inc.</contact>
  4209. </source>
  4210. <output>
  4211. <status event-id="0" level="success"></status>
  4212. </output>
  4213. </nds>
  4214. [07/10/12 03:58:08.814]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-otp-FormatConversions%-C.
  4215. [07/10/12 03:58:08.814]:ADTRACE PT: Applying to status #1.
  4216. [07/10/12 03:58:08.814]:ADTRACE PT: Evaluating selection criteria for rule 'Street Address: Convert LF to CR-LF'.
  4217. [07/10/12 03:58:08.814]:ADTRACE PT: Rule selected.
  4218. [07/10/12 03:58:08.814]:ADTRACE PT: Applying rule 'Street Address: Convert LF to CR-LF'.
  4219. [07/10/12 03:58:08.814]:ADTRACE PT: Action: do-reformat-op-attr("streetAddress",token-replace-all("[^\r]\n","\r\n",token-local-variable("current-value"))).
  4220. [07/10/12 03:58:08.814]:ADTRACE PT: Evaluating selection criteria for rule 'logonHours: Convert to Active Directory form'.
  4221. [07/10/12 03:58:08.814]:ADTRACE PT: Rule selected.
  4222. [07/10/12 03:58:08.814]:ADTRACE PT: Applying rule 'logonHours: Convert to Active Directory form'.
  4223. [07/10/12 03:58:08.814]:ADTRACE PT: Action: do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2ADLenient($current-value)")).
  4224. [07/10/12 03:58:08.814]:ADTRACE PT: Evaluating selection criteria for rule 'accountExpires: Convert to Active Directory form'.
  4225. [07/10/12 03:58:08.814]:ADTRACE PT: (if-op-attr 'accountExpires' changing) = FALSE.
  4226. [07/10/12 03:58:08.814]:ADTRACE PT: Rule rejected.
  4227. [07/10/12 03:58:08.814]:ADTRACE PT: Evaluating selection criteria for rule 'lockoutTime: Convert to Active Directory form'.
  4228. [07/10/12 03:58:08.814]:ADTRACE PT: Rule selected.
  4229. [07/10/12 03:58:08.814]:ADTRACE PT: Applying rule 'lockoutTime: Convert to Active Directory form'.
  4230. [07/10/12 03:58:08.814]:ADTRACE PT: Action: do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateEpoch2FileTime($current-value)")).
  4231. [07/10/12 03:58:08.814]:ADTRACE PT: Evaluating selection criteria for rule 'Add: User - convert multi-valued Telephone to single value'.
  4232. [07/10/12 03:58:08.814]:ADTRACE PT: (if-operation equal "add") = FALSE.
  4233. [07/10/12 03:58:08.814]:ADTRACE PT: Rule rejected.
  4234. [07/10/12 03:58:08.814]:ADTRACE PT: Evaluating selection criteria for rule 'update Active Directory logon name'.
  4235. [07/10/12 03:58:08.814]:ADTRACE PT: (if-xpath true "self::status[@level = 'success']/operation-data/windows-2000-logon-name") = FALSE.
  4236. [07/10/12 03:58:08.814]:ADTRACE PT: Rule rejected.
  4237. [07/10/12 03:58:08.814]:ADTRACE PT:Policy returned:
  4238. [07/10/12 03:58:08.814]:ADTRACE PT:
  4239. <nds dtdversion="4.0" ndsversion="8.x">
  4240. <source>
  4241. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  4242. <contact>Novell, Inc.</contact>
  4243. </source>
  4244. <output>
  4245. <status event-id="0" level="success"></status>
  4246. </output>
  4247. </nds>
  4248. [07/10/12 03:58:08.814]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-otp-ExchangeEntitlementQuery%-C.
  4249. [07/10/12 03:58:08.814]:ADTRACE PT: Applying to status #1.
  4250. [07/10/12 03:58:08.814]:ADTRACE PT: Evaluating selection criteria for rule 'Add dest-dn to the Exchange Entitlement Query'.
  4251. [07/10/12 03:58:08.814]:ADTRACE PT: (if-operation equal "query") = FALSE.
  4252. [07/10/12 03:58:08.814]:ADTRACE PT: Rule rejected.
  4253. [07/10/12 03:58:08.814]:ADTRACE PT:Policy returned:
  4254. [07/10/12 03:58:08.814]:ADTRACE PT:
  4255. <nds dtdversion="4.0" ndsversion="8.x">
  4256. <source>
  4257. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  4258. <contact>Novell, Inc.</contact>
  4259. </source>
  4260. <output>
  4261. <status event-id="0" level="success"></status>
  4262. </output>
  4263. </nds>
  4264. [07/10/12 03:58:08.814]:ADTRACE PT:Applying policy: %+C%14CNOVLPWDSYNC-otp-EmailOnFailedPwdPub%-C.
  4265. [07/10/12 03:58:08.814]:ADTRACE PT: Applying to status #1.
  4266. [07/10/12 03:58:08.814]:ADTRACE PT: Evaluating selection criteria for rule 'Send e-mail for a failed publish password operation'.
  4267. [07/10/12 03:58:08.814]:ADTRACE PT: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  4268. [07/10/12 03:58:08.814]:ADTRACE PT: (if-operation equal "status") = TRUE.
  4269. [07/10/12 03:58:08.814]:ADTRACE PT: (if-xpath true "self::status[@level != 'success']/operation-data/password-publish-status") = FALSE.
  4270. [07/10/12 03:58:08.814]:ADTRACE PT: Rule rejected.
  4271. [07/10/12 03:58:08.814]:ADTRACE PT:Policy returned:
  4272. [07/10/12 03:58:08.814]:ADTRACE PT:
  4273. <nds dtdversion="4.0" ndsversion="8.x">
  4274. <source>
  4275. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  4276. <contact>Novell, Inc.</contact>
  4277. </source>
  4278. <output>
  4279. <status event-id="0" level="success"></status>
  4280. </output>
  4281. </nds>
  4282. [07/10/12 03:58:08.814]:ADTRACE PT:Applying policy: %+C%14CNOVLATRKBASE-otp-Subscribe%-C.
  4283. [07/10/12 03:58:08.814]:ADTRACE PT: Applying to status #1.
  4284. [07/10/12 03:58:08.829]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - Initialize Realm Mapping'.
  4285. [07/10/12 03:58:08.829]:ADTRACE PT: (if-global-variable 'drv.acctTrk.enable' equal "true") = TRUE.
  4286. [07/10/12 03:58:08.829]:ADTRACE PT: (if-global-variable 'drv.acctTrk.mode' equal "fanout") = FALSE.
  4287. [07/10/12 03:58:08.829]:ADTRACE PT: Rule rejected.
  4288. [07/10/12 03:58:08.829]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled or wrong object class'.
  4289. [07/10/12 03:58:08.829]:ADTRACE PT: Rule selected.
  4290. [07/10/12 03:58:08.829]:ADTRACE PT: Applying rule 'AccountTracking - disregard if disabled or wrong object class'.
  4291. [07/10/12 03:58:08.829]:ADTRACE PT: Action: do-if().
  4292. [07/10/12 03:58:08.829]:ADTRACE PT: Evaluating conditions.
  4293. [07/10/12 03:58:08.829]:ADTRACE PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  4294. [07/10/12 03:58:08.829]:ADTRACE PT: Performing else actions.
  4295. [07/10/12 03:58:08.829]:ADTRACE PT: Action: do-for-each(arg-node-set(token-global-variable("drv.acctTrk.objectClass"))).
  4296. [07/10/12 03:58:08.829]:ADTRACE PT: arg-node-set(token-global-variable("drv.acctTrk.objectClass"))
  4297. [07/10/12 03:58:08.829]:ADTRACE PT: token-global-variable("drv.acctTrk.objectClass")
  4298. [07/10/12 03:58:08.829]:ADTRACE PT: Token Value: {"user"}.
  4299. [07/10/12 03:58:08.829]:ADTRACE PT: Arg Value: {"user"}.
  4300. [07/10/12 03:58:08.829]:ADTRACE PT: Performing actions for local-variable(current-node) = "user".
  4301. [07/10/12 03:58:08.829]:ADTRACE PT: Action: do-if().
  4302. [07/10/12 03:58:08.829]:ADTRACE PT: Evaluating conditions.
  4303. [07/10/12 03:58:08.829]:ADTRACE PT: (if-class-name equal "$current-node$") = FALSE.
  4304. [07/10/12 03:58:08.829]:ADTRACE PT: Performing else actions.
  4305. [07/10/12 03:58:08.829]:ADTRACE PT: Action: do-if().
  4306. [07/10/12 03:58:08.829]:ADTRACE PT: Evaluating conditions.
  4307. [07/10/12 03:58:08.829]:ADTRACE PT: (if-local-variable 'pass' not-available) = TRUE.
  4308. [07/10/12 03:58:08.829]:ADTRACE PT: Performing if actions.
  4309. [07/10/12 03:58:08.829]:ADTRACE PT: Action: do-break().
  4310. [07/10/12 03:58:08.829]:ADTRACE PT:Policy returned:
  4311. [07/10/12 03:58:08.829]:ADTRACE PT:
  4312. <nds dtdversion="4.0" ndsversion="8.x">
  4313. <source>
  4314. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  4315. <contact>Novell, Inc.</contact>
  4316. </source>
  4317. <output>
  4318. <status event-id="0" level="success"></status>
  4319. </output>
  4320. </nds>
  4321. [07/10/12 03:58:08.829]:ADTRACE PT:
  4322. <nds dtdversion="4.0" ndsversion="8.x">
  4323. <source>
  4324. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  4325. <contact>Novell, Inc.</contact>
  4326. </source>
  4327. <output>
  4328. <status event-id="0" level="success"></status>
  4329. </output>
  4330. </nds>
  4331. [07/10/12 03:58:08.829]:ADTRACE PT:Remote Interface Driver: Sending...
  4332. [07/10/12 03:58:08.829]:ADTRACE PT:
  4333. <nds dtdversion="4.0" ndsversion="8.x">
  4334. <source>
  4335. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  4336. <contact>Novell, Inc.</contact>
  4337. </source>
  4338. <output>
  4339. <status event-id="0" level="success"></status>
  4340. </output>
  4341. </nds>
  4342. [07/10/12 03:58:08.829]:ADTRACE PT:Remote Interface Driver: Document sent.
  4343. [07/10/12 03:58:12.220]:ADTRACE :Remote Interface Driver: Received.
  4344. [07/10/12 03:58:12.220]:ADTRACE :
  4345. <nds dtdversion="3.5" ndsversion="8.x">
  4346. <input>
  4347. <status event-id="report status" level="warning">Remote driver stopped</status>
  4348. <init-params event-id="write state">
  4349. <publisher-state>
  4350. <cookie>TVNEUwMAAADNMm2Sil7NAQAAAAAAAAAAKAAAAL+0AAAAAAAAAAAAAAAAAAC/tAAAAAAAAG324OqoH71EtU0ZVbvRPtIBAAAAAAAAAAEAAAAAAAAAbfbg6qgfvUS1TRlVu9E+0r+0AAAAAAAA</cookie>
  4351. </publisher-state>
  4352. </init-params>
  4353. </input>
  4354. </nds>
  4355. [07/10/12 03:58:12.220]:ADTRACE :Remote Interface Driver: Received document for publisher channel
  4356. [07/10/12 03:58:12.220]:ADTRACE :Remote Interface Driver: Waiting for receive...
  4357. [07/10/12 03:58:12.220]:ADTRACE PT:Receiving DOM document from application.
  4358. [07/10/12 03:58:12.220]:ADTRACE PT:
  4359. <nds dtdversion="3.5" ndsversion="8.x">
  4360. <input>
  4361. <status event-id="report status" level="warning">Remote driver stopped</status>
  4362. <init-params event-id="write state">
  4363. <publisher-state>
  4364. <cookie>TVNEUwMAAADNMm2Sil7NAQAAAAAAAAAAKAAAAL+0AAAAAAAAAAAAAAAAAAC/tAAAAAAAAG324OqoH71EtU0ZVbvRPtIBAAAAAAAAAAEAAAAAAAAAbfbg6qgfvUS1TRlVu9E+0r+0AAAAAAAA</cookie>
  4365. </publisher-state>
  4366. </init-params>
  4367. </input>
  4368. </nds>
  4369. [07/10/12 03:58:12.220]:ADTRACE PT:Applying input transformation policies.
  4370. [07/10/12 03:58:12.220]:ADTRACE PT:Applying policy: %+C%14CNOVLAUDTENTC-itp-SendEntitlementsEvents%-C.
  4371. [07/10/12 03:58:12.220]:ADTRACE PT: Applying to status #1.
  4372. [07/10/12 03:58:12.220]:ADTRACE PT: Evaluating selection criteria for rule '00031200 - Account Create By Entitlement Grant'.
  4373. [07/10/12 03:58:12.220]:ADTRACE PT: (if-operation equal "status") = TRUE.
  4374. [07/10/12 03:58:12.220]:ADTRACE PT: (if-op-property 'accountAction' equal "accountCreateByEntitlementGrant") = FALSE.
  4375. [07/10/12 03:58:12.220]:ADTRACE PT: Rule rejected.
  4376. [07/10/12 03:58:12.220]:ADTRACE PT: Evaluating selection criteria for rule '00031201 - Account Delete By Entitlement Revoke'.
  4377. [07/10/12 03:58:12.220]:ADTRACE PT: (if-operation equal "status") = TRUE.
  4378. [07/10/12 03:58:12.220]:ADTRACE PT: (if-xpath true "./operation-data/entitlement-impl/@state = '0'") = FALSE.
  4379. [07/10/12 03:58:12.220]:ADTRACE PT: (if-operation equal "status") = TRUE.
  4380. [07/10/12 03:58:12.220]:ADTRACE PT: (if-op-property 'accountAction' equal "accountDeleteByEntitlementRevoke") = FALSE.
  4381. [07/10/12 03:58:12.220]:ADTRACE PT: Rule rejected.
  4382. [07/10/12 03:58:12.220]:ADTRACE PT: Evaluating selection criteria for rule '00031202 - Account Disable By Entitlement Revoke'.
  4383. [07/10/12 03:58:12.220]:ADTRACE PT: (if-operation equal "status") = TRUE.
  4384. [07/10/12 03:58:12.220]:ADTRACE PT: (if-op-property 'accountAction' equal "accountDisableByEntitlementRevoke") = FALSE.
  4385. [07/10/12 03:58:12.220]:ADTRACE PT: Rule rejected.
  4386. [07/10/12 03:58:12.220]:ADTRACE PT: Evaluating selection criteria for rule '00031203 - Account Enable By Entitlement Grant'.
  4387. [07/10/12 03:58:12.220]:ADTRACE PT: (if-operation equal "status") = TRUE.
  4388. [07/10/12 03:58:12.220]:ADTRACE PT: (if-op-property 'accountAction' equal "accountEnableByEntitlementGrant") = FALSE.
  4389. [07/10/12 03:58:12.236]:ADTRACE PT: Rule rejected.
  4390. [07/10/12 03:58:12.236]:ADTRACE PT: Evaluating selection criteria for rule 'Generate Audit Event'.
  4391. [07/10/12 03:58:12.236]:ADTRACE PT: (if-operation equal "status") = TRUE.
  4392. [07/10/12 03:58:12.236]:ADTRACE PT: (if-local-variable 'auditEventID' available) = FALSE.
  4393. [07/10/12 03:58:12.236]:ADTRACE PT: Rule rejected.
  4394. [07/10/12 03:58:12.236]:ADTRACE PT: Applying to init-params #2.
  4395. [07/10/12 03:58:12.236]:ADTRACE PT: Evaluating selection criteria for rule '00031200 - Account Create By Entitlement Grant'.
  4396. [07/10/12 03:58:12.236]:ADTRACE PT: (if-operation equal "status") = FALSE.
  4397. [07/10/12 03:58:12.236]:ADTRACE PT: Rule rejected.
  4398. [07/10/12 03:58:12.236]:ADTRACE PT: Evaluating selection criteria for rule '00031201 - Account Delete By Entitlement Revoke'.
  4399. [07/10/12 03:58:12.236]:ADTRACE PT: (if-operation equal "status") = FALSE.
  4400. [07/10/12 03:58:12.236]:ADTRACE PT: (if-operation equal "status") = FALSE.
  4401. [07/10/12 03:58:12.236]:ADTRACE PT: Rule rejected.
  4402. [07/10/12 03:58:12.236]:ADTRACE PT: Evaluating selection criteria for rule '00031202 - Account Disable By Entitlement Revoke'.
  4403. [07/10/12 03:58:12.236]:ADTRACE PT: (if-operation equal "status") = FALSE.
  4404. [07/10/12 03:58:12.236]:ADTRACE PT: Rule rejected.
  4405. [07/10/12 03:58:12.236]:ADTRACE PT: Evaluating selection criteria for rule '00031203 - Account Enable By Entitlement Grant'.
  4406. [07/10/12 03:58:12.236]:ADTRACE PT: (if-operation equal "status") = FALSE.
  4407. [07/10/12 03:58:12.236]:ADTRACE PT: Rule rejected.
  4408. [07/10/12 03:58:12.236]:ADTRACE PT: Evaluating selection criteria for rule 'Generate Audit Event'.
  4409. [07/10/12 03:58:12.236]:ADTRACE PT: (if-operation equal "status") = FALSE.
  4410. [07/10/12 03:58:12.236]:ADTRACE PT: Rule rejected.
  4411. [07/10/12 03:58:12.236]:ADTRACE PT:Policy returned:
  4412. [07/10/12 03:58:12.236]:ADTRACE PT:
  4413. <nds dtdversion="3.5" ndsversion="8.x">
  4414. <input>
  4415. <status event-id="report status" level="warning">Remote driver stopped</status>
  4416. <init-params event-id="write state">
  4417. <publisher-state>
  4418. <cookie>TVNEUwMAAADNMm2Sil7NAQAAAAAAAAAAKAAAAL+0AAAAAAAAAAAAAAAAAAC/tAAAAAAAAG324OqoH71EtU0ZVbvRPtIBAAAAAAAAAAEAAAAAAAAAbfbg6qgfvUS1TRlVu9E+0r+0AAAAAAAA</cookie>
  4419. </publisher-state>
  4420. </init-params>
  4421. </input>
  4422. </nds>
  4423. [07/10/12 03:58:12.236]:ADTRACE PT:Applying policy: %+C%14CNOVLADENTEX-itp-InitEntitlementConfigurationResource%-C.
  4424. [07/10/12 03:58:12.236]:ADTRACE PT: Applying to status #1.
  4425. [07/10/12 03:58:12.236]:ADTRACE PT: Evaluating selection criteria for rule 'Make sure we only run once and when we're ready'.
  4426. [07/10/12 03:58:12.236]:ADTRACE PT: (if-local-variable 'objectClass' match ".+") = TRUE.
  4427. [07/10/12 03:58:12.236]:ADTRACE PT: (if-local-variable 'entConfigInitialized' equal "true") = TRUE.
  4428. [07/10/12 03:58:12.236]:ADTRACE PT: Rule selected.
  4429. [07/10/12 03:58:12.236]:ADTRACE PT: Applying rule 'Make sure we only run once and when we're ready'.
  4430. [07/10/12 03:58:12.236]:ADTRACE PT: Action: do-break().
  4431. [07/10/12 03:58:12.236]:ADTRACE PT: Applying to init-params #2.
  4432. [07/10/12 03:58:12.236]:ADTRACE PT: Evaluating selection criteria for rule 'Make sure we only run once and when we're ready'.
  4433. [07/10/12 03:58:12.236]:ADTRACE PT: (if-local-variable 'objectClass' match ".+") = TRUE.
  4434. [07/10/12 03:58:12.236]:ADTRACE PT: (if-local-variable 'entConfigInitialized' equal "true") = TRUE.
  4435. [07/10/12 03:58:12.236]:ADTRACE PT: Rule selected.
  4436. [07/10/12 03:58:12.236]:ADTRACE PT: Applying rule 'Make sure we only run once and when we're ready'.
  4437. [07/10/12 03:58:12.236]:ADTRACE PT: Action: do-break().
  4438. [07/10/12 03:58:12.236]:ADTRACE PT:Policy returned:
  4439. [07/10/12 03:58:12.236]:ADTRACE PT:
  4440. <nds dtdversion="3.5" ndsversion="8.x">
  4441. <input>
  4442. <status event-id="report status" level="warning">Remote driver stopped</status>
  4443. <init-params event-id="write state">
  4444. <publisher-state>
  4445. <cookie>TVNEUwMAAADNMm2Sil7NAQAAAAAAAAAAKAAAAL+0AAAAAAAAAAAAAAAAAAC/tAAAAAAAAG324OqoH71EtU0ZVbvRPtIBAAAAAAAAAAEAAAAAAAAAbfbg6qgfvUS1TRlVu9E+0r+0AAAAAAAA</cookie>
  4446. </publisher-state>
  4447. </init-params>
  4448. </input>
  4449. </nds>
  4450. [07/10/12 03:58:12.236]:ADTRACE PT:Applying policy: %+C%14CNOVLADMSINFO-itp-InitManagedSystemInfo%-C.
  4451. [07/10/12 03:58:12.236]:ADTRACE PT: Applying to status #1.
  4452. [07/10/12 03:58:12.236]:ADTRACE PT: Evaluating selection criteria for rule 'Make sure we only run once and when we're ready'.
  4453. [07/10/12 03:58:12.236]:ADTRACE PT: (if-local-variable 'objectClass' match ".+") = TRUE.
  4454. [07/10/12 03:58:12.236]:ADTRACE PT: (if-local-variable 'mSysInfoInitialized' equal "true") = TRUE.
  4455. [07/10/12 03:58:12.236]:ADTRACE PT: Rule selected.
  4456. [07/10/12 03:58:12.236]:ADTRACE PT: Applying rule 'Make sure we only run once and when we're ready'.
  4457. [07/10/12 03:58:12.236]:ADTRACE PT: Action: do-break().
  4458. [07/10/12 03:58:12.236]:ADTRACE PT: Applying to init-params #2.
  4459. [07/10/12 03:58:12.236]:ADTRACE PT: Evaluating selection criteria for rule 'Make sure we only run once and when we're ready'.
  4460. [07/10/12 03:58:12.251]:ADTRACE PT: (if-local-variable 'objectClass' match ".+") = TRUE.
  4461. [07/10/12 03:58:12.251]:ADTRACE PT: (if-local-variable 'mSysInfoInitialized' equal "true") = TRUE.
  4462. [07/10/12 03:58:12.251]:ADTRACE PT: Rule selected.
  4463. [07/10/12 03:58:12.251]:ADTRACE PT: Applying rule 'Make sure we only run once and when we're ready'.
  4464. [07/10/12 03:58:12.251]:ADTRACE PT: Action: do-break().
  4465. [07/10/12 03:58:12.251]:ADTRACE PT:Policy returned:
  4466. [07/10/12 03:58:12.251]:ADTRACE PT:
  4467. <nds dtdversion="3.5" ndsversion="8.x">
  4468. <input>
  4469. <status event-id="report status" level="warning">Remote driver stopped</status>
  4470. <init-params event-id="write state">
  4471. <publisher-state>
  4472. <cookie>TVNEUwMAAADNMm2Sil7NAQAAAAAAAAAAKAAAAL+0AAAAAAAAAAAAAAAAAAC/tAAAAAAAAG324OqoH71EtU0ZVbvRPtIBAAAAAAAAAAEAAAAAAAAAbfbg6qgfvUS1TRlVu9E+0r+0AAAAAAAA</cookie>
  4473. </publisher-state>
  4474. </init-params>
  4475. </input>
  4476. </nds>
  4477. [07/10/12 03:58:12.251]:ADTRACE PT:Applying policy: %+C%14CNOVLATRKBASE-itp-Publish%-C.
  4478. [07/10/12 03:58:12.251]:ADTRACE PT: Applying to status #1.
  4479. [07/10/12 03:58:12.251]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled or wrong object class'.
  4480. [07/10/12 03:58:12.251]:ADTRACE PT: Rule selected.
  4481. [07/10/12 03:58:12.251]:ADTRACE PT: Applying rule 'AccountTracking - disregard if disabled or wrong object class'.
  4482. [07/10/12 03:58:12.251]:ADTRACE PT: Action: do-if().
  4483. [07/10/12 03:58:12.251]:ADTRACE PT: Evaluating conditions.
  4484. [07/10/12 03:58:12.251]:ADTRACE PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  4485. [07/10/12 03:58:12.251]:ADTRACE PT: Performing else actions.
  4486. [07/10/12 03:58:12.251]:ADTRACE PT: Action: do-if().
  4487. [07/10/12 03:58:12.251]:ADTRACE PT: Evaluating conditions.
  4488. [07/10/12 03:58:12.251]:ADTRACE PT: (if-class-name available) = FALSE.
  4489. [07/10/12 03:58:12.251]:ADTRACE PT: Performing else actions.
  4490. [07/10/12 03:58:12.251]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - on add-association sync the operation-properties to status operations'.
  4491. [07/10/12 03:58:12.251]:ADTRACE PT: (if-operation equal "add-association") = FALSE.
  4492. [07/10/12 03:58:12.251]:ADTRACE PT: Rule rejected.
  4493. [07/10/12 03:58:12.251]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - Query for destination DN using Association'.
  4494. [07/10/12 03:58:12.251]:ADTRACE PT: (if-operation match "modify|delete|move|rename") = FALSE.
  4495. [07/10/12 03:58:12.251]:ADTRACE PT: Rule rejected.
  4496. [07/10/12 03:58:12.251]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - add interested properties to current doc for future use.'.
  4497. [07/10/12 03:58:12.251]:ADTRACE PT: (if-operation match "add|modify|delete|rename|move|status") = TRUE.
  4498. [07/10/12 03:58:12.251]:ADTRACE PT: Rule selected.
  4499. [07/10/12 03:58:12.251]:ADTRACE PT: Applying rule 'AccountTracking - add interested properties to current doc for future use.'.
  4500. [07/10/12 03:58:12.251]:ADTRACE PT: Action: do-for-each(arg-node-set(token-global-variable("drv.acctTrk.identifiers"))).
  4501. [07/10/12 03:58:12.251]:ADTRACE PT: arg-node-set(token-global-variable("drv.acctTrk.identifiers"))
  4502. [07/10/12 03:58:12.251]:ADTRACE PT: token-global-variable("drv.acctTrk.identifiers")
  4503. [07/10/12 03:58:12.251]:ADTRACE PT: Token Value: {"sAMAccountName","userPrincipalName","LDAPDN","association"}.
  4504. [07/10/12 03:58:12.251]:ADTRACE PT: Arg Value: {"sAMAccountName","userPrincipalName","LDAPDN","association"}.
  4505. [07/10/12 03:58:12.251]:ADTRACE PT: Performing actions for local-variable(current-node) = "sAMAccountName".
  4506. [07/10/12 03:58:12.251]:ADTRACE PT: Action: do-if().
  4507. [07/10/12 03:58:12.251]:ADTRACE PT: Evaluating conditions.
  4508. [07/10/12 03:58:12.251]:ADTRACE PT: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  4509. [07/10/12 03:58:12.251]:ADTRACE PT: Performing else actions.
  4510. [07/10/12 03:58:12.251]:ADTRACE PT: Action: do-if().
  4511. [07/10/12 03:58:12.251]:ADTRACE PT: Evaluating conditions.
  4512. [07/10/12 03:58:12.251]:ADTRACE PT: (if-local-variable 'current-node' equal "association") = FALSE.
  4513. [07/10/12 03:58:12.251]:ADTRACE PT: Performing else actions.
  4514. [07/10/12 03:58:12.251]:ADTRACE PT: Action: do-if().
  4515. [07/10/12 03:58:12.251]:ADTRACE PT: Evaluating conditions.
  4516. [07/10/12 03:58:12.251]:ADTRACE PT: Expanded variable reference '$current-node$' to 'sAMAccountName'.
  4517. [07/10/12 03:58:12.251]:ADTRACE PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  4518. [07/10/12 03:58:12.251]:ADTRACE PT: Expanded variable reference '$current-node$' to 'sAMAccountName'.
  4519. [07/10/12 03:58:12.251]:ADTRACE PT: (if-op-attr '$current-node$' available) = FALSE.
  4520. [07/10/12 03:58:12.251]:ADTRACE PT: Performing else actions.
  4521. [07/10/12 03:58:12.251]:ADTRACE PT: Performing actions for local-variable(current-node) = "userPrincipalName".
  4522. [07/10/12 03:58:12.251]:ADTRACE PT: Action: do-if().
  4523. [07/10/12 03:58:12.251]:ADTRACE PT: Evaluating conditions.
  4524. [07/10/12 03:58:12.267]:ADTRACE PT: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  4525. [07/10/12 03:58:12.267]:ADTRACE PT: Performing else actions.
  4526. [07/10/12 03:58:12.267]:ADTRACE PT: Action: do-if().
  4527. [07/10/12 03:58:12.267]:ADTRACE PT: Evaluating conditions.
  4528. [07/10/12 03:58:12.267]:ADTRACE PT: (if-local-variable 'current-node' equal "association") = FALSE.
  4529. [07/10/12 03:58:12.267]:ADTRACE PT: Performing else actions.
  4530. [07/10/12 03:58:12.267]:ADTRACE PT: Action: do-if().
  4531. [07/10/12 03:58:12.267]:ADTRACE PT: Evaluating conditions.
  4532. [07/10/12 03:58:12.267]:ADTRACE PT: Expanded variable reference '$current-node$' to 'userPrincipalName'.
  4533. [07/10/12 03:58:12.267]:ADTRACE PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  4534. [07/10/12 03:58:12.267]:ADTRACE PT: Expanded variable reference '$current-node$' to 'userPrincipalName'.
  4535. [07/10/12 03:58:12.267]:ADTRACE PT: (if-op-attr '$current-node$' available) = FALSE.
  4536. [07/10/12 03:58:12.267]:ADTRACE PT: Performing else actions.
  4537. [07/10/12 03:58:12.267]:ADTRACE PT: Performing actions for local-variable(current-node) = "LDAPDN".
  4538. [07/10/12 03:58:12.267]:ADTRACE PT: Action: do-if().
  4539. [07/10/12 03:58:12.267]:ADTRACE PT: Evaluating conditions.
  4540. [07/10/12 03:58:12.267]:ADTRACE PT: (if-local-variable 'current-node' equal "LDAPDN") = TRUE.
  4541. [07/10/12 03:58:12.267]:ADTRACE PT: Expanded variable reference '$current-node$' to 'LDAPDN'.
  4542. [07/10/12 03:58:12.267]:ADTRACE PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  4543. [07/10/12 03:58:12.267]:ADTRACE PT: (if-src-dn available) = FALSE.
  4544. [07/10/12 03:58:12.267]:ADTRACE PT: Performing else actions.
  4545. [07/10/12 03:58:12.267]:ADTRACE PT: Action: do-if().
  4546. [07/10/12 03:58:12.267]:ADTRACE PT: Evaluating conditions.
  4547. [07/10/12 03:58:12.267]:ADTRACE PT: (if-local-variable 'current-node' equal "association") = FALSE.
  4548. [07/10/12 03:58:12.267]:ADTRACE PT: Performing else actions.
  4549. [07/10/12 03:58:12.267]:ADTRACE PT: Action: do-if().
  4550. [07/10/12 03:58:12.267]:ADTRACE PT: Evaluating conditions.
  4551. [07/10/12 03:58:12.267]:ADTRACE PT: Expanded variable reference '$current-node$' to 'LDAPDN'.
  4552. [07/10/12 03:58:12.267]:ADTRACE PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  4553. [07/10/12 03:58:12.267]:ADTRACE PT: Expanded variable reference '$current-node$' to 'LDAPDN'.
  4554. [07/10/12 03:58:12.267]:ADTRACE PT: (if-op-attr '$current-node$' available) = FALSE.
  4555. [07/10/12 03:58:12.267]:ADTRACE PT: Performing else actions.
  4556. [07/10/12 03:58:12.267]:ADTRACE PT: Performing actions for local-variable(current-node) = "association".
  4557. [07/10/12 03:58:12.267]:ADTRACE PT: Action: do-if().
  4558. [07/10/12 03:58:12.267]:ADTRACE PT: Evaluating conditions.
  4559. [07/10/12 03:58:12.267]:ADTRACE PT: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  4560. [07/10/12 03:58:12.267]:ADTRACE PT: Performing else actions.
  4561. [07/10/12 03:58:12.267]:ADTRACE PT: Action: do-if().
  4562. [07/10/12 03:58:12.267]:ADTRACE PT: Evaluating conditions.
  4563. [07/10/12 03:58:12.267]:ADTRACE PT: (if-local-variable 'current-node' equal "association") = TRUE.
  4564. [07/10/12 03:58:12.267]:ADTRACE PT: Expanded variable reference '$current-node$' to 'association'.
  4565. [07/10/12 03:58:12.267]:ADTRACE PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  4566. [07/10/12 03:58:12.267]:ADTRACE PT: (if-association available) = FALSE.
  4567. [07/10/12 03:58:12.267]:ADTRACE PT: Performing else actions.
  4568. [07/10/12 03:58:12.267]:ADTRACE PT: Action: do-if().
  4569. [07/10/12 03:58:12.267]:ADTRACE PT: Evaluating conditions.
  4570. [07/10/12 03:58:12.267]:ADTRACE PT: Expanded variable reference '$current-node$' to 'association'.
  4571. [07/10/12 03:58:12.267]:ADTRACE PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  4572. [07/10/12 03:58:12.267]:ADTRACE PT: Expanded variable reference '$current-node$' to 'association'.
  4573. [07/10/12 03:58:12.267]:ADTRACE PT: (if-op-attr '$current-node$' available) = FALSE.
  4574. [07/10/12 03:58:12.267]:ADTRACE PT: Performing else actions.
  4575. [07/10/12 03:58:12.267]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - Initialize status properties on published events'.
  4576. [07/10/12 03:58:12.267]:ADTRACE PT: (if-operation match "add|modify|delete|rename|move") = FALSE.
  4577. [07/10/12 03:58:12.267]:ADTRACE PT: Rule rejected.
  4578. [07/10/12 03:58:12.267]:ADTRACE PT: Applying to init-params #2.
  4579. [07/10/12 03:58:12.267]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled or wrong object class'.
  4580. [07/10/12 03:58:12.283]:ADTRACE PT: Rule selected.
  4581. [07/10/12 03:58:12.283]:ADTRACE PT: Applying rule 'AccountTracking - disregard if disabled or wrong object class'.
  4582. [07/10/12 03:58:12.283]:ADTRACE PT: Action: do-if().
  4583. [07/10/12 03:58:12.283]:ADTRACE PT: Evaluating conditions.
  4584. [07/10/12 03:58:12.283]:ADTRACE PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  4585. [07/10/12 03:58:12.283]:ADTRACE PT: Performing else actions.
  4586. [07/10/12 03:58:12.283]:ADTRACE PT: Action: do-if().
  4587. [07/10/12 03:58:12.283]:ADTRACE PT: Evaluating conditions.
  4588. [07/10/12 03:58:12.283]:ADTRACE PT: (if-class-name available) = FALSE.
  4589. [07/10/12 03:58:12.283]:ADTRACE PT: Performing else actions.
  4590. [07/10/12 03:58:12.283]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - on add-association sync the operation-properties to status operations'.
  4591. [07/10/12 03:58:12.283]:ADTRACE PT: (if-operation equal "add-association") = FALSE.
  4592. [07/10/12 03:58:12.283]:ADTRACE PT: Rule rejected.
  4593. [07/10/12 03:58:12.283]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - Query for destination DN using Association'.
  4594. [07/10/12 03:58:12.283]:ADTRACE PT: (if-operation match "modify|delete|move|rename") = FALSE.
  4595. [07/10/12 03:58:12.283]:ADTRACE PT: Rule rejected.
  4596. [07/10/12 03:58:12.283]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - add interested properties to current doc for future use.'.
  4597. [07/10/12 03:58:12.283]:ADTRACE PT: (if-operation match "add|modify|delete|rename|move|status") = FALSE.
  4598. [07/10/12 03:58:12.283]:ADTRACE PT: Rule rejected.
  4599. [07/10/12 03:58:12.283]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - Initialize status properties on published events'.
  4600. [07/10/12 03:58:12.283]:ADTRACE PT: (if-operation match "add|modify|delete|rename|move") = FALSE.
  4601. [07/10/12 03:58:12.283]:ADTRACE PT: Rule rejected.
  4602. [07/10/12 03:58:12.283]:ADTRACE PT:Policy returned:
  4603. [07/10/12 03:58:12.283]:ADTRACE PT:
  4604. <nds dtdversion="3.5" ndsversion="8.x">
  4605. <input>
  4606. <status event-id="report status" level="warning">Remote driver stopped</status>
  4607. <init-params event-id="write state">
  4608. <publisher-state>
  4609. <cookie>TVNEUwMAAADNMm2Sil7NAQAAAAAAAAAAKAAAAL+0AAAAAAAAAAAAAAAAAAC/tAAAAAAAAG324OqoH71EtU0ZVbvRPtIBAAAAAAAAAAEAAAAAAAAAbfbg6qgfvUS1TRlVu9E+0r+0AAAAAAAA</cookie>
  4610. </publisher-state>
  4611. </init-params>
  4612. </input>
  4613. </nds>
  4614. [07/10/12 03:58:12.283]:ADTRACE PT:Applying policy: %+C%14CNOVLATRKBASE-itp-WriteAccounts%-C.
  4615. [07/10/12 03:58:12.283]:ADTRACE PT: Applying to status #1.
  4616. [07/10/12 03:58:12.283]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - Initialize Realm Mapping'.
  4617. [07/10/12 03:58:12.283]:ADTRACE PT: (if-global-variable 'drv.acctTrk.enable' equal "true") = TRUE.
  4618. [07/10/12 03:58:12.283]:ADTRACE PT: (if-global-variable 'drv.acctTrk.mode' equal "fanout") = FALSE.
  4619. [07/10/12 03:58:12.283]:ADTRACE PT: Rule rejected.
  4620. [07/10/12 03:58:12.283]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled'.
  4621. [07/10/12 03:58:12.283]:ADTRACE PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  4622. [07/10/12 03:58:12.283]:ADTRACE PT: Rule rejected.
  4623. [07/10/12 03:58:12.283]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - query DirXML-Accounts Attribute'.
  4624. [07/10/12 03:58:12.283]:ADTRACE PT: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  4625. [07/10/12 03:58:12.283]:ADTRACE PT: Rule rejected.
  4626. [07/10/12 03:58:12.283]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - remove Dirxml-Account values on regular delete operation'.
  4627. [07/10/12 03:58:12.283]:ADTRACE PT: (if-operation match "delete|remove-association") = FALSE.
  4628. [07/10/12 03:58:12.283]:ADTRACE PT: (if-operation equal "status") = TRUE.
  4629. [07/10/12 03:58:12.283]:ADTRACE PT: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  4630. [07/10/12 03:58:12.283]:ADTRACE PT: Rule rejected.
  4631. [07/10/12 03:58:12.283]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - update DirXMLAccounts attribute on regular operations'.
  4632. [07/10/12 03:58:12.283]:ADTRACE PT: (if-op-property 'AccountTracking-Operation' not-available) = TRUE.
  4633. [07/10/12 03:58:12.283]:ADTRACE PT: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  4634. [07/10/12 03:58:12.283]:ADTRACE PT: (if-operation equal "status") = TRUE.
  4635. [07/10/12 03:58:12.283]:ADTRACE PT: (if-xpath true "./@level='success' or ./@level='warning'") = TRUE.
  4636. [07/10/12 03:58:12.283]:ADTRACE PT: (if-op-property 'AccountTracking-Operation' available) = FALSE.
  4637. [07/10/12 03:58:12.283]:ADTRACE PT: Rule rejected.
  4638. [07/10/12 03:58:12.283]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - update DirXMLAccounts attribute on mapped operations'.
  4639. [07/10/12 03:58:12.283]:ADTRACE PT: (if-xpath true "operation-data/account-tracking-operation") = FALSE.
  4640. [07/10/12 03:58:12.283]:ADTRACE PT: (if-xpath true "operation-data/account-tracking-operation") = FALSE.
  4641. [07/10/12 03:58:12.298]:ADTRACE PT: Rule rejected.
  4642. [07/10/12 03:58:12.298]:ADTRACE PT: Applying to init-params #2.
  4643. [07/10/12 03:58:12.298]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - Initialize Realm Mapping'.
  4644. [07/10/12 03:58:12.298]:ADTRACE PT: (if-global-variable 'drv.acctTrk.enable' equal "true") = TRUE.
  4645. [07/10/12 03:58:12.298]:ADTRACE PT: (if-global-variable 'drv.acctTrk.mode' equal "fanout") = FALSE.
  4646. [07/10/12 03:58:12.298]:ADTRACE PT: Rule rejected.
  4647. [07/10/12 03:58:12.298]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled'.
  4648. [07/10/12 03:58:12.298]:ADTRACE PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  4649. [07/10/12 03:58:12.298]:ADTRACE PT: Rule rejected.
  4650. [07/10/12 03:58:12.298]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - query DirXML-Accounts Attribute'.
  4651. [07/10/12 03:58:12.298]:ADTRACE PT: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  4652. [07/10/12 03:58:12.298]:ADTRACE PT: Rule rejected.
  4653. [07/10/12 03:58:12.298]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - remove Dirxml-Account values on regular delete operation'.
  4654. [07/10/12 03:58:12.298]:ADTRACE PT: (if-operation match "delete|remove-association") = FALSE.
  4655. [07/10/12 03:58:12.298]:ADTRACE PT: (if-operation equal "status") = FALSE.
  4656. [07/10/12 03:58:12.298]:ADTRACE PT: Rule rejected.
  4657. [07/10/12 03:58:12.298]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - update DirXMLAccounts attribute on regular operations'.
  4658. [07/10/12 03:58:12.298]:ADTRACE PT: (if-op-property 'AccountTracking-Operation' not-available) = TRUE.
  4659. [07/10/12 03:58:12.298]:ADTRACE PT: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  4660. [07/10/12 03:58:12.298]:ADTRACE PT: (if-operation equal "status") = FALSE.
  4661. [07/10/12 03:58:12.298]:ADTRACE PT: Rule rejected.
  4662. [07/10/12 03:58:12.298]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - update DirXMLAccounts attribute on mapped operations'.
  4663. [07/10/12 03:58:12.298]:ADTRACE PT: (if-xpath true "operation-data/account-tracking-operation") = FALSE.
  4664. [07/10/12 03:58:12.298]:ADTRACE PT: (if-xpath true "operation-data/account-tracking-operation") = FALSE.
  4665. [07/10/12 03:58:12.298]:ADTRACE PT: Rule rejected.
  4666. [07/10/12 03:58:12.298]:ADTRACE PT:Policy returned:
  4667. [07/10/12 03:58:12.298]:ADTRACE PT:
  4668. <nds dtdversion="3.5" ndsversion="8.x">
  4669. <input>
  4670. <status event-id="report status" level="warning">Remote driver stopped</status>
  4671. <init-params event-id="write state">
  4672. <publisher-state>
  4673. <cookie>TVNEUwMAAADNMm2Sil7NAQAAAAAAAAAAKAAAAL+0AAAAAAAAAAAAAAAAAAC/tAAAAAAAAG324OqoH71EtU0ZVbvRPtIBAAAAAAAAAAEAAAAAAAAAbfbg6qgfvUS1TRlVu9E+0r+0AAAAAAAA</cookie>
  4674. </publisher-state>
  4675. </init-params>
  4676. </input>
  4677. </nds>
  4678. [07/10/12 03:58:12.298]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-itp-SubscriberUserAdd%-C.
  4679. [07/10/12 03:58:12.298]:ADTRACE PT: Applying to status #1.
  4680. [07/10/12 03:58:12.298]:ADTRACE PT: Evaluating selection criteria for rule 'Populate DirXML-ADContext on initial user add'.
  4681. [07/10/12 03:58:12.298]:ADTRACE PT: (if-operation equal "add-association") = FALSE.
  4682. [07/10/12 03:58:12.298]:ADTRACE PT: Rule rejected.
  4683. [07/10/12 03:58:12.298]:ADTRACE PT: Applying to init-params #2.
  4684. [07/10/12 03:58:12.298]:ADTRACE PT: Evaluating selection criteria for rule 'Populate DirXML-ADContext on initial user add'.
  4685. [07/10/12 03:58:12.298]:ADTRACE PT: (if-operation equal "add-association") = FALSE.
  4686. [07/10/12 03:58:12.298]:ADTRACE PT: Rule rejected.
  4687. [07/10/12 03:58:12.298]:ADTRACE PT:Policy returned:
  4688. [07/10/12 03:58:12.298]:ADTRACE PT:
  4689. <nds dtdversion="3.5" ndsversion="8.x">
  4690. <input>
  4691. <status event-id="report status" level="warning">Remote driver stopped</status>
  4692. <init-params event-id="write state">
  4693. <publisher-state>
  4694. <cookie>TVNEUwMAAADNMm2Sil7NAQAAAAAAAAAAKAAAAL+0AAAAAAAAAAAAAAAAAAC/tAAAAAAAAG324OqoH71EtU0ZVbvRPtIBAAAAAAAAAAEAAAAAAAAAbfbg6qgfvUS1TRlVu9E+0r+0AAAAAAAA</cookie>
  4695. </publisher-state>
  4696. </init-params>
  4697. </input>
  4698. </nds>
  4699. [07/10/12 03:58:12.298]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-itp-FormatConversions%-C.
  4700. [07/10/12 03:58:12.298]:ADTRACE PT: Applying to status #1.
  4701. [07/10/12 03:58:12.298]:ADTRACE PT: Evaluating selection criteria for rule 'streetAddress: Convert CR-LF to LF'.
  4702. [07/10/12 03:58:12.298]:ADTRACE PT: Rule selected.
  4703. [07/10/12 03:58:12.298]:ADTRACE PT: Applying rule 'streetAddress: Convert CR-LF to LF'.
  4704. [07/10/12 03:58:12.298]:ADTRACE PT: Action: do-reformat-op-attr("streetAddress",token-replace-all("\r\n","\r",token-local-variable("current-value"))).
  4705. [07/10/12 03:58:12.298]:ADTRACE PT: Evaluating selection criteria for rule 'logonHours: Convert to Login Allowed Time Map form'.
  4706. [07/10/12 03:58:12.314]:ADTRACE PT: Rule selected.
  4707. [07/10/12 03:58:12.314]:ADTRACE PT: Applying rule 'logonHours: Convert to Login Allowed Time Map form'.
  4708. [07/10/12 03:58:12.314]:ADTRACE PT: Action: do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2eDir($current-value)")).
  4709. [07/10/12 03:58:12.314]:ADTRACE PT: Evaluating selection criteria for rule 'accountExpires: Convert to Identity Vault time format'.
  4710. [07/10/12 03:58:12.314]:ADTRACE PT: Rule selected.
  4711. [07/10/12 03:58:12.314]:ADTRACE PT: Applying rule 'accountExpires: Convert to Identity Vault time format'.
  4712. [07/10/12 03:58:12.314]:ADTRACE PT: Action: do-reformat-op-attr("accountExpires",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
  4713. [07/10/12 03:58:12.314]:ADTRACE PT: Evaluating selection criteria for rule 'lockoutTime: Convert to Identity Vault time format'.
  4714. [07/10/12 03:58:12.314]:ADTRACE PT: Rule selected.
  4715. [07/10/12 03:58:12.314]:ADTRACE PT: Applying rule 'lockoutTime: Convert to Identity Vault time format'.
  4716. [07/10/12 03:58:12.314]:ADTRACE PT: Action: do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
  4717. [07/10/12 03:58:12.314]:ADTRACE PT: Applying to init-params #2.
  4718. [07/10/12 03:58:12.314]:ADTRACE PT: Evaluating selection criteria for rule 'streetAddress: Convert CR-LF to LF'.
  4719. [07/10/12 03:58:12.329]:ADTRACE PT: Rule selected.
  4720. [07/10/12 03:58:12.329]:ADTRACE PT: Applying rule 'streetAddress: Convert CR-LF to LF'.
  4721. [07/10/12 03:58:12.329]:ADTRACE PT: Action: do-reformat-op-attr("streetAddress",token-replace-all("\r\n","\r",token-local-variable("current-value"))).
  4722. [07/10/12 03:58:12.329]:ADTRACE PT: Evaluating selection criteria for rule 'logonHours: Convert to Login Allowed Time Map form'.
  4723. [07/10/12 03:58:12.329]:ADTRACE PT: Rule selected.
  4724. [07/10/12 03:58:12.329]:ADTRACE PT: Applying rule 'logonHours: Convert to Login Allowed Time Map form'.
  4725. [07/10/12 03:58:12.329]:ADTRACE PT: Action: do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2eDir($current-value)")).
  4726. [07/10/12 03:58:12.329]:ADTRACE PT: Evaluating selection criteria for rule 'accountExpires: Convert to Identity Vault time format'.
  4727. [07/10/12 03:58:12.329]:ADTRACE PT: Rule selected.
  4728. [07/10/12 03:58:12.329]:ADTRACE PT: Applying rule 'accountExpires: Convert to Identity Vault time format'.
  4729. [07/10/12 03:58:12.329]:ADTRACE PT: Action: do-reformat-op-attr("accountExpires",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
  4730. [07/10/12 03:58:12.329]:ADTRACE PT: Evaluating selection criteria for rule 'lockoutTime: Convert to Identity Vault time format'.
  4731. [07/10/12 03:58:12.329]:ADTRACE PT: Rule selected.
  4732. [07/10/12 03:58:12.329]:ADTRACE PT: Applying rule 'lockoutTime: Convert to Identity Vault time format'.
  4733. [07/10/12 03:58:12.329]:ADTRACE PT: Action: do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
  4734. [07/10/12 03:58:12.329]:ADTRACE PT:Policy returned:
  4735. [07/10/12 03:58:12.329]:ADTRACE PT:
  4736. <nds dtdversion="3.5" ndsversion="8.x">
  4737. <input>
  4738. <status event-id="report status" level="warning">Remote driver stopped</status>
  4739. <init-params event-id="write state">
  4740. <publisher-state>
  4741. <cookie>TVNEUwMAAADNMm2Sil7NAQAAAAAAAAAAKAAAAL+0AAAAAAAAAAAAAAAAAAC/tAAAAAAAAG324OqoH71EtU0ZVbvRPtIBAAAAAAAAAAEAAAAAAAAAbfbg6qgfvUS1TRlVu9E+0r+0AAAAAAAA</cookie>
  4742. </publisher-state>
  4743. </init-params>
  4744. </input>
  4745. </nds>
  4746. [07/10/12 03:58:12.329]:ADTRACE PT:Applying policy: %+C%14CNOVLDATACOLL-itp-DataCollectionQuerySupport%-C.
  4747. [07/10/12 03:58:12.329]:ADTRACE PT: Applying to status #1.
  4748. [07/10/12 03:58:12.329]:ADTRACE PT: Evaluating selection criteria for rule 'Rename @association-ref to @association and change @type from "dn" to "{dn}"'.
  4749. [07/10/12 03:58:12.329]:ADTRACE PT: (if-operation equal "instance") = FALSE.
  4750. [07/10/12 03:58:12.329]:ADTRACE PT: Rule rejected.
  4751. [07/10/12 03:58:12.329]:ADTRACE PT: Applying to init-params #2.
  4752. [07/10/12 03:58:12.329]:ADTRACE PT: Evaluating selection criteria for rule 'Rename @association-ref to @association and change @type from "dn" to "{dn}"'.
  4753. [07/10/12 03:58:12.329]:ADTRACE PT: (if-operation equal "instance") = FALSE.
  4754. [07/10/12 03:58:12.329]:ADTRACE PT: Rule rejected.
  4755. [07/10/12 03:58:12.329]:ADTRACE PT:Policy returned:
  4756. [07/10/12 03:58:12.329]:ADTRACE PT:
  4757. <nds dtdversion="3.5" ndsversion="8.x">
  4758. <input>
  4759. <status event-id="report status" level="warning">Remote driver stopped</status>
  4760. <init-params event-id="write state">
  4761. <publisher-state>
  4762. <cookie>TVNEUwMAAADNMm2Sil7NAQAAAAAAAAAAKAAAAL+0AAAAAAAAAAAAAAAAAAC/tAAAAAAAAG324OqoH71EtU0ZVbvRPtIBAAAAAAAAAAEAAAAAAAAAbfbg6qgfvUS1TRlVu9E+0r+0AAAAAAAA</cookie>
  4763. </publisher-state>
  4764. </init-params>
  4765. </input>
  4766. </nds>
  4767. [07/10/12 03:58:12.329]:ADTRACE PT:Applying policy: %+C%14CNOVLADENTEX-itp-EntitlementsImpl%-C.
  4768. [07/10/12 03:58:12.329]:ADTRACE PT: Applying to status #1.
  4769. [07/10/12 03:58:12.329]:ADTRACE PT: Evaluating selection criteria for rule 'Intercept ADDomain (tagged identity query) query response'.
  4770. [07/10/12 03:58:12.329]:ADTRACE PT: (if-operation equal "instance") = FALSE.
  4771. [07/10/12 03:58:12.329]:ADTRACE PT: Rule rejected.
  4772. [07/10/12 03:58:12.345]:ADTRACE PT: Evaluating selection criteria for rule 'Intercept ADDomain (tagged identity query) query status'.
  4773. [07/10/12 03:58:12.345]:ADTRACE PT: (if-xpath true "../status[@event-id='query-driver-ident']/operation-data/@UserAccountEntitlementQuery") = FALSE.
  4774. [07/10/12 03:58:12.345]:ADTRACE PT: Rule rejected.
  4775. [07/10/12 03:58:12.345]:ADTRACE PT: Evaluating selection criteria for rule 'Check target of add-association for group membership entitlements'.
  4776. [07/10/12 03:58:12.345]:ADTRACE PT: (if-global-variable 'drv.entitlement.Group' equal "true") = TRUE.
  4777. [07/10/12 03:58:12.345]:ADTRACE PT: (if-operation equal "add-association") = FALSE.
  4778. [07/10/12 03:58:12.345]:ADTRACE PT: Rule rejected.
  4779. [07/10/12 03:58:12.345]:ADTRACE PT: Evaluating selection criteria for rule 'Check target of add-association for Exchange mailbox entitlements'.
  4780. [07/10/12 03:58:12.345]:ADTRACE PT: (if-global-variable 'drv.exchMailboxMethod' equal "entitlement") = FALSE.
  4781. [07/10/12 03:58:12.345]:ADTRACE PT: Rule rejected.
  4782. [07/10/12 03:58:12.345]:ADTRACE PT: Applying to init-params #2.
  4783. [07/10/12 03:58:12.345]:ADTRACE PT: Evaluating selection criteria for rule 'Intercept ADDomain (tagged identity query) query response'.
  4784. [07/10/12 03:58:12.345]:ADTRACE PT: (if-operation equal "instance") = FALSE.
  4785. [07/10/12 03:58:12.345]:ADTRACE PT: Rule rejected.
  4786. [07/10/12 03:58:12.345]:ADTRACE PT: Evaluating selection criteria for rule 'Intercept ADDomain (tagged identity query) query status'.
  4787. [07/10/12 03:58:12.345]:ADTRACE PT: (if-xpath true "../status[@event-id='query-driver-ident']/operation-data/@UserAccountEntitlementQuery") = FALSE.
  4788. [07/10/12 03:58:12.345]:ADTRACE PT: Rule rejected.
  4789. [07/10/12 03:58:12.345]:ADTRACE PT: Evaluating selection criteria for rule 'Check target of add-association for group membership entitlements'.
  4790. [07/10/12 03:58:12.345]:ADTRACE PT: (if-global-variable 'drv.entitlement.Group' equal "true") = TRUE.
  4791. [07/10/12 03:58:12.345]:ADTRACE PT: (if-operation equal "add-association") = FALSE.
  4792. [07/10/12 03:58:12.345]:ADTRACE PT: Rule rejected.
  4793. [07/10/12 03:58:12.345]:ADTRACE PT: Evaluating selection criteria for rule 'Check target of add-association for Exchange mailbox entitlements'.
  4794. [07/10/12 03:58:12.345]:ADTRACE PT: (if-global-variable 'drv.exchMailboxMethod' equal "entitlement") = FALSE.
  4795. [07/10/12 03:58:12.345]:ADTRACE PT: Rule rejected.
  4796. [07/10/12 03:58:12.345]:ADTRACE PT:Policy returned:
  4797. [07/10/12 03:58:12.345]:ADTRACE PT:
  4798. <nds dtdversion="3.5" ndsversion="8.x">
  4799. <input>
  4800. <status event-id="report status" level="warning">Remote driver stopped</status>
  4801. <init-params event-id="write state">
  4802. <publisher-state>
  4803. <cookie>TVNEUwMAAADNMm2Sil7NAQAAAAAAAAAAKAAAAL+0AAAAAAAAAAAAAAAAAAC/tAAAAAAAAG324OqoH71EtU0ZVbvRPtIBAAAAAAAAAAEAAAAAAAAAbfbg6qgfvUS1TRlVu9E+0r+0AAAAAAAA</cookie>
  4804. </publisher-state>
  4805. </init-params>
  4806. </input>
  4807. </nds>
  4808. [07/10/12 03:58:12.345]:ADTRACE PT:Applying policy: %+C%14CNOVLPWDSYNC-itp-EmailOnFailedPwdSub%-C.
  4809. [07/10/12 03:58:12.345]:ADTRACE PT: Applying to status #1.
  4810. [07/10/12 03:58:12.345]:ADTRACE PT: Evaluating selection criteria for rule 'Send e-mail on a failure when subscribing to passwords'.
  4811. [07/10/12 03:58:12.345]:ADTRACE PT: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  4812. [07/10/12 03:58:12.345]:ADTRACE PT: (if-operation equal "status") = TRUE.
  4813. [07/10/12 03:58:12.345]:ADTRACE PT: (if-xpath true "self::status[@level != 'success'][text() != '']/operation-data/password-subscribe-status/association[text() != '']") = FALSE.
  4814. [07/10/12 03:58:12.361]:ADTRACE PT: Rule rejected.
  4815. [07/10/12 03:58:12.361]:ADTRACE PT: Evaluating selection criteria for rule 'Send e-mail on failure to reset connected system password using the Identity Vault password'.
  4816. [07/10/12 03:58:12.361]:ADTRACE PT: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  4817. [07/10/12 03:58:12.361]:ADTRACE PT: (if-operation equal "status") = TRUE.
  4818. [07/10/12 03:58:12.361]:ADTRACE PT: (if-xpath true "self::status[@level != 'success']/operation-data/password-reset-status") = FALSE.
  4819. [07/10/12 03:58:12.361]:ADTRACE PT: Rule rejected.
  4820. [07/10/12 03:58:12.361]:ADTRACE PT: Applying to init-params #2.
  4821. [07/10/12 03:58:12.361]:ADTRACE PT: Evaluating selection criteria for rule 'Send e-mail on a failure when subscribing to passwords'.
  4822. [07/10/12 03:58:12.361]:ADTRACE PT: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  4823. [07/10/12 03:58:12.361]:ADTRACE PT: (if-operation equal "status") = FALSE.
  4824. [07/10/12 03:58:12.361]:ADTRACE PT: Rule rejected.
  4825. [07/10/12 03:58:12.361]:ADTRACE PT: Evaluating selection criteria for rule 'Send e-mail on failure to reset connected system password using the Identity Vault password'.
  4826. [07/10/12 03:58:12.361]:ADTRACE PT: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  4827. [07/10/12 03:58:12.361]:ADTRACE PT: (if-operation equal "status") = FALSE.
  4828. [07/10/12 03:58:12.361]:ADTRACE PT: Rule rejected.
  4829. [07/10/12 03:58:12.361]:ADTRACE PT:Policy returned:
  4830. [07/10/12 03:58:12.361]:ADTRACE PT:
  4831. <nds dtdversion="3.5" ndsversion="8.x">
  4832. <input>
  4833. <status event-id="report status" level="warning">Remote driver stopped</status>
  4834. <init-params event-id="write state">
  4835. <publisher-state>
  4836. <cookie>TVNEUwMAAADNMm2Sil7NAQAAAAAAAAAAKAAAAL+0AAAAAAAAAAAAAAAAAAC/tAAAAAAAAG324OqoH71EtU0ZVbvRPtIBAAAAAAAAAAEAAAAAAAAAbfbg6qgfvUS1TRlVu9E+0r+0AAAAAAAA</cookie>
  4837. </publisher-state>
  4838. </init-params>
  4839. </input>
  4840. </nds>
  4841. [07/10/12 03:58:12.361]:ADTRACE PT:Applying schema mapping policies to input.
  4842. [07/10/12 03:58:12.361]:ADTRACE PT:Applying policy: %+C%14CNOVLDATACOLL-smp-SkipSchemaMapping%-C.
  4843. [07/10/12 03:58:12.361]:ADTRACE PT: Applying to status #1.
  4844. [07/10/12 03:58:12.361]:ADTRACE PT: Evaluating selection criteria for rule 'skip'.
  4845. [07/10/12 03:58:12.361]:ADTRACE PT: (if-operation equal "instance") = FALSE.
  4846. [07/10/12 03:58:12.361]:ADTRACE PT: Rule rejected.
  4847. [07/10/12 03:58:12.361]:ADTRACE PT: Evaluating selection criteria for rule 'restore'.
  4848. [07/10/12 03:58:12.361]:ADTRACE PT: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  4849. [07/10/12 03:58:12.361]:ADTRACE PT: Rule rejected.
  4850. [07/10/12 03:58:12.361]:ADTRACE PT: Applying to init-params #2.
  4851. [07/10/12 03:58:12.361]:ADTRACE PT: Evaluating selection criteria for rule 'skip'.
  4852. [07/10/12 03:58:12.361]:ADTRACE PT: (if-operation equal "instance") = FALSE.
  4853. [07/10/12 03:58:12.361]:ADTRACE PT: Rule rejected.
  4854. [07/10/12 03:58:12.361]:ADTRACE PT: Evaluating selection criteria for rule 'restore'.
  4855. [07/10/12 03:58:12.361]:ADTRACE PT: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  4856. [07/10/12 03:58:12.361]:ADTRACE PT: Rule rejected.
  4857. [07/10/12 03:58:12.361]:ADTRACE PT:Policy returned:
  4858. [07/10/12 03:58:12.361]:ADTRACE PT:
  4859. <nds dtdversion="3.5" ndsversion="8.x">
  4860. <input>
  4861. <status event-id="report status" level="warning">Remote driver stopped</status>
  4862. <init-params event-id="write state">
  4863. <publisher-state>
  4864. <cookie>TVNEUwMAAADNMm2Sil7NAQAAAAAAAAAAKAAAAL+0AAAAAAAAAAAAAAAAAAC/tAAAAAAAAG324OqoH71EtU0ZVbvRPtIBAAAAAAAAAAEAAAAAAAAAbfbg6qgfvUS1TRlVu9E+0r+0AAAAAAAA</cookie>
  4865. </publisher-state>
  4866. </init-params>
  4867. </input>
  4868. </nds>
  4869. [07/10/12 03:58:12.361]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-smp%-C.
  4870. [07/10/12 03:58:12.361]:ADTRACE PT:Applying policy: %+C%14CNOVLDATACOLL-smp-SkipSchemaMapping%-C.
  4871. [07/10/12 03:58:12.361]:ADTRACE PT: Applying to status #1.
  4872. [07/10/12 03:58:12.361]:ADTRACE PT: Evaluating selection criteria for rule 'skip'.
  4873. [07/10/12 03:58:12.361]:ADTRACE PT: (if-operation equal "instance") = FALSE.
  4874. [07/10/12 03:58:12.361]:ADTRACE PT: Rule rejected.
  4875. [07/10/12 03:58:12.361]:ADTRACE PT: Evaluating selection criteria for rule 'restore'.
  4876. [07/10/12 03:58:12.361]:ADTRACE PT: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  4877. [07/10/12 03:58:12.361]:ADTRACE PT: Rule rejected.
  4878. [07/10/12 03:58:12.361]:ADTRACE PT: Applying to init-params #2.
  4879. [07/10/12 03:58:12.361]:ADTRACE PT: Evaluating selection criteria for rule 'skip'.
  4880. [07/10/12 03:58:12.361]:ADTRACE PT: (if-operation equal "instance") = FALSE.
  4881. [07/10/12 03:58:12.361]:ADTRACE PT: Rule rejected.
  4882. [07/10/12 03:58:12.361]:ADTRACE PT: Evaluating selection criteria for rule 'restore'.
  4883. [07/10/12 03:58:12.361]:ADTRACE PT: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  4884. [07/10/12 03:58:12.361]:ADTRACE PT: Rule rejected.
  4885. [07/10/12 03:58:12.361]:ADTRACE PT:Policy returned:
  4886. [07/10/12 03:58:12.361]:ADTRACE PT:
  4887. <nds dtdversion="3.5" ndsversion="8.x">
  4888. <input>
  4889. <status event-id="report status" level="warning">Remote driver stopped</status>
  4890. <init-params event-id="write state">
  4891. <publisher-state>
  4892. <cookie>TVNEUwMAAADNMm2Sil7NAQAAAAAAAAAAKAAAAL+0AAAAAAAAAAAAAAAAAAC/tAAAAAAAAG324OqoH71EtU0ZVbvRPtIBAAAAAAAAAAEAAAAAAAAAbfbg6qgfvUS1TRlVu9E+0r+0AAAAAAAA</cookie>
  4893. </publisher-state>
  4894. </init-params>
  4895. </input>
  4896. </nds>
  4897. [07/10/12 03:58:12.376]:ADTRACE PT:Resolving association references.
  4898. [07/10/12 03:58:12.376]:ADTRACE PT:Reading XML attribute vnd.nds.stream://xxxxxIDM/xxxxx/IDMDriverGroup/Driver+Set/Active+Directory+Driver#DirXML-DriverStorage.
  4899. [07/10/12 03:58:12.376]:ADTRACE PT:Writing driver state.
  4900. [07/10/12 03:58:12.376]:ADTRACE PT:Writing XML attribute vnd.nds.stream://xxxxxIDM/xxxxx/IDMDriverGroup/Driver+Set/Active+Directory+Driver#DirXML-DriverStorage.
  4901. [07/10/12 03:58:12.486]:ADTRACE PT:Applying event transformation policies.
  4902. [07/10/12 03:58:12.501]:ADTRACE PT:Applying policy: %+C%14CNOVLADENTEX-pub-etp-EntitlementsImpl%-C.
  4903. [07/10/12 03:58:12.501]:ADTRACE PT: Applying to status #1.
  4904. [07/10/12 03:58:12.501]:ADTRACE PT: Evaluating selection criteria for rule 'Disallow user account delete when using entitlements'.
  4905. [07/10/12 03:58:12.501]:ADTRACE PT: (if-operation equal "delete") = FALSE.
  4906. [07/10/12 03:58:12.501]:ADTRACE PT: Rule rejected.
  4907. [07/10/12 03:58:12.501]:ADTRACE PT: Evaluating selection criteria for rule 'Strip Login Disabled from operation (Disable Option)'.
  4908. [07/10/12 03:58:12.501]:ADTRACE PT: (if-global-variable 'drv.entitlement.UserAccount' equal "true") = TRUE.
  4909. [07/10/12 03:58:12.501]:ADTRACE PT: (if-global-variable 'drv.entitlement.remove' equal "disable") = TRUE.
  4910. [07/10/12 03:58:12.501]:ADTRACE PT: (if-class-name equal "User") = FALSE.
  4911. [07/10/12 03:58:12.501]:ADTRACE PT: Rule rejected.
  4912. [07/10/12 03:58:12.501]:ADTRACE PT: Applying to init-params #2.
  4913. [07/10/12 03:58:12.501]:ADTRACE PT: Evaluating selection criteria for rule 'Disallow user account delete when using entitlements'.
  4914. [07/10/12 03:58:12.501]:ADTRACE PT: (if-operation equal "delete") = FALSE.
  4915. [07/10/12 03:58:12.501]:ADTRACE PT: Rule rejected.
  4916. [07/10/12 03:58:12.501]:ADTRACE PT: Evaluating selection criteria for rule 'Strip Login Disabled from operation (Disable Option)'.
  4917. [07/10/12 03:58:12.501]:ADTRACE PT: (if-global-variable 'drv.entitlement.UserAccount' equal "true") = TRUE.
  4918. [07/10/12 03:58:12.501]:ADTRACE PT: (if-global-variable 'drv.entitlement.remove' equal "disable") = TRUE.
  4919. [07/10/12 03:58:12.501]:ADTRACE PT: (if-class-name equal "User") = FALSE.
  4920. [07/10/12 03:58:12.501]:ADTRACE PT: Rule rejected.
  4921. [07/10/12 03:58:12.501]:ADTRACE PT:Policy returned:
  4922. [07/10/12 03:58:12.501]:ADTRACE PT:
  4923. <nds dtdversion="3.5" ndsversion="8.x">
  4924. <input>
  4925. <status event-id="report status" level="warning">Remote driver stopped</status>
  4926. <init-params event-id="write state">
  4927. <publisher-state>
  4928. <cookie>TVNEUwMAAADNMm2Sil7NAQAAAAAAAAAAKAAAAL+0AAAAAAAAAAAAAAAAAAC/tAAAAAAAAG324OqoH71EtU0ZVbvRPtIBAAAAAAAAAAEAAAAAAAAAbfbg6qgfvUS1TRlVu9E+0r+0AAAAAAAA</cookie>
  4929. </publisher-state>
  4930. </init-params>
  4931. </input>
  4932. </nds>
  4933. [07/10/12 03:58:12.501]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-pub-etp-HandleMovesAndRenames%-C.
  4934. [07/10/12 03:58:12.501]:ADTRACE PT: Applying to status #1.
  4935. [07/10/12 03:58:12.501]:ADTRACE PT: Evaluating selection criteria for rule 'break if not a move or rename'.
  4936. [07/10/12 03:58:12.501]:ADTRACE PT: (if-operation not-match "move|rename") = TRUE.
  4937. [07/10/12 03:58:12.501]:ADTRACE PT: Rule selected.
  4938. [07/10/12 03:58:12.501]:ADTRACE PT: Applying rule 'break if not a move or rename'.
  4939. [07/10/12 03:58:12.501]:ADTRACE PT: Action: do-break().
  4940. [07/10/12 03:58:12.501]:ADTRACE PT: Applying to init-params #2.
  4941. [07/10/12 03:58:12.501]:ADTRACE PT: Evaluating selection criteria for rule 'break if not a move or rename'.
  4942. [07/10/12 03:58:12.501]:ADTRACE PT: (if-operation not-match "move|rename") = TRUE.
  4943. [07/10/12 03:58:12.501]:ADTRACE PT: Rule selected.
  4944. [07/10/12 03:58:12.501]:ADTRACE PT: Applying rule 'break if not a move or rename'.
  4945. [07/10/12 03:58:12.517]:ADTRACE PT: Action: do-break().
  4946. [07/10/12 03:58:12.517]:ADTRACE PT:Policy returned:
  4947. [07/10/12 03:58:12.517]:ADTRACE PT:
  4948. <nds dtdversion="3.5" ndsversion="8.x">
  4949. <input>
  4950. <status event-id="report status" level="warning">Remote driver stopped</status>
  4951. <init-params event-id="write state">
  4952. <publisher-state>
  4953. <cookie>TVNEUwMAAADNMm2Sil7NAQAAAAAAAAAAKAAAAL+0AAAAAAAAAAAAAAAAAAC/tAAAAAAAAG324OqoH71EtU0ZVbvRPtIBAAAAAAAAAAEAAAAAAAAAbfbg6qgfvUS1TRlVu9E+0r+0AAAAAAAA</cookie>
  4954. </publisher-state>
  4955. </init-params>
  4956. </input>
  4957. </nds>
  4958. [07/10/12 03:58:12.517]:ADTRACE PT:Applying publisher filter.
  4959. [07/10/12 03:58:12.517]:ADTRACE PT:Publisher processing status for .
  4960. [07/10/12 03:58:12.517]:ADTRACE PT:Applying command transformation policies.
  4961. [07/10/12 03:58:12.517]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-pub-ctp-UserNameMap%-C.
  4962. [07/10/12 03:58:12.517]:ADTRACE PT: Applying to status #1.
  4963. [07/10/12 03:58:12.517]:ADTRACE PT: Evaluating selection criteria for rule 'consider user objects when name mapping is enabled'.
  4964. [07/10/12 03:58:12.517]:ADTRACE PT: (if-class-name not-equal "User") = TRUE.
  4965. [07/10/12 03:58:12.517]:ADTRACE PT: Rule selected.
  4966. [07/10/12 03:58:12.517]:ADTRACE PT: Applying rule 'consider user objects when name mapping is enabled'.
  4967. [07/10/12 03:58:12.517]:ADTRACE PT: Action: do-break().
  4968. [07/10/12 03:58:12.517]:ADTRACE PT:Policy returned:
  4969. [07/10/12 03:58:12.517]:ADTRACE PT:
  4970. <nds dtdversion="3.5" ndsversion="8.x">
  4971. <input>
  4972. <status event-id="report status" level="warning">Remote driver stopped</status>
  4973. </input>
  4974. </nds>
  4975. [07/10/12 03:58:12.517]:ADTRACE PT:Applying policy: %+C%14CNOVLPWDSYNC-pub-ctp-DefaultPwd%-C.
  4976. [07/10/12 03:58:12.517]:ADTRACE PT: Applying to status #1.
  4977. [07/10/12 03:58:12.517]:ADTRACE PT: Evaluating selection criteria for rule 'On User add, provide default password of @Dirxml1 if no password exists'.
  4978. [07/10/12 03:58:12.517]:ADTRACE PT: (if-operation equal "add") = FALSE.
  4979. [07/10/12 03:58:12.517]:ADTRACE PT: Rule rejected.
  4980. [07/10/12 03:58:12.517]:ADTRACE PT:Policy returned:
  4981. [07/10/12 03:58:12.517]:ADTRACE PT:
  4982. <nds dtdversion="3.5" ndsversion="8.x">
  4983. <input>
  4984. <status event-id="report status" level="warning">Remote driver stopped</status>
  4985. </input>
  4986. </nds>
  4987. [07/10/12 03:58:12.517]:ADTRACE PT:Applying policy: %+C%14CNOVLPWDSYNC-pub-ctp-CheckPwdGCV%-C.
  4988. [07/10/12 03:58:12.517]:ADTRACE PT: Applying to status #1.
  4989. [07/10/12 03:58:12.517]:ADTRACE PT: Evaluating selection criteria for rule 'Block publishing passwords to the Identity Vault when adding an object'.
  4990. [07/10/12 03:58:12.517]:ADTRACE PT: (if-global-variable 'enable-password-publish' equal "false") = FALSE.
  4991. [07/10/12 03:58:12.517]:ADTRACE PT: Rule rejected.
  4992. [07/10/12 03:58:12.517]:ADTRACE PT: Evaluating selection criteria for rule 'Block sending modify-password changes to the Identity Vault'.
  4993. [07/10/12 03:58:12.517]:ADTRACE PT: (if-global-variable 'enable-password-publish' equal "false") = FALSE.
  4994. [07/10/12 03:58:12.517]:ADTRACE PT: Rule rejected.
  4995. [07/10/12 03:58:12.517]:ADTRACE PT:Policy returned:
  4996. [07/10/12 03:58:12.517]:ADTRACE PT:
  4997. <nds dtdversion="3.5" ndsversion="8.x">
  4998. <input>
  4999. <status event-id="report status" level="warning">Remote driver stopped</status>
  5000. </input>
  5001. </nds>
  5002. [07/10/12 03:58:12.517]:ADTRACE PT:Applying policy: %+C%14CNOVLPWDSYNC-pub-ctp-PublishDistPwd%-C.
  5003. [07/10/12 03:58:12.517]:ADTRACE PT: Applying to status #1.
  5004. [07/10/12 03:58:12.517]:ADTRACE PT: Evaluating selection criteria for rule 'Add nspmDistributionAttribute attribute to add operation'.
  5005. [07/10/12 03:58:12.517]:ADTRACE PT: (if-global-variable 'publish-password-to-dp' equal "true") = FALSE.
  5006. [07/10/12 03:58:12.517]:ADTRACE PT: Rule rejected.
  5007. [07/10/12 03:58:12.517]:ADTRACE PT: Evaluating selection criteria for rule 'Change modify-password operations to a modify'.
  5008. [07/10/12 03:58:12.533]:ADTRACE PT: (if-global-variable 'publish-password-to-dp' equal "true") = FALSE.
  5009. [07/10/12 03:58:12.533]:ADTRACE PT: Rule rejected.
  5010. [07/10/12 03:58:12.533]:ADTRACE PT:Policy returned:
  5011. [07/10/12 03:58:12.533]:ADTRACE PT:
  5012. <nds dtdversion="3.5" ndsversion="8.x">
  5013. <input>
  5014. <status event-id="report status" level="warning">Remote driver stopped</status>
  5015. </input>
  5016. </nds>
  5017. [07/10/12 03:58:12.533]:ADTRACE PT:Applying policy: %+C%14CNOVLPWDSYNC-pub-ctp-PublishNDSPwd%-C.
  5018. [07/10/12 03:58:12.533]:ADTRACE PT: Applying to status #1.
  5019. [07/10/12 03:58:12.533]:ADTRACE PT: Evaluating selection criteria for rule 'Block publishing passwords to eDirectory password'.
  5020. [07/10/12 03:58:12.533]:ADTRACE PT: (if-global-variable 'publish-password-to-nds' equal "false") = FALSE.
  5021. [07/10/12 03:58:12.533]:ADTRACE PT: Rule rejected.
  5022. [07/10/12 03:58:12.533]:ADTRACE PT: Evaluating selection criteria for rule 'Block sending modify-password changes to the eDirectory password'.
  5023. [07/10/12 03:58:12.533]:ADTRACE PT: (if-global-variable 'publish-password-to-nds' equal "false") = FALSE.
  5024. [07/10/12 03:58:12.533]:ADTRACE PT: Rule rejected.
  5025. [07/10/12 03:58:12.533]:ADTRACE PT:Policy returned:
  5026. [07/10/12 03:58:12.533]:ADTRACE PT:
  5027. <nds dtdversion="3.5" ndsversion="8.x">
  5028. <input>
  5029. <status event-id="report status" level="warning">Remote driver stopped</status>
  5030. </input>
  5031. </nds>
  5032. [07/10/12 03:58:12.533]:ADTRACE PT:Applying policy: %+C%14CNOVLPWDSYNC-pub-ctp-AddPwdPayload%-C.
  5033. [07/10/12 03:58:12.533]:ADTRACE PT: Applying to status #1.
  5034. [07/10/12 03:58:12.533]:ADTRACE PT: Evaluating selection criteria for rule 'Add operation-data element to password operations'.
  5035. [07/10/12 03:58:12.533]:ADTRACE PT: (if-operation equal "add") = FALSE.
  5036. [07/10/12 03:58:12.533]:ADTRACE PT: (if-operation equal "add") = FALSE.
  5037. [07/10/12 03:58:12.533]:ADTRACE PT: (if-operation equal "modify-password") = FALSE.
  5038. [07/10/12 03:58:12.533]:ADTRACE PT: (if-operation equal "modify") = FALSE.
  5039. [07/10/12 03:58:12.533]:ADTRACE PT: Rule rejected.
  5040. [07/10/12 03:58:12.533]:ADTRACE PT: Evaluating selection criteria for rule 'Add payload data to password operations'.
  5041. [07/10/12 03:58:12.533]:ADTRACE PT: (if-operation equal "add") = FALSE.
  5042. [07/10/12 03:58:12.533]:ADTRACE PT: (if-operation equal "add") = FALSE.
  5043. [07/10/12 03:58:12.533]:ADTRACE PT: (if-operation equal "modify-password") = FALSE.
  5044. [07/10/12 03:58:12.533]:ADTRACE PT: (if-operation equal "modify") = FALSE.
  5045. [07/10/12 03:58:12.533]:ADTRACE PT: Rule rejected.
  5046. [07/10/12 03:58:12.533]:ADTRACE PT:Policy returned:
  5047. [07/10/12 03:58:12.533]:ADTRACE PT:
  5048. <nds dtdversion="3.5" ndsversion="8.x">
  5049. <input>
  5050. <status event-id="report status" level="warning">Remote driver stopped</status>
  5051. </input>
  5052. </nds>
  5053. [07/10/12 03:58:12.533]:ADTRACE PT:Applying policy: %+C%14CNOVLATRKBASE-pub-ctp-WriteAccountsOnAdds%-C.
  5054. [07/10/12 03:58:12.533]:ADTRACE PT: Applying to status #1.
  5055. [07/10/12 03:58:12.533]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - disregard policy if disabled'.
  5056. [07/10/12 03:58:12.533]:ADTRACE PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  5057. [07/10/12 03:58:12.533]:ADTRACE PT: Rule rejected.
  5058. [07/10/12 03:58:12.533]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - on add operation add Dirxml-Accounts'.
  5059. [07/10/12 03:58:12.533]:ADTRACE PT: (if-operation equal "add") = FALSE.
  5060. [07/10/12 03:58:12.533]:ADTRACE PT: Rule rejected.
  5061. [07/10/12 03:58:12.533]:ADTRACE PT:Policy returned:
  5062. [07/10/12 03:58:12.533]:ADTRACE PT:
  5063. <nds dtdversion="3.5" ndsversion="8.x">
  5064. <input>
  5065. <status event-id="report status" level="warning">Remote driver stopped</status>
  5066. </input>
  5067. </nds>
  5068. [07/10/12 03:58:12.533]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-pub-ctp%-C.
  5069. [07/10/12 03:58:12.533]:ADTRACE PT: Applying to status #1.
  5070. [07/10/12 03:58:12.533]:ADTRACE PT: Evaluating selection criteria for rule 'set cached context value on merge'.
  5071. [07/10/12 03:58:12.533]:ADTRACE PT: (if-operation equal "modify") = FALSE.
  5072. [07/10/12 03:58:12.533]:ADTRACE PT: Rule rejected.
  5073. [07/10/12 03:58:12.533]:ADTRACE PT: Evaluating selection criteria for rule 'remove managed attributes when object disassociated'.
  5074. [07/10/12 03:58:12.533]:ADTRACE PT: (if-operation equal "remove-association") = FALSE.
  5075. [07/10/12 03:58:12.533]:ADTRACE PT: Rule rejected.
  5076. [07/10/12 03:58:12.533]:ADTRACE PT: Evaluating selection criteria for rule 'Prevent unassociated users from being removed from groups'.
  5077. [07/10/12 03:58:12.533]:ADTRACE PT: (if-operation equal "modify") = FALSE.
  5078. [07/10/12 03:58:12.533]:ADTRACE PT: Rule rejected.
  5079. [07/10/12 03:58:12.533]:ADTRACE PT: Evaluating selection criteria for rule 'Set Equivalent To Me when group members change'.
  5080. [07/10/12 03:58:12.548]:ADTRACE PT: (if-class-name equal "Group") = FALSE.
  5081. [07/10/12 03:58:12.548]:ADTRACE PT: Rule rejected.
  5082. [07/10/12 03:58:12.548]:ADTRACE PT:Policy returned:
  5083. [07/10/12 03:58:12.548]:ADTRACE PT:
  5084. <nds dtdversion="3.5" ndsversion="8.x">
  5085. <input>
  5086. <status event-id="report status" level="warning">Remote driver stopped</status>
  5087. </input>
  5088. </nds>
  5089. [07/10/12 03:58:12.548]:ADTRACE PT:Applying XSLT policy: %+C%14CNOVLADDCFG-pub-cts%-C.
  5090. [07/10/12 03:58:12.548]:ADTRACE PT:Policy returned:
  5091. [07/10/12 03:58:12.548]:ADTRACE PT:
  5092. <nds dtdversion="3.5" ndsversion="8.x">
  5093. <input>
  5094. <status event-id="report status" level="warning">Remote driver stopped</status>
  5095. </input>
  5096. </nds>
  5097. [07/10/12 03:58:12.548]:ADTRACE PT:Filtering out notification-only attributes.
  5098. [07/10/12 03:58:12.548]:ADTRACE PT:Pumping XDS to eDirectory.
  5099. [07/10/12 03:58:12.548]:ADTRACE PT:Performing operation status for .
  5100. [07/10/12 03:58:12.548]:ADTRACE PT:
  5101. DirXML Log Event -------------------
  5102. Driver: \xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver
  5103. Channel: Publisher
  5104. Status: Warning
  5105. Message: Remote driver stopped
  5106. [07/10/12 03:58:12.564]:ADTRACE :Remote Interface Driver: Closing connection...
  5107. [07/10/12 03:58:12.564]:ADTRACE :Remote Interface Driver: Connection closed
  5108. [07/10/12 03:58:12.767]:ADTRACE PT:Applying publisher filter.
  5109. [07/10/12 03:58:12.767]:ADTRACE PT:Publisher processing init-params for .
  5110. [07/10/12 03:58:12.783]:ADTRACE PT:Applying command transformation policies.
  5111. [07/10/12 03:58:12.783]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-pub-ctp-UserNameMap%-C.
  5112. [07/10/12 03:58:12.783]:ADTRACE PT: Applying to init-params #1.
  5113. [07/10/12 03:58:12.783]:ADTRACE PT: Evaluating selection criteria for rule 'consider user objects when name mapping is enabled'.
  5114. [07/10/12 03:58:12.783]:ADTRACE PT: (if-class-name not-equal "User") = TRUE.
  5115. [07/10/12 03:58:12.783]:ADTRACE PT: Rule selected.
  5116. [07/10/12 03:58:12.783]:ADTRACE PT: Applying rule 'consider user objects when name mapping is enabled'.
  5117. [07/10/12 03:58:12.783]:ADTRACE PT: Action: do-break().
  5118. [07/10/12 03:58:12.783]:ADTRACE PT:Policy returned:
  5119. [07/10/12 03:58:12.783]:ADTRACE PT:
  5120. <nds dtdversion="3.5" ndsversion="8.x">
  5121. <input>
  5122. <init-params event-id="write state">
  5123. <publisher-state>
  5124. <cookie>TVNEUwMAAADNMm2Sil7NAQAAAAAAAAAAKAAAAL+0AAAAAAAAAAAAAAAAAAC/tAAAAAAAAG324OqoH71EtU0ZVbvRPtIBAAAAAAAAAAEAAAAAAAAAbfbg6qgfvUS1TRlVu9E+0r+0AAAAAAAA</cookie>
  5125. </publisher-state>
  5126. </init-params>
  5127. </input>
  5128. </nds>
  5129. [07/10/12 03:58:12.783]:ADTRACE PT:Applying policy: %+C%14CNOVLPWDSYNC-pub-ctp-DefaultPwd%-C.
  5130. [07/10/12 03:58:12.783]:ADTRACE PT: Applying to init-params #1.
  5131. [07/10/12 03:58:12.783]:ADTRACE PT: Evaluating selection criteria for rule 'On User add, provide default password of @Dirxml1 if no password exists'.
  5132. [07/10/12 03:58:12.783]:ADTRACE PT: (if-operation equal "add") = FALSE.
  5133. [07/10/12 03:58:12.783]:ADTRACE PT: Rule rejected.
  5134. [07/10/12 03:58:12.783]:ADTRACE PT:Policy returned:
  5135. [07/10/12 03:58:12.783]:ADTRACE PT:
  5136. <nds dtdversion="3.5" ndsversion="8.x">
  5137. <input>
  5138. <init-params event-id="write state">
  5139. <publisher-state>
  5140. <cookie>TVNEUwMAAADNMm2Sil7NAQAAAAAAAAAAKAAAAL+0AAAAAAAAAAAAAAAAAAC/tAAAAAAAAG324OqoH71EtU0ZVbvRPtIBAAAAAAAAAAEAAAAAAAAAbfbg6qgfvUS1TRlVu9E+0r+0AAAAAAAA</cookie>
  5141. </publisher-state>
  5142. </init-params>
  5143. </input>
  5144. </nds>
  5145. [07/10/12 03:58:12.783]:ADTRACE PT:Applying policy: %+C%14CNOVLPWDSYNC-pub-ctp-CheckPwdGCV%-C.
  5146. [07/10/12 03:58:12.783]:ADTRACE PT: Applying to init-params #1.
  5147. [07/10/12 03:58:12.783]:ADTRACE PT: Evaluating selection criteria for rule 'Block publishing passwords to the Identity Vault when adding an object'.
  5148. [07/10/12 03:58:12.783]:ADTRACE PT: (if-global-variable 'enable-password-publish' equal "false") = FALSE.
  5149. [07/10/12 03:58:12.783]:ADTRACE PT: Rule rejected.
  5150. [07/10/12 03:58:12.783]:ADTRACE PT: Evaluating selection criteria for rule 'Block sending modify-password changes to the Identity Vault'.
  5151. [07/10/12 03:58:12.783]:ADTRACE PT: (if-global-variable 'enable-password-publish' equal "false") = FALSE.
  5152. [07/10/12 03:58:12.783]:ADTRACE PT: Rule rejected.
  5153. [07/10/12 03:58:12.783]:ADTRACE PT:Policy returned:
  5154. [07/10/12 03:58:12.783]:ADTRACE PT:
  5155. <nds dtdversion="3.5" ndsversion="8.x">
  5156. <input>
  5157. <init-params event-id="write state">
  5158. <publisher-state>
  5159. <cookie>TVNEUwMAAADNMm2Sil7NAQAAAAAAAAAAKAAAAL+0AAAAAAAAAAAAAAAAAAC/tAAAAAAAAG324OqoH71EtU0ZVbvRPtIBAAAAAAAAAAEAAAAAAAAAbfbg6qgfvUS1TRlVu9E+0r+0AAAAAAAA</cookie>
  5160. </publisher-state>
  5161. </init-params>
  5162. </input>
  5163. </nds>
  5164. [07/10/12 03:58:12.798]:ADTRACE PT:Applying policy: %+C%14CNOVLPWDSYNC-pub-ctp-PublishDistPwd%-C.
  5165. [07/10/12 03:58:12.798]:ADTRACE PT: Applying to init-params #1.
  5166. [07/10/12 03:58:12.798]:ADTRACE PT: Evaluating selection criteria for rule 'Add nspmDistributionAttribute attribute to add operation'.
  5167. [07/10/12 03:58:12.798]:ADTRACE PT: (if-global-variable 'publish-password-to-dp' equal "true") = FALSE.
  5168. [07/10/12 03:58:12.798]:ADTRACE PT: Rule rejected.
  5169. [07/10/12 03:58:12.798]:ADTRACE PT: Evaluating selection criteria for rule 'Change modify-password operations to a modify'.
  5170. [07/10/12 03:58:12.798]:ADTRACE PT: (if-global-variable 'publish-password-to-dp' equal "true") = FALSE.
  5171. [07/10/12 03:58:12.798]:ADTRACE PT: Rule rejected.
  5172. [07/10/12 03:58:12.798]:ADTRACE PT:Policy returned:
  5173. [07/10/12 03:58:12.798]:ADTRACE PT:
  5174. <nds dtdversion="3.5" ndsversion="8.x">
  5175. <input>
  5176. <init-params event-id="write state">
  5177. <publisher-state>
  5178. <cookie>TVNEUwMAAADNMm2Sil7NAQAAAAAAAAAAKAAAAL+0AAAAAAAAAAAAAAAAAAC/tAAAAAAAAG324OqoH71EtU0ZVbvRPtIBAAAAAAAAAAEAAAAAAAAAbfbg6qgfvUS1TRlVu9E+0r+0AAAAAAAA</cookie>
  5179. </publisher-state>
  5180. </init-params>
  5181. </input>
  5182. </nds>
  5183. [07/10/12 03:58:12.798]:ADTRACE PT:Applying policy: %+C%14CNOVLPWDSYNC-pub-ctp-PublishNDSPwd%-C.
  5184. [07/10/12 03:58:12.798]:ADTRACE PT: Applying to init-params #1.
  5185. [07/10/12 03:58:12.798]:ADTRACE PT: Evaluating selection criteria for rule 'Block publishing passwords to eDirectory password'.
  5186. [07/10/12 03:58:12.798]:ADTRACE PT: (if-global-variable 'publish-password-to-nds' equal "false") = FALSE.
  5187. [07/10/12 03:58:12.798]:ADTRACE PT: Rule rejected.
  5188. [07/10/12 03:58:12.798]:ADTRACE PT: Evaluating selection criteria for rule 'Block sending modify-password changes to the eDirectory password'.
  5189. [07/10/12 03:58:12.798]:ADTRACE PT: (if-global-variable 'publish-password-to-nds' equal "false") = FALSE.
  5190. [07/10/12 03:58:12.798]:ADTRACE PT: Rule rejected.
  5191. [07/10/12 03:58:12.798]:ADTRACE PT:Policy returned:
  5192. [07/10/12 03:58:12.798]:ADTRACE PT:
  5193. <nds dtdversion="3.5" ndsversion="8.x">
  5194. <input>
  5195. <init-params event-id="write state">
  5196. <publisher-state>
  5197. <cookie>TVNEUwMAAADNMm2Sil7NAQAAAAAAAAAAKAAAAL+0AAAAAAAAAAAAAAAAAAC/tAAAAAAAAG324OqoH71EtU0ZVbvRPtIBAAAAAAAAAAEAAAAAAAAAbfbg6qgfvUS1TRlVu9E+0r+0AAAAAAAA</cookie>
  5198. </publisher-state>
  5199. </init-params>
  5200. </input>
  5201. </nds>
  5202. [07/10/12 03:58:12.798]:ADTRACE PT:Applying policy: %+C%14CNOVLPWDSYNC-pub-ctp-AddPwdPayload%-C.
  5203. [07/10/12 03:58:12.798]:ADTRACE PT: Applying to init-params #1.
  5204. [07/10/12 03:58:12.798]:ADTRACE PT: Evaluating selection criteria for rule 'Add operation-data element to password operations'.
  5205. [07/10/12 03:58:12.798]:ADTRACE PT: (if-operation equal "add") = FALSE.
  5206. [07/10/12 03:58:12.798]:ADTRACE PT: (if-operation equal "add") = FALSE.
  5207. [07/10/12 03:58:12.798]:ADTRACE PT: (if-operation equal "modify-password") = FALSE.
  5208. [07/10/12 03:58:12.798]:ADTRACE PT: (if-operation equal "modify") = FALSE.
  5209. [07/10/12 03:58:12.798]:ADTRACE PT: Rule rejected.
  5210. [07/10/12 03:58:12.798]:ADTRACE PT: Evaluating selection criteria for rule 'Add payload data to password operations'.
  5211. [07/10/12 03:58:12.798]:ADTRACE PT: (if-operation equal "add") = FALSE.
  5212. [07/10/12 03:58:12.798]:ADTRACE PT: (if-operation equal "add") = FALSE.
  5213. [07/10/12 03:58:12.798]:ADTRACE PT: (if-operation equal "modify-password") = FALSE.
  5214. [07/10/12 03:58:12.798]:ADTRACE PT: (if-operation equal "modify") = FALSE.
  5215. [07/10/12 03:58:12.798]:ADTRACE PT: Rule rejected.
  5216. [07/10/12 03:58:12.798]:ADTRACE PT:Policy returned:
  5217. [07/10/12 03:58:12.798]:ADTRACE PT:
  5218. <nds dtdversion="3.5" ndsversion="8.x">
  5219. <input>
  5220. <init-params event-id="write state">
  5221. <publisher-state>
  5222. <cookie>TVNEUwMAAADNMm2Sil7NAQAAAAAAAAAAKAAAAL+0AAAAAAAAAAAAAAAAAAC/tAAAAAAAAG324OqoH71EtU0ZVbvRPtIBAAAAAAAAAAEAAAAAAAAAbfbg6qgfvUS1TRlVu9E+0r+0AAAAAAAA</cookie>
  5223. </publisher-state>
  5224. </init-params>
  5225. </input>
  5226. </nds>
  5227. [07/10/12 03:58:12.798]:ADTRACE PT:Applying policy: %+C%14CNOVLATRKBASE-pub-ctp-WriteAccountsOnAdds%-C.
  5228. [07/10/12 03:58:12.798]:ADTRACE PT: Applying to init-params #1.
  5229. [07/10/12 03:58:12.798]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - disregard policy if disabled'.
  5230. [07/10/12 03:58:12.798]:ADTRACE PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  5231. [07/10/12 03:58:12.798]:ADTRACE PT: Rule rejected.
  5232. [07/10/12 03:58:12.798]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - on add operation add Dirxml-Accounts'.
  5233. [07/10/12 03:58:12.798]:ADTRACE PT: (if-operation equal "add") = FALSE.
  5234. [07/10/12 03:58:12.798]:ADTRACE PT: Rule rejected.
  5235. [07/10/12 03:58:12.798]:ADTRACE PT:Policy returned:
  5236. [07/10/12 03:58:12.798]:ADTRACE PT:
  5237. <nds dtdversion="3.5" ndsversion="8.x">
  5238. <input>
  5239. <init-params event-id="write state">
  5240. <publisher-state>
  5241. <cookie>TVNEUwMAAADNMm2Sil7NAQAAAAAAAAAAKAAAAL+0AAAAAAAAAAAAAAAAAAC/tAAAAAAAAG324OqoH71EtU0ZVbvRPtIBAAAAAAAAAAEAAAAAAAAAbfbg6qgfvUS1TRlVu9E+0r+0AAAAAAAA</cookie>
  5242. </publisher-state>
  5243. </init-params>
  5244. </input>
  5245. </nds>
  5246. [07/10/12 03:58:12.814]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-pub-ctp%-C.
  5247. [07/10/12 03:58:12.814]:ADTRACE PT: Applying to init-params #1.
  5248. [07/10/12 03:58:12.814]:ADTRACE PT: Evaluating selection criteria for rule 'set cached context value on merge'.
  5249. [07/10/12 03:58:12.814]:ADTRACE PT: (if-operation equal "modify") = FALSE.
  5250. [07/10/12 03:58:12.814]:ADTRACE PT: Rule rejected.
  5251. [07/10/12 03:58:12.814]:ADTRACE PT: Evaluating selection criteria for rule 'remove managed attributes when object disassociated'.
  5252. [07/10/12 03:58:12.814]:ADTRACE PT: (if-operation equal "remove-association") = FALSE.
  5253. [07/10/12 03:58:12.814]:ADTRACE PT: Rule rejected.
  5254. [07/10/12 03:58:12.814]:ADTRACE PT: Evaluating selection criteria for rule 'Prevent unassociated users from being removed from groups'.
  5255. [07/10/12 03:58:12.814]:ADTRACE PT: (if-operation equal "modify") = FALSE.
  5256. [07/10/12 03:58:12.814]:ADTRACE PT: Rule rejected.
  5257. [07/10/12 03:58:12.814]:ADTRACE PT: Evaluating selection criteria for rule 'Set Equivalent To Me when group members change'.
  5258. [07/10/12 03:58:12.814]:ADTRACE PT: (if-class-name equal "Group") = FALSE.
  5259. [07/10/12 03:58:12.814]:ADTRACE PT: Rule rejected.
  5260. [07/10/12 03:58:12.814]:ADTRACE PT:Policy returned:
  5261. [07/10/12 03:58:12.814]:ADTRACE PT:
  5262. <nds dtdversion="3.5" ndsversion="8.x">
  5263. <input>
  5264. <init-params event-id="write state">
  5265. <publisher-state>
  5266. <cookie>TVNEUwMAAADNMm2Sil7NAQAAAAAAAAAAKAAAAL+0AAAAAAAAAAAAAAAAAAC/tAAAAAAAAG324OqoH71EtU0ZVbvRPtIBAAAAAAAAAAEAAAAAAAAAbfbg6qgfvUS1TRlVu9E+0r+0AAAAAAAA</cookie>
  5267. </publisher-state>
  5268. </init-params>
  5269. </input>
  5270. </nds>
  5271. [07/10/12 03:58:12.814]:ADTRACE PT:Applying XSLT policy: %+C%14CNOVLADDCFG-pub-cts%-C.
  5272. [07/10/12 03:58:12.814]:ADTRACE PT:Policy returned:
  5273. [07/10/12 03:58:12.814]:ADTRACE PT:
  5274. <nds dtdversion="3.5" ndsversion="8.x">
  5275. <input>
  5276. <init-params event-id="write state">
  5277. <publisher-state>
  5278. <cookie>TVNEUwMAAADNMm2Sil7NAQAAAAAAAAAAKAAAAL+0AAAAAAAAAAAAAAAAAAC/tAAAAAAAAG324OqoH71EtU0ZVbvRPtIBAAAAAAAAAAEAAAAAAAAAbfbg6qgfvUS1TRlVu9E+0r+0AAAAAAAA</cookie>
  5279. </publisher-state>
  5280. </init-params>
  5281. </input>
  5282. </nds>
  5283. [07/10/12 03:58:12.814]:ADTRACE PT:Filtering out notification-only attributes.
  5284. [07/10/12 03:58:12.814]:ADTRACE PT:Pumping XDS to eDirectory.
  5285. [07/10/12 03:58:12.814]:ADTRACE PT:
  5286. DirXML Log Event -------------------
  5287. Driver: \xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver
  5288. Channel: Publisher
  5289. Status: Success
  5290. [07/10/12 03:58:12.814]:ADTRACE PT:Fixing up association references.
  5291. [07/10/12 03:58:12.814]:ADTRACE PT:Applying schema mapping policies to output.
  5292. [07/10/12 03:58:12.814]:ADTRACE PT:Applying policy: %+C%14CNOVLDATACOLL-smp-SkipSchemaMapping%-C.
  5293. [07/10/12 03:58:12.814]:ADTRACE PT: Applying to status #1.
  5294. [07/10/12 03:58:12.814]:ADTRACE PT: Evaluating selection criteria for rule 'skip'.
  5295. [07/10/12 03:58:12.814]:ADTRACE PT: (if-operation equal "instance") = FALSE.
  5296. [07/10/12 03:58:12.814]:ADTRACE PT: Rule rejected.
  5297. [07/10/12 03:58:12.814]:ADTRACE PT: Evaluating selection criteria for rule 'restore'.
  5298. [07/10/12 03:58:12.814]:ADTRACE PT: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  5299. [07/10/12 03:58:12.814]:ADTRACE PT: Rule rejected.
  5300. [07/10/12 03:58:12.814]:ADTRACE PT: Applying to status #2.
  5301. [07/10/12 03:58:12.814]:ADTRACE PT: Evaluating selection criteria for rule 'skip'.
  5302. [07/10/12 03:58:12.814]:ADTRACE PT: (if-operation equal "instance") = FALSE.
  5303. [07/10/12 03:58:12.814]:ADTRACE PT: Rule rejected.
  5304. [07/10/12 03:58:12.814]:ADTRACE PT: Evaluating selection criteria for rule 'restore'.
  5305. [07/10/12 03:58:12.814]:ADTRACE PT: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  5306. [07/10/12 03:58:12.814]:ADTRACE PT: Rule rejected.
  5307. [07/10/12 03:58:12.814]:ADTRACE PT:Policy returned:
  5308. [07/10/12 03:58:12.814]:ADTRACE PT:
  5309. <nds dtdversion="4.0" ndsversion="8.x">
  5310. <source>
  5311. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  5312. <contact>Novell, Inc.</contact>
  5313. </source>
  5314. <output>
  5315. <status event-id="report status" level="success"></status>
  5316. <status event-id="write state" level="success"><application>DirXML</application>
  5317. <module>Active Directory Driver</module>
  5318. <object-dn></object-dn>
  5319. <component>Publisher</component>
  5320. </status>
  5321. </output>
  5322. </nds>
  5323. [07/10/12 03:58:12.814]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-smp%-C.
  5324. [07/10/12 03:58:12.814]:ADTRACE PT:Applying policy: %+C%14CNOVLDATACOLL-smp-SkipSchemaMapping%-C.
  5325. [07/10/12 03:58:12.814]:ADTRACE PT: Applying to status #1.
  5326. [07/10/12 03:58:12.814]:ADTRACE PT: Evaluating selection criteria for rule 'skip'.
  5327. [07/10/12 03:58:12.814]:ADTRACE PT: (if-operation equal "instance") = FALSE.
  5328. [07/10/12 03:58:12.814]:ADTRACE PT: Rule rejected.
  5329. [07/10/12 03:58:12.814]:ADTRACE PT: Evaluating selection criteria for rule 'restore'.
  5330. [07/10/12 03:58:12.829]:ADTRACE PT: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  5331. [07/10/12 03:58:12.829]:ADTRACE PT: Rule rejected.
  5332. [07/10/12 03:58:12.829]:ADTRACE PT: Applying to status #2.
  5333. [07/10/12 03:58:12.829]:ADTRACE PT: Evaluating selection criteria for rule 'skip'.
  5334. [07/10/12 03:58:12.829]:ADTRACE PT: (if-operation equal "instance") = FALSE.
  5335. [07/10/12 03:58:12.829]:ADTRACE PT: Rule rejected.
  5336. [07/10/12 03:58:12.829]:ADTRACE PT: Evaluating selection criteria for rule 'restore'.
  5337. [07/10/12 03:58:12.829]:ADTRACE PT: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  5338. [07/10/12 03:58:12.829]:ADTRACE PT: Rule rejected.
  5339. [07/10/12 03:58:12.829]:ADTRACE PT:Policy returned:
  5340. [07/10/12 03:58:12.829]:ADTRACE PT:
  5341. <nds dtdversion="4.0" ndsversion="8.x">
  5342. <source>
  5343. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  5344. <contact>Novell, Inc.</contact>
  5345. </source>
  5346. <output>
  5347. <status event-id="report status" level="success"></status>
  5348. <status event-id="write state" level="success"><application>DirXML</application>
  5349. <module>Active Directory Driver</module>
  5350. <object-dn></object-dn>
  5351. <component>Publisher</component>
  5352. </status>
  5353. </output>
  5354. </nds>
  5355. [07/10/12 03:58:12.829]:ADTRACE PT:Applying output transformation policies.
  5356. [07/10/12 03:58:12.829]:ADTRACE PT:Applying policy: %+C%14CNOVLADENTEX-otp-EntitlementsImpl%-C.
  5357. [07/10/12 03:58:12.829]:ADTRACE PT: Applying to status #1.
  5358. [07/10/12 03:58:12.829]:ADTRACE PT: Evaluating selection criteria for rule 'Intercept outbound queries for ADDomain'.
  5359. [07/10/12 03:58:12.829]:ADTRACE PT: (if-class-name equal "ADDomain") = FALSE.
  5360. [07/10/12 03:58:12.829]:ADTRACE PT: Rule rejected.
  5361. [07/10/12 03:58:12.829]:ADTRACE PT: Applying to status #2.
  5362. [07/10/12 03:58:12.829]:ADTRACE PT: Evaluating selection criteria for rule 'Intercept outbound queries for ADDomain'.
  5363. [07/10/12 03:58:12.829]:ADTRACE PT: (if-class-name equal "ADDomain") = FALSE.
  5364. [07/10/12 03:58:12.829]:ADTRACE PT: Rule rejected.
  5365. [07/10/12 03:58:12.829]:ADTRACE PT:Policy returned:
  5366. [07/10/12 03:58:12.829]:ADTRACE PT:
  5367. <nds dtdversion="4.0" ndsversion="8.x">
  5368. <source>
  5369. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  5370. <contact>Novell, Inc.</contact>
  5371. </source>
  5372. <output>
  5373. <status event-id="report status" level="success"></status>
  5374. <status event-id="write state" level="success"><application>DirXML</application>
  5375. <module>Active Directory Driver</module>
  5376. <object-dn></object-dn>
  5377. <component>Publisher</component>
  5378. </status>
  5379. </output>
  5380. </nds>
  5381. [07/10/12 03:58:12.829]:ADTRACE PT:Applying policy: %+C%14CNOVLADENTEX-otp-ExchangeMailboxPolicy%-C.
  5382. [07/10/12 03:58:12.829]:ADTRACE PT: Applying to status #1.
  5383. [07/10/12 03:58:12.829]:ADTRACE PT: Evaluating selection criteria for rule 'Exchange: Remove HomeMDB when disabled'.
  5384. [07/10/12 03:58:12.829]:ADTRACE PT: (if-global-variable 'drv.exchMailboxMethod' equal "disabled") = TRUE.
  5385. [07/10/12 03:58:12.829]:ADTRACE PT: Rule selected.
  5386. [07/10/12 03:58:12.829]:ADTRACE PT: Applying rule 'Exchange: Remove HomeMDB when disabled'.
  5387. [07/10/12 03:58:12.829]:ADTRACE PT: Action: do-strip-op-attr("homeMDB").
  5388. [07/10/12 03:58:12.829]:ADTRACE PT: Applying to status #2.
  5389. [07/10/12 03:58:12.829]:ADTRACE PT: Evaluating selection criteria for rule 'Exchange: Remove HomeMDB when disabled'.
  5390. [07/10/12 03:58:12.829]:ADTRACE PT: (if-global-variable 'drv.exchMailboxMethod' equal "disabled") = TRUE.
  5391. [07/10/12 03:58:12.829]:ADTRACE PT: Rule selected.
  5392. [07/10/12 03:58:12.829]:ADTRACE PT: Applying rule 'Exchange: Remove HomeMDB when disabled'.
  5393. [07/10/12 03:58:12.829]:ADTRACE PT: Action: do-strip-op-attr("homeMDB").
  5394. [07/10/12 03:58:12.829]:ADTRACE PT:Policy returned:
  5395. [07/10/12 03:58:12.829]:ADTRACE PT:
  5396. <nds dtdversion="4.0" ndsversion="8.x">
  5397. <source>
  5398. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  5399. <contact>Novell, Inc.</contact>
  5400. </source>
  5401. <output>
  5402. <status event-id="report status" level="success"></status>
  5403. <status event-id="write state" level="success"><application>DirXML</application>
  5404. <module>Active Directory Driver</module>
  5405. <object-dn></object-dn>
  5406. <component>Publisher</component>
  5407. </status>
  5408. </output>
  5409. </nds>
  5410. [07/10/12 03:58:12.829]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-otp-FormatConversions%-C.
  5411. [07/10/12 03:58:12.829]:ADTRACE PT: Applying to status #1.
  5412. [07/10/12 03:58:12.829]:ADTRACE PT: Evaluating selection criteria for rule 'Street Address: Convert LF to CR-LF'.
  5413. [07/10/12 03:58:12.829]:ADTRACE PT: Rule selected.
  5414. [07/10/12 03:58:12.829]:ADTRACE PT: Applying rule 'Street Address: Convert LF to CR-LF'.
  5415. [07/10/12 03:58:12.829]:ADTRACE PT: Action: do-reformat-op-attr("streetAddress",token-replace-all("[^\r]\n","\r\n",token-local-variable("current-value"))).
  5416. [07/10/12 03:58:12.829]:ADTRACE PT: Evaluating selection criteria for rule 'logonHours: Convert to Active Directory form'.
  5417. [07/10/12 03:58:12.845]:ADTRACE PT: Rule selected.
  5418. [07/10/12 03:58:12.845]:ADTRACE PT: Applying rule 'logonHours: Convert to Active Directory form'.
  5419. [07/10/12 03:58:12.845]:ADTRACE PT: Action: do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2ADLenient($current-value)")).
  5420. [07/10/12 03:58:12.845]:ADTRACE PT: Evaluating selection criteria for rule 'accountExpires: Convert to Active Directory form'.
  5421. [07/10/12 03:58:12.845]:ADTRACE PT: (if-op-attr 'accountExpires' changing) = FALSE.
  5422. [07/10/12 03:58:12.845]:ADTRACE PT: Rule rejected.
  5423. [07/10/12 03:58:12.845]:ADTRACE PT: Evaluating selection criteria for rule 'lockoutTime: Convert to Active Directory form'.
  5424. [07/10/12 03:58:12.845]:ADTRACE PT: Rule selected.
  5425. [07/10/12 03:58:12.845]:ADTRACE PT: Applying rule 'lockoutTime: Convert to Active Directory form'.
  5426. [07/10/12 03:58:12.845]:ADTRACE PT: Action: do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateEpoch2FileTime($current-value)")).
  5427. [07/10/12 03:58:12.845]:ADTRACE PT: Evaluating selection criteria for rule 'Add: User - convert multi-valued Telephone to single value'.
  5428. [07/10/12 03:58:12.845]:ADTRACE PT: (if-operation equal "add") = FALSE.
  5429. [07/10/12 03:58:12.845]:ADTRACE PT: Rule rejected.
  5430. [07/10/12 03:58:12.845]:ADTRACE PT: Evaluating selection criteria for rule 'update Active Directory logon name'.
  5431. [07/10/12 03:58:12.845]:ADTRACE PT: (if-xpath true "self::status[@level = 'success']/operation-data/windows-2000-logon-name") = FALSE.
  5432. [07/10/12 03:58:12.845]:ADTRACE PT: Rule rejected.
  5433. [07/10/12 03:58:12.845]:ADTRACE PT: Applying to status #2.
  5434. [07/10/12 03:58:12.845]:ADTRACE PT: Evaluating selection criteria for rule 'Street Address: Convert LF to CR-LF'.
  5435. [07/10/12 03:58:12.845]:ADTRACE PT: Rule selected.
  5436. [07/10/12 03:58:12.845]:ADTRACE PT: Applying rule 'Street Address: Convert LF to CR-LF'.
  5437. [07/10/12 03:58:12.845]:ADTRACE PT: Action: do-reformat-op-attr("streetAddress",token-replace-all("[^\r]\n","\r\n",token-local-variable("current-value"))).
  5438. [07/10/12 03:58:12.845]:ADTRACE PT: Evaluating selection criteria for rule 'logonHours: Convert to Active Directory form'.
  5439. [07/10/12 03:58:12.845]:ADTRACE PT: Rule selected.
  5440. [07/10/12 03:58:12.845]:ADTRACE PT: Applying rule 'logonHours: Convert to Active Directory form'.
  5441. [07/10/12 03:58:12.845]:ADTRACE PT: Action: do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2ADLenient($current-value)")).
  5442. [07/10/12 03:58:12.845]:ADTRACE PT: Evaluating selection criteria for rule 'accountExpires: Convert to Active Directory form'.
  5443. [07/10/12 03:58:12.845]:ADTRACE PT: (if-op-attr 'accountExpires' changing) = FALSE.
  5444. [07/10/12 03:58:12.845]:ADTRACE PT: Rule rejected.
  5445. [07/10/12 03:58:12.845]:ADTRACE PT: Evaluating selection criteria for rule 'lockoutTime: Convert to Active Directory form'.
  5446. [07/10/12 03:58:12.845]:ADTRACE PT: Rule selected.
  5447. [07/10/12 03:58:12.845]:ADTRACE PT: Applying rule 'lockoutTime: Convert to Active Directory form'.
  5448. [07/10/12 03:58:12.845]:ADTRACE PT: Action: do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateEpoch2FileTime($current-value)")).
  5449. [07/10/12 03:58:12.845]:ADTRACE PT: Evaluating selection criteria for rule 'Add: User - convert multi-valued Telephone to single value'.
  5450. [07/10/12 03:58:12.845]:ADTRACE PT: (if-operation equal "add") = FALSE.
  5451. [07/10/12 03:58:12.845]:ADTRACE PT: Rule rejected.
  5452. [07/10/12 03:58:12.845]:ADTRACE PT: Evaluating selection criteria for rule 'update Active Directory logon name'.
  5453. [07/10/12 03:58:12.845]:ADTRACE PT: (if-xpath true "self::status[@level = 'success']/operation-data/windows-2000-logon-name") = FALSE.
  5454. [07/10/12 03:58:12.845]:ADTRACE PT: Rule rejected.
  5455. [07/10/12 03:58:12.845]:ADTRACE PT:Policy returned:
  5456. [07/10/12 03:58:12.845]:ADTRACE PT:
  5457. <nds dtdversion="4.0" ndsversion="8.x">
  5458. <source>
  5459. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  5460. <contact>Novell, Inc.</contact>
  5461. </source>
  5462. <output>
  5463. <status event-id="report status" level="success"></status>
  5464. <status event-id="write state" level="success"><application>DirXML</application>
  5465. <module>Active Directory Driver</module>
  5466. <object-dn></object-dn>
  5467. <component>Publisher</component>
  5468. </status>
  5469. </output>
  5470. </nds>
  5471. [07/10/12 03:58:12.845]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-otp-ExchangeEntitlementQuery%-C.
  5472. [07/10/12 03:58:12.845]:ADTRACE PT: Applying to status #1.
  5473. [07/10/12 03:58:12.845]:ADTRACE PT: Evaluating selection criteria for rule 'Add dest-dn to the Exchange Entitlement Query'.
  5474. [07/10/12 03:58:12.845]:ADTRACE PT: (if-operation equal "query") = FALSE.
  5475. [07/10/12 03:58:12.845]:ADTRACE PT: Rule rejected.
  5476. [07/10/12 03:58:12.845]:ADTRACE PT: Applying to status #2.
  5477. [07/10/12 03:58:12.845]:ADTRACE PT: Evaluating selection criteria for rule 'Add dest-dn to the Exchange Entitlement Query'.
  5478. [07/10/12 03:58:12.845]:ADTRACE PT: (if-operation equal "query") = FALSE.
  5479. [07/10/12 03:58:12.845]:ADTRACE PT: Rule rejected.
  5480. [07/10/12 03:58:12.845]:ADTRACE PT:Policy returned:
  5481. [07/10/12 03:58:12.845]:ADTRACE PT:
  5482. <nds dtdversion="4.0" ndsversion="8.x">
  5483. <source>
  5484. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  5485. <contact>Novell, Inc.</contact>
  5486. </source>
  5487. <output>
  5488. <status event-id="report status" level="success"></status>
  5489. <status event-id="write state" level="success"><application>DirXML</application>
  5490. <module>Active Directory Driver</module>
  5491. <object-dn></object-dn>
  5492. <component>Publisher</component>
  5493. </status>
  5494. </output>
  5495. </nds>
  5496. [07/10/12 03:58:12.861]:ADTRACE PT:Applying policy: %+C%14CNOVLPWDSYNC-otp-EmailOnFailedPwdPub%-C.
  5497. [07/10/12 03:58:12.861]:ADTRACE PT: Applying to status #1.
  5498. [07/10/12 03:58:12.861]:ADTRACE PT: Evaluating selection criteria for rule 'Send e-mail for a failed publish password operation'.
  5499. [07/10/12 03:58:12.861]:ADTRACE PT: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  5500. [07/10/12 03:58:12.861]:ADTRACE PT: (if-operation equal "status") = TRUE.
  5501. [07/10/12 03:58:12.861]:ADTRACE PT: (if-xpath true "self::status[@level != 'success']/operation-data/password-publish-status") = FALSE.
  5502. [07/10/12 03:58:12.861]:ADTRACE PT: Rule rejected.
  5503. [07/10/12 03:58:12.861]:ADTRACE PT: Applying to status #2.
  5504. [07/10/12 03:58:12.861]:ADTRACE PT: Evaluating selection criteria for rule 'Send e-mail for a failed publish password operation'.
  5505. [07/10/12 03:58:12.861]:ADTRACE PT: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  5506. [07/10/12 03:58:12.861]:ADTRACE PT: (if-operation equal "status") = TRUE.
  5507. [07/10/12 03:58:12.861]:ADTRACE PT: (if-xpath true "self::status[@level != 'success']/operation-data/password-publish-status") = FALSE.
  5508. [07/10/12 03:58:12.861]:ADTRACE PT: Rule rejected.
  5509. [07/10/12 03:58:12.861]:ADTRACE PT:Policy returned:
  5510. [07/10/12 03:58:12.861]:ADTRACE PT:
  5511. <nds dtdversion="4.0" ndsversion="8.x">
  5512. <source>
  5513. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  5514. <contact>Novell, Inc.</contact>
  5515. </source>
  5516. <output>
  5517. <status event-id="report status" level="success"></status>
  5518. <status event-id="write state" level="success"><application>DirXML</application>
  5519. <module>Active Directory Driver</module>
  5520. <object-dn></object-dn>
  5521. <component>Publisher</component>
  5522. </status>
  5523. </output>
  5524. </nds>
  5525. [07/10/12 03:58:12.861]:ADTRACE PT:Applying policy: %+C%14CNOVLATRKBASE-otp-Subscribe%-C.
  5526. [07/10/12 03:58:12.861]:ADTRACE PT: Applying to status #1.
  5527. [07/10/12 03:58:12.861]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - Initialize Realm Mapping'.
  5528. [07/10/12 03:58:12.861]:ADTRACE PT: (if-global-variable 'drv.acctTrk.enable' equal "true") = TRUE.
  5529. [07/10/12 03:58:12.861]:ADTRACE PT: (if-global-variable 'drv.acctTrk.mode' equal "fanout") = FALSE.
  5530. [07/10/12 03:58:12.861]:ADTRACE PT: Rule rejected.
  5531. [07/10/12 03:58:12.861]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled or wrong object class'.
  5532. [07/10/12 03:58:12.861]:ADTRACE PT: Rule selected.
  5533. [07/10/12 03:58:12.861]:ADTRACE PT: Applying rule 'AccountTracking - disregard if disabled or wrong object class'.
  5534. [07/10/12 03:58:12.861]:ADTRACE PT: Action: do-if().
  5535. [07/10/12 03:58:12.861]:ADTRACE PT: Evaluating conditions.
  5536. [07/10/12 03:58:12.861]:ADTRACE PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  5537. [07/10/12 03:58:12.861]:ADTRACE PT: Performing else actions.
  5538. [07/10/12 03:58:12.861]:ADTRACE PT: Action: do-for-each(arg-node-set(token-global-variable("drv.acctTrk.objectClass"))).
  5539. [07/10/12 03:58:12.861]:ADTRACE PT: arg-node-set(token-global-variable("drv.acctTrk.objectClass"))
  5540. [07/10/12 03:58:12.861]:ADTRACE PT: token-global-variable("drv.acctTrk.objectClass")
  5541. [07/10/12 03:58:12.861]:ADTRACE PT: Token Value: {"user"}.
  5542. [07/10/12 03:58:12.861]:ADTRACE PT: Arg Value: {"user"}.
  5543. [07/10/12 03:58:12.861]:ADTRACE PT: Performing actions for local-variable(current-node) = "user".
  5544. [07/10/12 03:58:12.861]:ADTRACE PT: Action: do-if().
  5545. [07/10/12 03:58:12.861]:ADTRACE PT: Evaluating conditions.
  5546. [07/10/12 03:58:12.861]:ADTRACE PT: (if-class-name equal "$current-node$") = FALSE.
  5547. [07/10/12 03:58:12.861]:ADTRACE PT: Performing else actions.
  5548. [07/10/12 03:58:12.861]:ADTRACE PT: Action: do-if().
  5549. [07/10/12 03:58:12.861]:ADTRACE PT: Evaluating conditions.
  5550. [07/10/12 03:58:12.861]:ADTRACE PT: (if-local-variable 'pass' not-available) = TRUE.
  5551. [07/10/12 03:58:12.861]:ADTRACE PT: Performing if actions.
  5552. [07/10/12 03:58:12.861]:ADTRACE PT: Action: do-break().
  5553. [07/10/12 03:58:12.861]:ADTRACE PT: Applying to status #2.
  5554. [07/10/12 03:58:12.861]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - Initialize Realm Mapping'.
  5555. [07/10/12 03:58:12.861]:ADTRACE PT: (if-global-variable 'drv.acctTrk.enable' equal "true") = TRUE.
  5556. [07/10/12 03:58:12.861]:ADTRACE PT: (if-global-variable 'drv.acctTrk.mode' equal "fanout") = FALSE.
  5557. [07/10/12 03:58:12.861]:ADTRACE PT: Rule rejected.
  5558. [07/10/12 03:58:12.876]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled or wrong object class'.
  5559. [07/10/12 03:58:12.876]:ADTRACE PT: Rule selected.
  5560. [07/10/12 03:58:12.876]:ADTRACE PT: Applying rule 'AccountTracking - disregard if disabled or wrong object class'.
  5561. [07/10/12 03:58:12.876]:ADTRACE PT: Action: do-if().
  5562. [07/10/12 03:58:12.876]:ADTRACE PT: Evaluating conditions.
  5563. [07/10/12 03:58:12.876]:ADTRACE PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  5564. [07/10/12 03:58:12.876]:ADTRACE PT: Performing else actions.
  5565. [07/10/12 03:58:12.876]:ADTRACE PT: Action: do-for-each(arg-node-set(token-global-variable("drv.acctTrk.objectClass"))).
  5566. [07/10/12 03:58:12.876]:ADTRACE PT: arg-node-set(token-global-variable("drv.acctTrk.objectClass"))
  5567. [07/10/12 03:58:12.876]:ADTRACE PT: token-global-variable("drv.acctTrk.objectClass")
  5568. [07/10/12 03:58:12.876]:ADTRACE PT: Token Value: {"user"}.
  5569. [07/10/12 03:58:12.876]:ADTRACE PT: Arg Value: {"user"}.
  5570. [07/10/12 03:58:12.876]:ADTRACE PT: Performing actions for local-variable(current-node) = "user".
  5571. [07/10/12 03:58:12.876]:ADTRACE PT: Action: do-if().
  5572. [07/10/12 03:58:12.876]:ADTRACE PT: Evaluating conditions.
  5573. [07/10/12 03:58:12.876]:ADTRACE PT: (if-class-name equal "$current-node$") = FALSE.
  5574. [07/10/12 03:58:12.876]:ADTRACE PT: Performing else actions.
  5575. [07/10/12 03:58:12.876]:ADTRACE PT: Action: do-if().
  5576. [07/10/12 03:58:12.876]:ADTRACE PT: Evaluating conditions.
  5577. [07/10/12 03:58:12.876]:ADTRACE PT: (if-local-variable 'pass' not-available) = TRUE.
  5578. [07/10/12 03:58:12.876]:ADTRACE PT: Performing if actions.
  5579. [07/10/12 03:58:12.876]:ADTRACE PT: Action: do-break().
  5580. [07/10/12 03:58:12.876]:ADTRACE PT:Policy returned:
  5581. [07/10/12 03:58:12.876]:ADTRACE PT:
  5582. <nds dtdversion="4.0" ndsversion="8.x">
  5583. <source>
  5584. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  5585. <contact>Novell, Inc.</contact>
  5586. </source>
  5587. <output>
  5588. <status event-id="report status" level="success"></status>
  5589. <status event-id="write state" level="success"><application>DirXML</application>
  5590. <module>Active Directory Driver</module>
  5591. <object-dn></object-dn>
  5592. <component>Publisher</component>
  5593. </status>
  5594. </output>
  5595. </nds>
  5596. [07/10/12 03:58:12.876]:ADTRACE PT:
  5597. <nds dtdversion="4.0" ndsversion="8.x">
  5598. <source>
  5599. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  5600. <contact>Novell, Inc.</contact>
  5601. </source>
  5602. <output>
  5603. <status event-id="report status" level="success"></status>
  5604. <status event-id="write state" level="success"><application>DirXML</application>
  5605. <module>Active Directory Driver</module>
  5606. <object-dn></object-dn>
  5607. <component>Publisher</component>
  5608. </status>
  5609. </output>
  5610. </nds>
  5611. [07/10/12 03:58:12.876]:ADTRACE PT:Remote Interface Publisher: com.novell.nds.dirxml.remote.ConnectionClosedException: Connection is closed. Unable to send.
  5612. [07/10/12 03:58:12.876]:ADTRACE PT:Remote Interface Driver: Opening connection...
  5613. [07/10/12 03:58:12.876]:ADTRACE PT:Remote Interface Driver: Client socket parameters: hostname = '192.168.100.1' port = 8090'
  5614. [07/10/12 03:58:12.876]:ADTRACE PT:Remote Interface Driver: Creating a standard Socket
  5615. [07/10/12 03:58:13.908]:ADTRACE PT:Remote Interface Publisher: java.net.ConnectException: Connection refused: connect
  5616. [07/10/12 03:58:28.908]:ADTRACE PT:Remote Interface Driver: Closing connection...
  5617. [07/10/12 03:58:28.908]:ADTRACE PT:Remote Interface Driver: Connection closed
  5618. [07/10/12 03:58:28.923]:ADTRACE PT:Remote Interface Driver: Opening connection...
  5619. [07/10/12 03:58:28.923]:ADTRACE PT:Remote Interface Driver: Client socket parameters: hostname = '192.168.100.1' port = 8090'
  5620. [07/10/12 03:58:28.923]:ADTRACE PT:Remote Interface Driver: Creating a standard Socket
  5621. [07/10/12 03:58:28.923]:ADTRACE PT:Remote Interface Driver: Connection established...
  5622. [07/10/12 03:58:28.923]:ADTRACE PT:Remote Interface Driver: Sending...
  5623. [07/10/12 03:58:28.939]:ADTRACE PT:
  5624. <handshake version="1.0">
  5625. <password><!-- content suppressed --></password>
  5626. </handshake>
  5627. [07/10/12 03:58:28.939]:ADTRACE PT:Remote Interface Driver: Document sent.
  5628. [07/10/12 03:58:28.939]:ADTRACE :Remote Interface Driver: Waiting for receive...
  5629. [07/10/12 03:58:28.954]:ADTRACE :Remote Interface Driver: Received.
  5630. [07/10/12 03:58:28.954]:ADTRACE :
  5631. <handshake version="1.0">
  5632. <password><!-- content suppressed --></password>
  5633. </handshake>
  5634. [07/10/12 03:58:28.954]:ADTRACE :Remote Interface Driver: Received document for subscriber channel
  5635. [07/10/12 03:58:28.954]:ADTRACE :Remote Interface Driver: Waiting for receive...
  5636. [07/10/12 03:58:28.954]:ADTRACE PT:Receiving DOM document from application.
  5637. [07/10/12 03:58:28.954]:ADTRACE PT:
  5638. <nds dtdversion="4.0" ndsversion="8.x">
  5639. <input>
  5640. <check-password><!-- content suppressed --></check-password>
  5641. </input>
  5642. </nds>
  5643. [07/10/12 03:58:28.954]:ADTRACE PT:Applying input transformation policies.
  5644. [07/10/12 03:58:28.954]:ADTRACE PT:Applying policy: %+C%14CNOVLAUDTENTC-itp-SendEntitlementsEvents%-C.
  5645. [07/10/12 03:58:28.954]:ADTRACE PT: Applying to check-password #1.
  5646. [07/10/12 03:58:28.954]:ADTRACE PT: Evaluating selection criteria for rule '00031200 - Account Create By Entitlement Grant'.
  5647. [07/10/12 03:58:28.954]:ADTRACE PT: (if-operation equal "status") = FALSE.
  5648. [07/10/12 03:58:28.954]:ADTRACE PT: Rule rejected.
  5649. [07/10/12 03:58:28.954]:ADTRACE PT: Evaluating selection criteria for rule '00031201 - Account Delete By Entitlement Revoke'.
  5650. [07/10/12 03:58:28.954]:ADTRACE PT: (if-operation equal "status") = FALSE.
  5651. [07/10/12 03:58:28.954]:ADTRACE PT: (if-operation equal "status") = FALSE.
  5652. [07/10/12 03:58:28.954]:ADTRACE PT: Rule rejected.
  5653. [07/10/12 03:58:28.954]:ADTRACE PT: Evaluating selection criteria for rule '00031202 - Account Disable By Entitlement Revoke'.
  5654. [07/10/12 03:58:28.954]:ADTRACE PT: (if-operation equal "status") = FALSE.
  5655. [07/10/12 03:58:28.954]:ADTRACE PT: Rule rejected.
  5656. [07/10/12 03:58:28.954]:ADTRACE PT: Evaluating selection criteria for rule '00031203 - Account Enable By Entitlement Grant'.
  5657. [07/10/12 03:58:28.954]:ADTRACE PT: (if-operation equal "status") = FALSE.
  5658. [07/10/12 03:58:28.954]:ADTRACE PT: Rule rejected.
  5659. [07/10/12 03:58:28.954]:ADTRACE PT: Evaluating selection criteria for rule 'Generate Audit Event'.
  5660. [07/10/12 03:58:28.954]:ADTRACE PT: (if-operation equal "status") = FALSE.
  5661. [07/10/12 03:58:28.954]:ADTRACE PT: Rule rejected.
  5662. [07/10/12 03:58:28.954]:ADTRACE PT:Policy returned:
  5663. [07/10/12 03:58:28.954]:ADTRACE PT:
  5664. <nds dtdversion="4.0" ndsversion="8.x">
  5665. <input>
  5666. <check-password><!-- content suppressed --></check-password>
  5667. </input>
  5668. </nds>
  5669. [07/10/12 03:58:28.970]:ADTRACE PT:Applying policy: %+C%14CNOVLADENTEX-itp-InitEntitlementConfigurationResource%-C.
  5670. [07/10/12 03:58:28.970]:ADTRACE PT: Applying to check-password #1.
  5671. [07/10/12 03:58:28.970]:ADTRACE PT: Evaluating selection criteria for rule 'Make sure we only run once and when we're ready'.
  5672. [07/10/12 03:58:28.970]:ADTRACE PT: (if-local-variable 'objectClass' match ".+") = TRUE.
  5673. [07/10/12 03:58:28.970]:ADTRACE PT: (if-local-variable 'entConfigInitialized' equal "true") = TRUE.
  5674. [07/10/12 03:58:28.970]:ADTRACE PT: Rule selected.
  5675. [07/10/12 03:58:28.970]:ADTRACE PT: Applying rule 'Make sure we only run once and when we're ready'.
  5676. [07/10/12 03:58:28.970]:ADTRACE PT: Action: do-break().
  5677. [07/10/12 03:58:28.970]:ADTRACE PT:Policy returned:
  5678. [07/10/12 03:58:28.970]:ADTRACE PT:
  5679. <nds dtdversion="4.0" ndsversion="8.x">
  5680. <input>
  5681. <check-password><!-- content suppressed --></check-password>
  5682. </input>
  5683. </nds>
  5684. [07/10/12 03:58:28.970]:ADTRACE PT:Applying policy: %+C%14CNOVLADMSINFO-itp-InitManagedSystemInfo%-C.
  5685. [07/10/12 03:58:28.970]:ADTRACE PT: Applying to check-password #1.
  5686. [07/10/12 03:58:28.970]:ADTRACE PT: Evaluating selection criteria for rule 'Make sure we only run once and when we're ready'.
  5687. [07/10/12 03:58:28.970]:ADTRACE PT: (if-local-variable 'objectClass' match ".+") = TRUE.
  5688. [07/10/12 03:58:28.970]:ADTRACE PT: (if-local-variable 'mSysInfoInitialized' equal "true") = TRUE.
  5689. [07/10/12 03:58:28.970]:ADTRACE PT: Rule selected.
  5690. [07/10/12 03:58:28.970]:ADTRACE PT: Applying rule 'Make sure we only run once and when we're ready'.
  5691. [07/10/12 03:58:28.970]:ADTRACE PT: Action: do-break().
  5692. [07/10/12 03:58:28.970]:ADTRACE PT:Policy returned:
  5693. [07/10/12 03:58:28.970]:ADTRACE PT:
  5694. <nds dtdversion="4.0" ndsversion="8.x">
  5695. <input>
  5696. <check-password><!-- content suppressed --></check-password>
  5697. </input>
  5698. </nds>
  5699. [07/10/12 03:58:28.970]:ADTRACE PT:Applying policy: %+C%14CNOVLATRKBASE-itp-Publish%-C.
  5700. [07/10/12 03:58:28.970]:ADTRACE PT: Applying to check-password #1.
  5701. [07/10/12 03:58:28.970]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled or wrong object class'.
  5702. [07/10/12 03:58:28.970]:ADTRACE PT: Rule selected.
  5703. [07/10/12 03:58:28.970]:ADTRACE PT: Applying rule 'AccountTracking - disregard if disabled or wrong object class'.
  5704. [07/10/12 03:58:28.970]:ADTRACE PT: Action: do-if().
  5705. [07/10/12 03:58:28.970]:ADTRACE PT: Evaluating conditions.
  5706. [07/10/12 03:58:28.970]:ADTRACE PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  5707. [07/10/12 03:58:28.970]:ADTRACE PT: Performing else actions.
  5708. [07/10/12 03:58:28.970]:ADTRACE PT: Action: do-if().
  5709. [07/10/12 03:58:28.970]:ADTRACE PT: Evaluating conditions.
  5710. [07/10/12 03:58:28.970]:ADTRACE PT: (if-class-name available) = FALSE.
  5711. [07/10/12 03:58:28.970]:ADTRACE PT: Performing else actions.
  5712. [07/10/12 03:58:28.970]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - on add-association sync the operation-properties to status operations'.
  5713. [07/10/12 03:58:28.970]:ADTRACE PT: (if-operation equal "add-association") = FALSE.
  5714. [07/10/12 03:58:28.970]:ADTRACE PT: Rule rejected.
  5715. [07/10/12 03:58:28.970]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - Query for destination DN using Association'.
  5716. [07/10/12 03:58:28.970]:ADTRACE PT: (if-operation match "modify|delete|move|rename") = FALSE.
  5717. [07/10/12 03:58:28.970]:ADTRACE PT: Rule rejected.
  5718. [07/10/12 03:58:28.970]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - add interested properties to current doc for future use.'.
  5719. [07/10/12 03:58:28.970]:ADTRACE PT: (if-operation match "add|modify|delete|rename|move|status") = FALSE.
  5720. [07/10/12 03:58:28.970]:ADTRACE PT: Rule rejected.
  5721. [07/10/12 03:58:28.970]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - Initialize status properties on published events'.
  5722. [07/10/12 03:58:28.970]:ADTRACE PT: (if-operation match "add|modify|delete|rename|move") = FALSE.
  5723. [07/10/12 03:58:28.970]:ADTRACE PT: Rule rejected.
  5724. [07/10/12 03:58:28.970]:ADTRACE PT:Policy returned:
  5725. [07/10/12 03:58:28.970]:ADTRACE PT:
  5726. <nds dtdversion="4.0" ndsversion="8.x">
  5727. <input>
  5728. <check-password><!-- content suppressed --></check-password>
  5729. </input>
  5730. </nds>
  5731. [07/10/12 03:58:28.970]:ADTRACE PT:Applying policy: %+C%14CNOVLATRKBASE-itp-WriteAccounts%-C.
  5732. [07/10/12 03:58:28.970]:ADTRACE PT: Applying to check-password #1.
  5733. [07/10/12 03:58:28.970]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - Initialize Realm Mapping'.
  5734. [07/10/12 03:58:28.986]:ADTRACE PT: (if-global-variable 'drv.acctTrk.enable' equal "true") = TRUE.
  5735. [07/10/12 03:58:28.986]:ADTRACE PT: (if-global-variable 'drv.acctTrk.mode' equal "fanout") = FALSE.
  5736. [07/10/12 03:58:28.986]:ADTRACE PT: Rule rejected.
  5737. [07/10/12 03:58:28.986]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled'.
  5738. [07/10/12 03:58:28.986]:ADTRACE PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  5739. [07/10/12 03:58:28.986]:ADTRACE PT: Rule rejected.
  5740. [07/10/12 03:58:28.986]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - query DirXML-Accounts Attribute'.
  5741. [07/10/12 03:58:28.986]:ADTRACE PT: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  5742. [07/10/12 03:58:28.986]:ADTRACE PT: Rule rejected.
  5743. [07/10/12 03:58:28.986]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - remove Dirxml-Account values on regular delete operation'.
  5744. [07/10/12 03:58:28.986]:ADTRACE PT: (if-operation match "delete|remove-association") = FALSE.
  5745. [07/10/12 03:58:28.986]:ADTRACE PT: (if-operation equal "status") = FALSE.
  5746. [07/10/12 03:58:28.986]:ADTRACE PT: Rule rejected.
  5747. [07/10/12 03:58:28.986]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - update DirXMLAccounts attribute on regular operations'.
  5748. [07/10/12 03:58:28.986]:ADTRACE PT: (if-op-property 'AccountTracking-Operation' not-available) = TRUE.
  5749. [07/10/12 03:58:28.986]:ADTRACE PT: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  5750. [07/10/12 03:58:28.986]:ADTRACE PT: (if-operation equal "status") = FALSE.
  5751. [07/10/12 03:58:28.986]:ADTRACE PT: Rule rejected.
  5752. [07/10/12 03:58:28.986]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - update DirXMLAccounts attribute on mapped operations'.
  5753. [07/10/12 03:58:28.986]:ADTRACE PT: (if-xpath true "operation-data/account-tracking-operation") = FALSE.
  5754. [07/10/12 03:58:28.986]:ADTRACE PT: (if-xpath true "operation-data/account-tracking-operation") = FALSE.
  5755. [07/10/12 03:58:28.986]:ADTRACE PT: Rule rejected.
  5756. [07/10/12 03:58:28.986]:ADTRACE PT:Policy returned:
  5757. [07/10/12 03:58:28.986]:ADTRACE PT:
  5758. <nds dtdversion="4.0" ndsversion="8.x">
  5759. <input>
  5760. <check-password><!-- content suppressed --></check-password>
  5761. </input>
  5762. </nds>
  5763. [07/10/12 03:58:28.986]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-itp-SubscriberUserAdd%-C.
  5764. [07/10/12 03:58:28.986]:ADTRACE PT: Applying to check-password #1.
  5765. [07/10/12 03:58:28.986]:ADTRACE PT: Evaluating selection criteria for rule 'Populate DirXML-ADContext on initial user add'.
  5766. [07/10/12 03:58:28.986]:ADTRACE PT: (if-operation equal "add-association") = FALSE.
  5767. [07/10/12 03:58:28.986]:ADTRACE PT: Rule rejected.
  5768. [07/10/12 03:58:28.986]:ADTRACE PT:Policy returned:
  5769. [07/10/12 03:58:28.986]:ADTRACE PT:
  5770. <nds dtdversion="4.0" ndsversion="8.x">
  5771. <input>
  5772. <check-password><!-- content suppressed --></check-password>
  5773. </input>
  5774. </nds>
  5775. [07/10/12 03:58:28.986]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-itp-FormatConversions%-C.
  5776. [07/10/12 03:58:28.986]:ADTRACE PT: Applying to check-password #1.
  5777. [07/10/12 03:58:28.986]:ADTRACE PT: Evaluating selection criteria for rule 'streetAddress: Convert CR-LF to LF'.
  5778. [07/10/12 03:58:28.986]:ADTRACE PT: Rule selected.
  5779. [07/10/12 03:58:28.986]:ADTRACE PT: Applying rule 'streetAddress: Convert CR-LF to LF'.
  5780. [07/10/12 03:58:28.986]:ADTRACE PT: Action: do-reformat-op-attr("streetAddress",token-replace-all("\r\n","\r",token-local-variable("current-value"))).
  5781. [07/10/12 03:58:28.986]:ADTRACE PT: Evaluating selection criteria for rule 'logonHours: Convert to Login Allowed Time Map form'.
  5782. [07/10/12 03:58:28.986]:ADTRACE PT: Rule selected.
  5783. [07/10/12 03:58:28.986]:ADTRACE PT: Applying rule 'logonHours: Convert to Login Allowed Time Map form'.
  5784. [07/10/12 03:58:28.986]:ADTRACE PT: Action: do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2eDir($current-value)")).
  5785. [07/10/12 03:58:28.986]:ADTRACE PT: Evaluating selection criteria for rule 'accountExpires: Convert to Identity Vault time format'.
  5786. [07/10/12 03:58:28.986]:ADTRACE PT: Rule selected.
  5787. [07/10/12 03:58:28.986]:ADTRACE PT: Applying rule 'accountExpires: Convert to Identity Vault time format'.
  5788. [07/10/12 03:58:28.986]:ADTRACE PT: Action: do-reformat-op-attr("accountExpires",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
  5789. [07/10/12 03:58:28.986]:ADTRACE PT: Evaluating selection criteria for rule 'lockoutTime: Convert to Identity Vault time format'.
  5790. [07/10/12 03:58:28.986]:ADTRACE PT: Rule selected.
  5791. [07/10/12 03:58:28.986]:ADTRACE PT: Applying rule 'lockoutTime: Convert to Identity Vault time format'.
  5792. [07/10/12 03:58:28.986]:ADTRACE PT: Action: do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
  5793. [07/10/12 03:58:29.001]:ADTRACE PT:Policy returned:
  5794. [07/10/12 03:58:29.001]:ADTRACE PT:
  5795. <nds dtdversion="4.0" ndsversion="8.x">
  5796. <input>
  5797. <check-password><!-- content suppressed --></check-password>
  5798. </input>
  5799. </nds>
  5800. [07/10/12 03:58:29.001]:ADTRACE PT:Applying policy: %+C%14CNOVLDATACOLL-itp-DataCollectionQuerySupport%-C.
  5801. [07/10/12 03:58:29.001]:ADTRACE PT: Applying to check-password #1.
  5802. [07/10/12 03:58:29.001]:ADTRACE PT: Evaluating selection criteria for rule 'Rename @association-ref to @association and change @type from "dn" to "{dn}"'.
  5803. [07/10/12 03:58:29.001]:ADTRACE PT: (if-operation equal "instance") = FALSE.
  5804. [07/10/12 03:58:29.001]:ADTRACE PT: Rule rejected.
  5805. [07/10/12 03:58:29.001]:ADTRACE PT:Policy returned:
  5806. [07/10/12 03:58:29.001]:ADTRACE PT:
  5807. <nds dtdversion="4.0" ndsversion="8.x">
  5808. <input>
  5809. <check-password><!-- content suppressed --></check-password>
  5810. </input>
  5811. </nds>
  5812. [07/10/12 03:58:29.001]:ADTRACE PT:Applying policy: %+C%14CNOVLADENTEX-itp-EntitlementsImpl%-C.
  5813. [07/10/12 03:58:29.001]:ADTRACE PT: Applying to check-password #1.
  5814. [07/10/12 03:58:29.001]:ADTRACE PT: Evaluating selection criteria for rule 'Intercept ADDomain (tagged identity query) query response'.
  5815. [07/10/12 03:58:29.001]:ADTRACE PT: (if-operation equal "instance") = FALSE.
  5816. [07/10/12 03:58:29.001]:ADTRACE PT: Rule rejected.
  5817. [07/10/12 03:58:29.001]:ADTRACE PT: Evaluating selection criteria for rule 'Intercept ADDomain (tagged identity query) query status'.
  5818. [07/10/12 03:58:29.001]:ADTRACE PT: (if-xpath true "../status[@event-id='query-driver-ident']/operation-data/@UserAccountEntitlementQuery") = FALSE.
  5819. [07/10/12 03:58:29.001]:ADTRACE PT: Rule rejected.
  5820. [07/10/12 03:58:29.001]:ADTRACE PT: Evaluating selection criteria for rule 'Check target of add-association for group membership entitlements'.
  5821. [07/10/12 03:58:29.001]:ADTRACE PT: (if-global-variable 'drv.entitlement.Group' equal "true") = TRUE.
  5822. [07/10/12 03:58:29.001]:ADTRACE PT: (if-operation equal "add-association") = FALSE.
  5823. [07/10/12 03:58:29.001]:ADTRACE PT: Rule rejected.
  5824. [07/10/12 03:58:29.001]:ADTRACE PT: Evaluating selection criteria for rule 'Check target of add-association for Exchange mailbox entitlements'.
  5825. [07/10/12 03:58:29.001]:ADTRACE PT: (if-global-variable 'drv.exchMailboxMethod' equal "entitlement") = FALSE.
  5826. [07/10/12 03:58:29.001]:ADTRACE PT: Rule rejected.
  5827. [07/10/12 03:58:29.001]:ADTRACE PT:Policy returned:
  5828. [07/10/12 03:58:29.001]:ADTRACE PT:
  5829. <nds dtdversion="4.0" ndsversion="8.x">
  5830. <input>
  5831. <check-password><!-- content suppressed --></check-password>
  5832. </input>
  5833. </nds>
  5834. [07/10/12 03:58:29.001]:ADTRACE PT:Applying policy: %+C%14CNOVLPWDSYNC-itp-EmailOnFailedPwdSub%-C.
  5835. [07/10/12 03:58:29.001]:ADTRACE PT: Applying to check-password #1.
  5836. [07/10/12 03:58:29.001]:ADTRACE PT: Evaluating selection criteria for rule 'Send e-mail on a failure when subscribing to passwords'.
  5837. [07/10/12 03:58:29.001]:ADTRACE PT: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  5838. [07/10/12 03:58:29.001]:ADTRACE PT: (if-operation equal "status") = FALSE.
  5839. [07/10/12 03:58:29.001]:ADTRACE PT: Rule rejected.
  5840. [07/10/12 03:58:29.001]:ADTRACE PT: Evaluating selection criteria for rule 'Send e-mail on failure to reset connected system password using the Identity Vault password'.
  5841. [07/10/12 03:58:29.001]:ADTRACE PT: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  5842. [07/10/12 03:58:29.001]:ADTRACE PT: (if-operation equal "status") = FALSE.
  5843. [07/10/12 03:58:29.001]:ADTRACE PT: Rule rejected.
  5844. [07/10/12 03:58:29.001]:ADTRACE PT:Policy returned:
  5845. [07/10/12 03:58:29.001]:ADTRACE PT:
  5846. <nds dtdversion="4.0" ndsversion="8.x">
  5847. <input>
  5848. <check-password><!-- content suppressed --></check-password>
  5849. </input>
  5850. </nds>
  5851. [07/10/12 03:58:29.001]:ADTRACE PT:Applying schema mapping policies to input.
  5852. [07/10/12 03:58:29.001]:ADTRACE PT:Applying policy: %+C%14CNOVLDATACOLL-smp-SkipSchemaMapping%-C.
  5853. [07/10/12 03:58:29.001]:ADTRACE PT: Applying to check-password #1.
  5854. [07/10/12 03:58:29.001]:ADTRACE PT: Evaluating selection criteria for rule 'skip'.
  5855. [07/10/12 03:58:29.001]:ADTRACE PT: (if-operation equal "instance") = FALSE.
  5856. [07/10/12 03:58:29.001]:ADTRACE PT: Rule rejected.
  5857. [07/10/12 03:58:29.001]:ADTRACE PT: Evaluating selection criteria for rule 'restore'.
  5858. [07/10/12 03:58:29.001]:ADTRACE PT: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  5859. [07/10/12 03:58:29.001]:ADTRACE PT: Rule rejected.
  5860. [07/10/12 03:58:29.001]:ADTRACE PT:Policy returned:
  5861. [07/10/12 03:58:29.001]:ADTRACE PT:
  5862. <nds dtdversion="4.0" ndsversion="8.x">
  5863. <input>
  5864. <check-password><!-- content suppressed --></check-password>
  5865. </input>
  5866. </nds>
  5867. [07/10/12 03:58:29.001]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-smp%-C.
  5868. [07/10/12 03:58:29.001]:ADTRACE PT:Applying policy: %+C%14CNOVLDATACOLL-smp-SkipSchemaMapping%-C.
  5869. [07/10/12 03:58:29.001]:ADTRACE PT: Applying to check-password #1.
  5870. [07/10/12 03:58:29.001]:ADTRACE PT: Evaluating selection criteria for rule 'skip'.
  5871. [07/10/12 03:58:29.001]:ADTRACE PT: (if-operation equal "instance") = FALSE.
  5872. [07/10/12 03:58:29.001]:ADTRACE PT: Rule rejected.
  5873. [07/10/12 03:58:29.017]:ADTRACE PT: Evaluating selection criteria for rule 'restore'.
  5874. [07/10/12 03:58:29.017]:ADTRACE PT: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  5875. [07/10/12 03:58:29.017]:ADTRACE PT: Rule rejected.
  5876. [07/10/12 03:58:29.017]:ADTRACE PT:Policy returned:
  5877. [07/10/12 03:58:29.017]:ADTRACE PT:
  5878. <nds dtdversion="4.0" ndsversion="8.x">
  5879. <input>
  5880. <check-password><!-- content suppressed --></check-password>
  5881. </input>
  5882. </nds>
  5883. [07/10/12 03:58:29.017]:ADTRACE PT:Resolving association references.
  5884. [07/10/12 03:58:29.017]:ADTRACE PT:Applying event transformation policies.
  5885. [07/10/12 03:58:29.017]:ADTRACE PT:Applying policy: %+C%14CNOVLADENTEX-pub-etp-EntitlementsImpl%-C.
  5886. [07/10/12 03:58:29.017]:ADTRACE PT: Applying to check-password #1.
  5887. [07/10/12 03:58:29.017]:ADTRACE PT: Evaluating selection criteria for rule 'Disallow user account delete when using entitlements'.
  5888. [07/10/12 03:58:29.017]:ADTRACE PT: (if-operation equal "delete") = FALSE.
  5889. [07/10/12 03:58:29.017]:ADTRACE PT: Rule rejected.
  5890. [07/10/12 03:58:29.017]:ADTRACE PT: Evaluating selection criteria for rule 'Strip Login Disabled from operation (Disable Option)'.
  5891. [07/10/12 03:58:29.017]:ADTRACE PT: (if-global-variable 'drv.entitlement.UserAccount' equal "true") = TRUE.
  5892. [07/10/12 03:58:29.017]:ADTRACE PT: (if-global-variable 'drv.entitlement.remove' equal "disable") = TRUE.
  5893. [07/10/12 03:58:29.017]:ADTRACE PT: (if-class-name equal "User") = FALSE.
  5894. [07/10/12 03:58:29.017]:ADTRACE PT: Rule rejected.
  5895. [07/10/12 03:58:29.017]:ADTRACE PT:Policy returned:
  5896. [07/10/12 03:58:29.017]:ADTRACE PT:
  5897. <nds dtdversion="4.0" ndsversion="8.x">
  5898. <input>
  5899. <check-password><!-- content suppressed --></check-password>
  5900. </input>
  5901. </nds>
  5902. [07/10/12 03:58:29.017]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-pub-etp-HandleMovesAndRenames%-C.
  5903. [07/10/12 03:58:29.017]:ADTRACE PT: Applying to check-password #1.
  5904. [07/10/12 03:58:29.017]:ADTRACE PT: Evaluating selection criteria for rule 'break if not a move or rename'.
  5905. [07/10/12 03:58:29.017]:ADTRACE PT: (if-operation not-match "move|rename") = TRUE.
  5906. [07/10/12 03:58:29.017]:ADTRACE PT: Rule selected.
  5907. [07/10/12 03:58:29.017]:ADTRACE PT: Applying rule 'break if not a move or rename'.
  5908. [07/10/12 03:58:29.017]:ADTRACE PT: Action: do-break().
  5909. [07/10/12 03:58:29.017]:ADTRACE PT:Policy returned:
  5910. [07/10/12 03:58:29.017]:ADTRACE PT:
  5911. <nds dtdversion="4.0" ndsversion="8.x">
  5912. <input>
  5913. <check-password><!-- content suppressed --></check-password>
  5914. </input>
  5915. </nds>
  5916. [07/10/12 03:58:29.017]:ADTRACE PT:Applying publisher filter.
  5917. [07/10/12 03:58:29.017]:ADTRACE PT:Publisher processing check-password for .
  5918. [07/10/12 03:58:29.017]:ADTRACE PT:Applying command transformation policies.
  5919. [07/10/12 03:58:29.017]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-pub-ctp-UserNameMap%-C.
  5920. [07/10/12 03:58:29.017]:ADTRACE PT: Applying to check-password #1.
  5921. [07/10/12 03:58:29.017]:ADTRACE PT: Evaluating selection criteria for rule 'consider user objects when name mapping is enabled'.
  5922. [07/10/12 03:58:29.017]:ADTRACE PT: (if-class-name not-equal "User") = TRUE.
  5923. [07/10/12 03:58:29.017]:ADTRACE PT: Rule selected.
  5924. [07/10/12 03:58:29.017]:ADTRACE PT: Applying rule 'consider user objects when name mapping is enabled'.
  5925. [07/10/12 03:58:29.017]:ADTRACE PT: Action: do-break().
  5926. [07/10/12 03:58:29.017]:ADTRACE PT:Policy returned:
  5927. [07/10/12 03:58:29.017]:ADTRACE PT:
  5928. <nds dtdversion="4.0" ndsversion="8.x">
  5929. <input>
  5930. <check-password><!-- content suppressed --></check-password>
  5931. </input>
  5932. </nds>
  5933. [07/10/12 03:58:29.017]:ADTRACE PT:Applying policy: %+C%14CNOVLPWDSYNC-pub-ctp-DefaultPwd%-C.
  5934. [07/10/12 03:58:29.017]:ADTRACE PT: Applying to check-password #1.
  5935. [07/10/12 03:58:29.017]:ADTRACE PT: Evaluating selection criteria for rule 'On User add, provide default password of @Dirxml1 if no password exists'.
  5936. [07/10/12 03:58:29.017]:ADTRACE PT: (if-operation equal "add") = FALSE.
  5937. [07/10/12 03:58:29.017]:ADTRACE PT: Rule rejected.
  5938. [07/10/12 03:58:29.017]:ADTRACE PT:Policy returned:
  5939. [07/10/12 03:58:29.017]:ADTRACE PT:
  5940. <nds dtdversion="4.0" ndsversion="8.x">
  5941. <input>
  5942. <check-password><!-- content suppressed --></check-password>
  5943. </input>
  5944. </nds>
  5945. [07/10/12 03:58:29.017]:ADTRACE PT:Applying policy: %+C%14CNOVLPWDSYNC-pub-ctp-CheckPwdGCV%-C.
  5946. [07/10/12 03:58:29.017]:ADTRACE PT: Applying to check-password #1.
  5947. [07/10/12 03:58:29.017]:ADTRACE PT: Evaluating selection criteria for rule 'Block publishing passwords to the Identity Vault when adding an object'.
  5948. [07/10/12 03:58:29.017]:ADTRACE PT: (if-global-variable 'enable-password-publish' equal "false") = FALSE.
  5949. [07/10/12 03:58:29.017]:ADTRACE PT: Rule rejected.
  5950. [07/10/12 03:58:29.017]:ADTRACE PT: Evaluating selection criteria for rule 'Block sending modify-password changes to the Identity Vault'.
  5951. [07/10/12 03:58:29.017]:ADTRACE PT: (if-global-variable 'enable-password-publish' equal "false") = FALSE.
  5952. [07/10/12 03:58:29.017]:ADTRACE PT: Rule rejected.
  5953. [07/10/12 03:58:29.017]:ADTRACE PT:Policy returned:
  5954. [07/10/12 03:58:29.017]:ADTRACE PT:
  5955. <nds dtdversion="4.0" ndsversion="8.x">
  5956. <input>
  5957. <check-password><!-- content suppressed --></check-password>
  5958. </input>
  5959. </nds>
  5960. [07/10/12 03:58:29.017]:ADTRACE PT:Applying policy: %+C%14CNOVLPWDSYNC-pub-ctp-PublishDistPwd%-C.
  5961. [07/10/12 03:58:29.033]:ADTRACE PT: Applying to check-password #1.
  5962. [07/10/12 03:58:29.033]:ADTRACE PT: Evaluating selection criteria for rule 'Add nspmDistributionAttribute attribute to add operation'.
  5963. [07/10/12 03:58:29.033]:ADTRACE PT: (if-global-variable 'publish-password-to-dp' equal "true") = FALSE.
  5964. [07/10/12 03:58:29.033]:ADTRACE PT: Rule rejected.
  5965. [07/10/12 03:58:29.033]:ADTRACE PT: Evaluating selection criteria for rule 'Change modify-password operations to a modify'.
  5966. [07/10/12 03:58:29.033]:ADTRACE PT: (if-global-variable 'publish-password-to-dp' equal "true") = FALSE.
  5967. [07/10/12 03:58:29.033]:ADTRACE PT: Rule rejected.
  5968. [07/10/12 03:58:29.033]:ADTRACE PT:Policy returned:
  5969. [07/10/12 03:58:29.033]:ADTRACE PT:
  5970. <nds dtdversion="4.0" ndsversion="8.x">
  5971. <input>
  5972. <check-password><!-- content suppressed --></check-password>
  5973. </input>
  5974. </nds>
  5975. [07/10/12 03:58:29.033]:ADTRACE PT:Applying policy: %+C%14CNOVLPWDSYNC-pub-ctp-PublishNDSPwd%-C.
  5976. [07/10/12 03:58:29.033]:ADTRACE PT: Applying to check-password #1.
  5977. [07/10/12 03:58:29.033]:ADTRACE PT: Evaluating selection criteria for rule 'Block publishing passwords to eDirectory password'.
  5978. [07/10/12 03:58:29.033]:ADTRACE PT: (if-global-variable 'publish-password-to-nds' equal "false") = FALSE.
  5979. [07/10/12 03:58:29.033]:ADTRACE PT: Rule rejected.
  5980. [07/10/12 03:58:29.033]:ADTRACE PT: Evaluating selection criteria for rule 'Block sending modify-password changes to the eDirectory password'.
  5981. [07/10/12 03:58:29.033]:ADTRACE PT: (if-global-variable 'publish-password-to-nds' equal "false") = FALSE.
  5982. [07/10/12 03:58:29.033]:ADTRACE PT: Rule rejected.
  5983. [07/10/12 03:58:29.033]:ADTRACE PT:Policy returned:
  5984. [07/10/12 03:58:29.033]:ADTRACE PT:
  5985. <nds dtdversion="4.0" ndsversion="8.x">
  5986. <input>
  5987. <check-password><!-- content suppressed --></check-password>
  5988. </input>
  5989. </nds>
  5990. [07/10/12 03:58:29.033]:ADTRACE PT:Applying policy: %+C%14CNOVLPWDSYNC-pub-ctp-AddPwdPayload%-C.
  5991. [07/10/12 03:58:29.033]:ADTRACE PT: Applying to check-password #1.
  5992. [07/10/12 03:58:29.033]:ADTRACE PT: Evaluating selection criteria for rule 'Add operation-data element to password operations'.
  5993. [07/10/12 03:58:29.033]:ADTRACE PT: (if-operation equal "add") = FALSE.
  5994. [07/10/12 03:58:29.033]:ADTRACE PT: (if-operation equal "add") = FALSE.
  5995. [07/10/12 03:58:29.033]:ADTRACE PT: (if-operation equal "modify-password") = FALSE.
  5996. [07/10/12 03:58:29.033]:ADTRACE PT: (if-operation equal "modify") = FALSE.
  5997. [07/10/12 03:58:29.033]:ADTRACE PT: Rule rejected.
  5998. [07/10/12 03:58:29.033]:ADTRACE PT: Evaluating selection criteria for rule 'Add payload data to password operations'.
  5999. [07/10/12 03:58:29.033]:ADTRACE PT: (if-operation equal "add") = FALSE.
  6000. [07/10/12 03:58:29.033]:ADTRACE PT: (if-operation equal "add") = FALSE.
  6001. [07/10/12 03:58:29.033]:ADTRACE PT: (if-operation equal "modify-password") = FALSE.
  6002. [07/10/12 03:58:29.033]:ADTRACE PT: (if-operation equal "modify") = FALSE.
  6003. [07/10/12 03:58:29.033]:ADTRACE PT: Rule rejected.
  6004. [07/10/12 03:58:29.033]:ADTRACE PT:Policy returned:
  6005. [07/10/12 03:58:29.033]:ADTRACE PT:
  6006. <nds dtdversion="4.0" ndsversion="8.x">
  6007. <input>
  6008. <check-password><!-- content suppressed --></check-password>
  6009. </input>
  6010. </nds>
  6011. [07/10/12 03:58:29.033]:ADTRACE PT:Applying policy: %+C%14CNOVLATRKBASE-pub-ctp-WriteAccountsOnAdds%-C.
  6012. [07/10/12 03:58:29.033]:ADTRACE PT: Applying to check-password #1.
  6013. [07/10/12 03:58:29.033]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - disregard policy if disabled'.
  6014. [07/10/12 03:58:29.033]:ADTRACE PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  6015. [07/10/12 03:58:29.033]:ADTRACE PT: Rule rejected.
  6016. [07/10/12 03:58:29.033]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - on add operation add Dirxml-Accounts'.
  6017. [07/10/12 03:58:29.033]:ADTRACE PT: (if-operation equal "add") = FALSE.
  6018. [07/10/12 03:58:29.033]:ADTRACE PT: Rule rejected.
  6019. [07/10/12 03:58:29.033]:ADTRACE PT:Policy returned:
  6020. [07/10/12 03:58:29.033]:ADTRACE PT:
  6021. <nds dtdversion="4.0" ndsversion="8.x">
  6022. <input>
  6023. <check-password><!-- content suppressed --></check-password>
  6024. </input>
  6025. </nds>
  6026. [07/10/12 03:58:29.033]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-pub-ctp%-C.
  6027. [07/10/12 03:58:29.033]:ADTRACE PT: Applying to check-password #1.
  6028. [07/10/12 03:58:29.033]:ADTRACE PT: Evaluating selection criteria for rule 'set cached context value on merge'.
  6029. [07/10/12 03:58:29.033]:ADTRACE PT: (if-operation equal "modify") = FALSE.
  6030. [07/10/12 03:58:29.033]:ADTRACE PT: Rule rejected.
  6031. [07/10/12 03:58:29.033]:ADTRACE PT: Evaluating selection criteria for rule 'remove managed attributes when object disassociated'.
  6032. [07/10/12 03:58:29.033]:ADTRACE PT: (if-operation equal "remove-association") = FALSE.
  6033. [07/10/12 03:58:29.033]:ADTRACE PT: Rule rejected.
  6034. [07/10/12 03:58:29.048]:ADTRACE PT: Evaluating selection criteria for rule 'Prevent unassociated users from being removed from groups'.
  6035. [07/10/12 03:58:29.048]:ADTRACE PT: (if-operation equal "modify") = FALSE.
  6036. [07/10/12 03:58:29.048]:ADTRACE PT: Rule rejected.
  6037. [07/10/12 03:58:29.048]:ADTRACE PT: Evaluating selection criteria for rule 'Set Equivalent To Me when group members change'.
  6038. [07/10/12 03:58:29.048]:ADTRACE PT: (if-class-name equal "Group") = FALSE.
  6039. [07/10/12 03:58:29.048]:ADTRACE PT: Rule rejected.
  6040. [07/10/12 03:58:29.048]:ADTRACE PT:Policy returned:
  6041. [07/10/12 03:58:29.048]:ADTRACE PT:
  6042. <nds dtdversion="4.0" ndsversion="8.x">
  6043. <input>
  6044. <check-password><!-- content suppressed --></check-password>
  6045. </input>
  6046. </nds>
  6047. [07/10/12 03:58:29.048]:ADTRACE PT:Applying XSLT policy: %+C%14CNOVLADDCFG-pub-cts%-C.
  6048. [07/10/12 03:58:29.048]:ADTRACE PT:Policy returned:
  6049. [07/10/12 03:58:29.048]:ADTRACE PT:
  6050. <nds dtdversion="4.0" ndsversion="8.x">
  6051. <input>
  6052. <check-password><!-- content suppressed --></check-password>
  6053. </input>
  6054. </nds>
  6055. [07/10/12 03:58:29.048]:ADTRACE PT:Filtering out notification-only attributes.
  6056. [07/10/12 03:58:29.048]:ADTRACE PT:Pumping XDS to eDirectory.
  6057. [07/10/12 03:58:29.048]:ADTRACE PT:Performing operation check-password for .
  6058. [07/10/12 03:58:29.048]:ADTRACE PT:--JCLNT-- \xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver - Publisher : Duplicating : context = 979763278, tempContext = 979763260
  6059. [07/10/12 03:58:29.048]:ADTRACE PT:--JCLNT-- \xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver - Publisher : Calling free on tempContext = 979763260
  6060. [07/10/12 03:58:29.048]:ADTRACE PT:Fixing up association references.
  6061. [07/10/12 03:58:29.048]:ADTRACE PT:Applying schema mapping policies to output.
  6062. [07/10/12 03:58:29.048]:ADTRACE PT:Applying policy: %+C%14CNOVLDATACOLL-smp-SkipSchemaMapping%-C.
  6063. [07/10/12 03:58:29.048]:ADTRACE PT: Applying to status #1.
  6064. [07/10/12 03:58:29.048]:ADTRACE PT: Evaluating selection criteria for rule 'skip'.
  6065. [07/10/12 03:58:29.048]:ADTRACE PT: (if-operation equal "instance") = FALSE.
  6066. [07/10/12 03:58:29.048]:ADTRACE PT: Rule rejected.
  6067. [07/10/12 03:58:29.048]:ADTRACE PT: Evaluating selection criteria for rule 'restore'.
  6068. [07/10/12 03:58:29.048]:ADTRACE PT: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  6069. [07/10/12 03:58:29.048]:ADTRACE PT: Rule rejected.
  6070. [07/10/12 03:58:29.048]:ADTRACE PT:Policy returned:
  6071. [07/10/12 03:58:29.048]:ADTRACE PT:
  6072. <nds dtdversion="4.0" ndsversion="8.x">
  6073. <source>
  6074. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  6075. <contact>Novell, Inc.</contact>
  6076. </source>
  6077. <output>
  6078. <status event-id="0" level="success"></status>
  6079. </output>
  6080. </nds>
  6081. [07/10/12 03:58:29.048]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-smp%-C.
  6082. [07/10/12 03:58:29.048]:ADTRACE PT:Applying policy: %+C%14CNOVLDATACOLL-smp-SkipSchemaMapping%-C.
  6083. [07/10/12 03:58:29.048]:ADTRACE PT: Applying to status #1.
  6084. [07/10/12 03:58:29.048]:ADTRACE PT: Evaluating selection criteria for rule 'skip'.
  6085. [07/10/12 03:58:29.048]:ADTRACE PT: (if-operation equal "instance") = FALSE.
  6086. [07/10/12 03:58:29.048]:ADTRACE PT: Rule rejected.
  6087. [07/10/12 03:58:29.048]:ADTRACE PT: Evaluating selection criteria for rule 'restore'.
  6088. [07/10/12 03:58:29.048]:ADTRACE PT: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  6089. [07/10/12 03:58:29.048]:ADTRACE PT: Rule rejected.
  6090. [07/10/12 03:58:29.048]:ADTRACE PT:Policy returned:
  6091. [07/10/12 03:58:29.048]:ADTRACE PT:
  6092. <nds dtdversion="4.0" ndsversion="8.x">
  6093. <source>
  6094. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  6095. <contact>Novell, Inc.</contact>
  6096. </source>
  6097. <output>
  6098. <status event-id="0" level="success"></status>
  6099. </output>
  6100. </nds>
  6101. [07/10/12 03:58:29.048]:ADTRACE PT:Applying output transformation policies.
  6102. [07/10/12 03:58:29.048]:ADTRACE PT:Applying policy: %+C%14CNOVLADENTEX-otp-EntitlementsImpl%-C.
  6103. [07/10/12 03:58:29.048]:ADTRACE PT: Applying to status #1.
  6104. [07/10/12 03:58:29.048]:ADTRACE PT: Evaluating selection criteria for rule 'Intercept outbound queries for ADDomain'.
  6105. [07/10/12 03:58:29.048]:ADTRACE PT: (if-class-name equal "ADDomain") = FALSE.
  6106. [07/10/12 03:58:29.064]:ADTRACE PT: Rule rejected.
  6107. [07/10/12 03:58:29.064]:ADTRACE PT:Policy returned:
  6108. [07/10/12 03:58:29.064]:ADTRACE PT:
  6109. <nds dtdversion="4.0" ndsversion="8.x">
  6110. <source>
  6111. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  6112. <contact>Novell, Inc.</contact>
  6113. </source>
  6114. <output>
  6115. <status event-id="0" level="success"></status>
  6116. </output>
  6117. </nds>
  6118. [07/10/12 03:58:29.064]:ADTRACE PT:Applying policy: %+C%14CNOVLADENTEX-otp-ExchangeMailboxPolicy%-C.
  6119. [07/10/12 03:58:29.064]:ADTRACE PT: Applying to status #1.
  6120. [07/10/12 03:58:29.064]:ADTRACE PT: Evaluating selection criteria for rule 'Exchange: Remove HomeMDB when disabled'.
  6121. [07/10/12 03:58:29.064]:ADTRACE PT: (if-global-variable 'drv.exchMailboxMethod' equal "disabled") = TRUE.
  6122. [07/10/12 03:58:29.064]:ADTRACE PT: Rule selected.
  6123. [07/10/12 03:58:29.064]:ADTRACE PT: Applying rule 'Exchange: Remove HomeMDB when disabled'.
  6124. [07/10/12 03:58:29.064]:ADTRACE PT: Action: do-strip-op-attr("homeMDB").
  6125. [07/10/12 03:58:29.064]:ADTRACE PT:Policy returned:
  6126. [07/10/12 03:58:29.064]:ADTRACE PT:
  6127. <nds dtdversion="4.0" ndsversion="8.x">
  6128. <source>
  6129. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  6130. <contact>Novell, Inc.</contact>
  6131. </source>
  6132. <output>
  6133. <status event-id="0" level="success"></status>
  6134. </output>
  6135. </nds>
  6136. [07/10/12 03:58:29.064]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-otp-FormatConversions%-C.
  6137. [07/10/12 03:58:29.064]:ADTRACE PT: Applying to status #1.
  6138. [07/10/12 03:58:29.064]:ADTRACE PT: Evaluating selection criteria for rule 'Street Address: Convert LF to CR-LF'.
  6139. [07/10/12 03:58:29.064]:ADTRACE PT: Rule selected.
  6140. [07/10/12 03:58:29.064]:ADTRACE PT: Applying rule 'Street Address: Convert LF to CR-LF'.
  6141. [07/10/12 03:58:29.064]:ADTRACE PT: Action: do-reformat-op-attr("streetAddress",token-replace-all("[^\r]\n","\r\n",token-local-variable("current-value"))).
  6142. [07/10/12 03:58:29.064]:ADTRACE PT: Evaluating selection criteria for rule 'logonHours: Convert to Active Directory form'.
  6143. [07/10/12 03:58:29.064]:ADTRACE PT: Rule selected.
  6144. [07/10/12 03:58:29.064]:ADTRACE PT: Applying rule 'logonHours: Convert to Active Directory form'.
  6145. [07/10/12 03:58:29.064]:ADTRACE PT: Action: do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2ADLenient($current-value)")).
  6146. [07/10/12 03:58:29.064]:ADTRACE PT: Evaluating selection criteria for rule 'accountExpires: Convert to Active Directory form'.
  6147. [07/10/12 03:58:29.064]:ADTRACE PT: (if-op-attr 'accountExpires' changing) = FALSE.
  6148. [07/10/12 03:58:29.064]:ADTRACE PT: Rule rejected.
  6149. [07/10/12 03:58:29.064]:ADTRACE PT: Evaluating selection criteria for rule 'lockoutTime: Convert to Active Directory form'.
  6150. [07/10/12 03:58:29.064]:ADTRACE PT: Rule selected.
  6151. [07/10/12 03:58:29.064]:ADTRACE PT: Applying rule 'lockoutTime: Convert to Active Directory form'.
  6152. [07/10/12 03:58:29.064]:ADTRACE PT: Action: do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateEpoch2FileTime($current-value)")).
  6153. [07/10/12 03:58:29.064]:ADTRACE PT: Evaluating selection criteria for rule 'Add: User - convert multi-valued Telephone to single value'.
  6154. [07/10/12 03:58:29.064]:ADTRACE PT: (if-operation equal "add") = FALSE.
  6155. [07/10/12 03:58:29.064]:ADTRACE PT: Rule rejected.
  6156. [07/10/12 03:58:29.064]:ADTRACE PT: Evaluating selection criteria for rule 'update Active Directory logon name'.
  6157. [07/10/12 03:58:29.064]:ADTRACE PT: (if-xpath true "self::status[@level = 'success']/operation-data/windows-2000-logon-name") = FALSE.
  6158. [07/10/12 03:58:29.064]:ADTRACE PT: Rule rejected.
  6159. [07/10/12 03:58:29.064]:ADTRACE PT:Policy returned:
  6160. [07/10/12 03:58:29.064]:ADTRACE PT:
  6161. <nds dtdversion="4.0" ndsversion="8.x">
  6162. <source>
  6163. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  6164. <contact>Novell, Inc.</contact>
  6165. </source>
  6166. <output>
  6167. <status event-id="0" level="success"></status>
  6168. </output>
  6169. </nds>
  6170. [07/10/12 03:58:29.064]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-otp-ExchangeEntitlementQuery%-C.
  6171. [07/10/12 03:58:29.064]:ADTRACE PT: Applying to status #1.
  6172. [07/10/12 03:58:29.064]:ADTRACE PT: Evaluating selection criteria for rule 'Add dest-dn to the Exchange Entitlement Query'.
  6173. [07/10/12 03:58:29.064]:ADTRACE PT: (if-operation equal "query") = FALSE.
  6174. [07/10/12 03:58:29.064]:ADTRACE PT: Rule rejected.
  6175. [07/10/12 03:58:29.064]:ADTRACE PT:Policy returned:
  6176. [07/10/12 03:58:29.064]:ADTRACE PT:
  6177. <nds dtdversion="4.0" ndsversion="8.x">
  6178. <source>
  6179. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  6180. <contact>Novell, Inc.</contact>
  6181. </source>
  6182. <output>
  6183. <status event-id="0" level="success"></status>
  6184. </output>
  6185. </nds>
  6186. [07/10/12 03:58:29.079]:ADTRACE PT:Applying policy: %+C%14CNOVLPWDSYNC-otp-EmailOnFailedPwdPub%-C.
  6187. [07/10/12 03:58:29.079]:ADTRACE PT: Applying to status #1.
  6188. [07/10/12 03:58:29.079]:ADTRACE PT: Evaluating selection criteria for rule 'Send e-mail for a failed publish password operation'.
  6189. [07/10/12 03:58:29.079]:ADTRACE PT: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  6190. [07/10/12 03:58:29.079]:ADTRACE PT: (if-operation equal "status") = TRUE.
  6191. [07/10/12 03:58:29.079]:ADTRACE PT: (if-xpath true "self::status[@level != 'success']/operation-data/password-publish-status") = FALSE.
  6192. [07/10/12 03:58:29.079]:ADTRACE PT: Rule rejected.
  6193. [07/10/12 03:58:29.079]:ADTRACE PT:Policy returned:
  6194. [07/10/12 03:58:29.079]:ADTRACE PT:
  6195. <nds dtdversion="4.0" ndsversion="8.x">
  6196. <source>
  6197. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  6198. <contact>Novell, Inc.</contact>
  6199. </source>
  6200. <output>
  6201. <status event-id="0" level="success"></status>
  6202. </output>
  6203. </nds>
  6204. [07/10/12 03:58:29.079]:ADTRACE PT:Applying policy: %+C%14CNOVLATRKBASE-otp-Subscribe%-C.
  6205. [07/10/12 03:58:29.079]:ADTRACE PT: Applying to status #1.
  6206. [07/10/12 03:58:29.079]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - Initialize Realm Mapping'.
  6207. [07/10/12 03:58:29.079]:ADTRACE PT: (if-global-variable 'drv.acctTrk.enable' equal "true") = TRUE.
  6208. [07/10/12 03:58:29.079]:ADTRACE PT: (if-global-variable 'drv.acctTrk.mode' equal "fanout") = FALSE.
  6209. [07/10/12 03:58:29.079]:ADTRACE PT: Rule rejected.
  6210. [07/10/12 03:58:29.079]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled or wrong object class'.
  6211. [07/10/12 03:58:29.079]:ADTRACE PT: Rule selected.
  6212. [07/10/12 03:58:29.079]:ADTRACE PT: Applying rule 'AccountTracking - disregard if disabled or wrong object class'.
  6213. [07/10/12 03:58:29.079]:ADTRACE PT: Action: do-if().
  6214. [07/10/12 03:58:29.079]:ADTRACE PT: Evaluating conditions.
  6215. [07/10/12 03:58:29.079]:ADTRACE PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  6216. [07/10/12 03:58:29.079]:ADTRACE PT: Performing else actions.
  6217. [07/10/12 03:58:29.079]:ADTRACE PT: Action: do-for-each(arg-node-set(token-global-variable("drv.acctTrk.objectClass"))).
  6218. [07/10/12 03:58:29.079]:ADTRACE PT: arg-node-set(token-global-variable("drv.acctTrk.objectClass"))
  6219. [07/10/12 03:58:29.079]:ADTRACE PT: token-global-variable("drv.acctTrk.objectClass")
  6220. [07/10/12 03:58:29.079]:ADTRACE PT: Token Value: {"user"}.
  6221. [07/10/12 03:58:29.079]:ADTRACE PT: Arg Value: {"user"}.
  6222. [07/10/12 03:58:29.079]:ADTRACE PT: Performing actions for local-variable(current-node) = "user".
  6223. [07/10/12 03:58:29.079]:ADTRACE PT: Action: do-if().
  6224. [07/10/12 03:58:29.079]:ADTRACE PT: Evaluating conditions.
  6225. [07/10/12 03:58:29.079]:ADTRACE PT: (if-class-name equal "$current-node$") = FALSE.
  6226. [07/10/12 03:58:29.079]:ADTRACE PT: Performing else actions.
  6227. [07/10/12 03:58:29.079]:ADTRACE PT: Action: do-if().
  6228. [07/10/12 03:58:29.079]:ADTRACE PT: Evaluating conditions.
  6229. [07/10/12 03:58:29.079]:ADTRACE PT: (if-local-variable 'pass' not-available) = TRUE.
  6230. [07/10/12 03:58:29.079]:ADTRACE PT: Performing if actions.
  6231. [07/10/12 03:58:29.079]:ADTRACE PT: Action: do-break().
  6232. [07/10/12 03:58:29.079]:ADTRACE PT:Policy returned:
  6233. [07/10/12 03:58:29.079]:ADTRACE PT:
  6234. <nds dtdversion="4.0" ndsversion="8.x">
  6235. <source>
  6236. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  6237. <contact>Novell, Inc.</contact>
  6238. </source>
  6239. <output>
  6240. <status event-id="0" level="success"></status>
  6241. </output>
  6242. </nds>
  6243. [07/10/12 03:58:29.079]:ADTRACE PT:
  6244. <nds dtdversion="4.0" ndsversion="8.x">
  6245. <source>
  6246. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  6247. <contact>Novell, Inc.</contact>
  6248. </source>
  6249. <output>
  6250. <status event-id="0" level="success"></status>
  6251. </output>
  6252. </nds>
  6253. [07/10/12 03:58:29.079]:ADTRACE PT:Remote Interface Driver: Sending...
  6254. [07/10/12 03:58:29.079]:ADTRACE PT:
  6255. <nds dtdversion="4.0" ndsversion="8.x">
  6256. <output>
  6257. <status level="success"/>
  6258. </output>
  6259. </nds>
  6260. [07/10/12 03:58:29.079]:ADTRACE PT:Remote Interface Driver: Document sent.
  6261. [07/10/12 03:58:29.079]:ADTRACE PT:Remote Interface Driver: Sending...
  6262. [07/10/12 03:58:29.079]:ADTRACE PT:
  6263. <top>
  6264. <driver-init>
  6265. <nds dtdversion="4.0" ndsversion="8.x">
  6266. <source>
  6267. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  6268. <contact>Novell, Inc.</contact>
  6269. </source>
  6270. <input>
  6271. <init-params src-dn="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver">
  6272. <authentication-info>
  6273. <user>ADDriver_idm</user>
  6274. <password><!-- content suppressed --></password>
  6275. </authentication-info>
  6276. <driver-options>
  6277. <auth-options display-name="Show authentication options">hide</auth-options>
  6278. <auth-method display-name="Authentication Method">Negotiate</auth-method>
  6279. <signing display-name="Digitally sign communications">no</signing>
  6280. <sealing display-name="Digitally sign and seal communications">no</sealing>
  6281. <use-ssl display-name="Use SSL for LDAP connection between Driver Shim and AD">no</use-ssl>
  6282. <impersonation display-name="Logon and impersonate">yes</impersonation>
  6283. <xchg-options display-name="Show Exchange Management Options">hide</xchg-options>
  6284. <xchg-prov display-name="Enable Exchange mailbox provisioning">disabled</xchg-prov>
  6285. <exch-api-type display-name="Exchange Management interface type">use-exch-2010</exch-api-type>
  6286. <exch-move display-name="Allow Exchange mailbox move">yes</exch-move>
  6287. <exch-delete display-name="Allow Exchange mailbox delete">yes</exch-delete>
  6288. <access-options display-name="Show access options">hide</access-options>
  6289. <pollingInterval display-name="Driver Polling Interval">1</pollingInterval>
  6290. <pub-heartbeat-interval display-name="Publisher heartbeat interval">1</pub-heartbeat-interval>
  6291. <pub-password-expire-time display-name="Password Sync Timeout (minutes)">5</pub-password-expire-time>
  6292. <search-domain-scope display-name="Search domain scope">yes</search-domain-scope>
  6293. <retry-ldap-auth-unknown display-name="Retry LDAP Auth unknown error">no</retry-ldap-auth-unknown>
  6294. <enable-incremental-values display-name="Enable DirSync Incremental Values">no</enable-incremental-values>
  6295. <advanced-options display-name="Show advanced options">hide</advanced-options>
  6296. <enable-delete-protected-2008 display-name="Enable Deletion of protected objects in Windows server 2008">no</enable-delete-protected-2008>
  6297. </driver-options>
  6298. </init-params>
  6299. </input>
  6300. </nds>
  6301. </driver-init>
  6302. <subscriber-init>
  6303. <nds dtdversion="4.0" ndsversion="8.x">
  6304. <source>
  6305. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  6306. <contact>Novell, Inc.</contact>
  6307. </source>
  6308. <input>
  6309. <init-params src-dn="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver">
  6310. <authentication-info>
  6311. <user>ADDriver_idm</user>
  6312. <password><!-- content suppressed --></password>
  6313. </authentication-info>
  6314. <driver-filter>
  6315. <allow-class class-name="group">
  6316. <allow-attr attr-name="cn"/>
  6317. <allow-attr attr-name="description"/>
  6318. <allow-attr attr-name="displayName"/>
  6319. <allow-attr attr-name="L"/>
  6320. <allow-attr attr-name="member"/>
  6321. <allow-attr attr-name="managedBy"/>
  6322. </allow-class>
  6323. <allow-class class-name="organizationalUnit">
  6324. <allow-attr attr-name="description"/>
  6325. <allow-attr attr-name="ou"/>
  6326. </allow-class>
  6327. <allow-class class-name="user">
  6328. <allow-attr attr-name="sAMAccountName"/>
  6329. <allow-attr attr-name="description"/>
  6330. <allow-attr attr-name="userPrincipalName"/>
  6331. <allow-attr attr-name="DirXML-EntitlementRef"/>
  6332. <allow-attr attr-name="facsimileTelephoneNumber"/>
  6333. <allow-attr attr-name="displayName"/>
  6334. <allow-attr attr-name="givenName"/>
  6335. <allow-attr attr-name="initials"/>
  6336. <allow-attr attr-name="mail"/>
  6337. <allow-attr attr-name="physicalDeliveryOfficeName"/>
  6338. <allow-attr attr-name="logonHours"/>
  6339. <allow-attr attr-name="dirxml-uACAccountDisable"/>
  6340. <allow-attr attr-name="accountExpires"/>
  6341. <allow-attr attr-name="nspmDistributionPassword" is-sensitive="true"/>
  6342. <allow-attr attr-name="l"/>
  6343. <allow-attr attr-name="postalCode"/>
  6344. <allow-attr attr-name="postOfficeBox"/>
  6345. <allow-attr attr-name="st"/>
  6346. <allow-attr attr-name="streetAddress"/>
  6347. <allow-attr attr-name="sn"/>
  6348. <allow-attr attr-name="telephoneNumber"/>
  6349. <allow-attr attr-name="title"/>
  6350. </allow-class>
  6351. </driver-filter>
  6352. </init-params>
  6353. </input>
  6354. </nds>
  6355. </subscriber-init>
  6356. <publisher-init>
  6357. <nds dtdversion="4.0" ndsversion="8.x">
  6358. <source>
  6359. <product edition="Advanced" version="4.0.1.0">DirXML</product>
  6360. <contact>Novell, Inc.</contact>
  6361. </source>
  6362. <input>
  6363. <init-params src-dn="\xxxxxIDM\xxxxx\IDMDriverGroup\Driver Set\Active Directory Driver">
  6364. <authentication-info>
  6365. <user>ADDriver_idm</user>
  6366. <password><!-- content suppressed --></password>
  6367. </authentication-info>
  6368. <driver-filter>
  6369. <allow-class class-name="group">
  6370. <allow-attr attr-name="cn"/>
  6371. <allow-attr attr-name="description"/>
  6372. <allow-attr attr-name="displayName"/>
  6373. <allow-attr attr-name="L"/>
  6374. <allow-attr attr-name="member"/>
  6375. <allow-attr attr-name="managedBy"/>
  6376. </allow-class>
  6377. <allow-class class-name="organizationalUnit">
  6378. <allow-attr attr-name="description"/>
  6379. <allow-attr attr-name="ou"/>
  6380. </allow-class>
  6381. <allow-class class-name="user">
  6382. <allow-attr attr-name="sAMAccountName"/>
  6383. <allow-attr attr-name="description"/>
  6384. <allow-attr attr-name="userPrincipalName"/>
  6385. <allow-attr attr-name="DirXML-EntitlementRef"/>
  6386. <allow-attr attr-name="facsimileTelephoneNumber"/>
  6387. <allow-attr attr-name="displayName"/>
  6388. <allow-attr attr-name="givenName"/>
  6389. <allow-attr attr-name="initials"/>
  6390. <allow-attr attr-name="mail"/>
  6391. <allow-attr attr-name="physicalDeliveryOfficeName"/>
  6392. <allow-attr attr-name="logonHours"/>
  6393. <allow-attr attr-name="dirxml-uACAccountDisable"/>
  6394. <allow-attr attr-name="accountExpires"/>
  6395. <allow-attr attr-name="nspmDistributionPassword" is-sensitive="true"/>
  6396. <allow-attr attr-name="l"/>
  6397. <allow-attr attr-name="postalCode"/>
  6398. <allow-attr attr-name="postOfficeBox"/>
  6399. <allow-attr attr-name="st"/>
  6400. <allow-attr attr-name="streetAddress"/>
  6401. <allow-attr attr-name="sn"/>
  6402. <allow-attr attr-name="telephoneNumber"/>
  6403. <allow-attr attr-name="title"/>
  6404. </allow-class>
  6405. </driver-filter>
  6406. <publisher-state>
  6407. <cookie>TVNEUwMAAADg8YqKrV3NAQAAAAAAAAAAKAAAADSJAAAAAAAAAAAAAAAAAAA0iQAAAAAAAG324OqoH71EtU0ZVbvRPtIBAAAAAAAAAAEAAAAAAAAAbfbg6qgfvUS1TRlVu9E+0uesAAAAAAAA</cookie>
  6408. </publisher-state>
  6409. </init-params>
  6410. </input>
  6411. </nds>
  6412. </publisher-init>
  6413. </top>
  6414. [07/10/12 03:58:29.111]:ADTRACE PT:Remote Interface Driver: Document sent.
  6415. [07/10/12 03:58:29.470]:ADTRACE :Remote Interface Driver: Received.
  6416. [07/10/12 03:58:29.470]:ADTRACE :
  6417. <nds dtdversion="3.5" ndsversion="8.x">
  6418. <output>
  6419. <status event-id="report status" level="success">Remote driver successfully started.</status>
  6420. <init-params event-id="write state">
  6421. <publisher-state>
  6422. <cookie>TVNEUwMAAADNMm2Sil7NAQAAAAAAAAAAKAAAAL+0AAAAAAAAAAAAAAAAAAC/tAAAAAAAAG324OqoH71EtU0ZVbvRPtIBAAAAAAAAAAEAAAAAAAAAbfbg6qgfvUS1TRlVu9E+0r+0AAAAAAAA</cookie>
  6423. </publisher-state>
  6424. </init-params>
  6425. </output>
  6426. </nds>
  6427. [07/10/12 03:58:29.470]:ADTRACE :Remote Interface Driver: Received document for subscriber channel
  6428. [07/10/12 03:58:29.470]:ADTRACE :Remote Interface Driver: Waiting for receive...
  6429. [07/10/12 03:58:29.470]:ADTRACE PT:Receiving DOM document from application.
  6430. [07/10/12 03:58:29.470]:ADTRACE PT:
  6431. <nds dtdversion="3.5" ndsversion="8.x" remote-interface="yes">
  6432. <input>
  6433. <status event-id="report status" level="success">Remote driver successfully started.</status>
  6434. <init-params event-id="write state">
  6435. <publisher-state>
  6436. <cookie>TVNEUwMAAADNMm2Sil7NAQAAAAAAAAAAKAAAAL+0AAAAAAAAAAAAAAAAAAC/tAAAAAAAAG324OqoH71EtU0ZVbvRPtIBAAAAAAAAAAEAAAAAAAAAbfbg6qgfvUS1TRlVu9E+0r+0AAAAAAAA</cookie>
  6437. </publisher-state>
  6438. </init-params>
  6439. </input>
  6440. </nds>
  6441. [07/10/12 03:58:29.470]:ADTRACE PT:Applying input transformation policies.
  6442. [07/10/12 03:58:29.470]:ADTRACE PT:Applying policy: %+C%14CNOVLAUDTENTC-itp-SendEntitlementsEvents%-C.
  6443. [07/10/12 03:58:29.470]:ADTRACE PT: Applying to status #1.
  6444. [07/10/12 03:58:29.470]:ADTRACE PT: Evaluating selection criteria for rule '00031200 - Account Create By Entitlement Grant'.
  6445. [07/10/12 03:58:29.470]:ADTRACE PT: (if-operation equal "status") = TRUE.
  6446. [07/10/12 03:58:29.470]:ADTRACE PT: (if-op-property 'accountAction' equal "accountCreateByEntitlementGrant") = FALSE.
  6447. [07/10/12 03:58:29.470]:ADTRACE PT: Rule rejected.
  6448. [07/10/12 03:58:29.470]:ADTRACE PT: Evaluating selection criteria for rule '00031201 - Account Delete By Entitlement Revoke'.
  6449. [07/10/12 03:58:29.470]:ADTRACE PT: (if-operation equal "status") = TRUE.
  6450. [07/10/12 03:58:29.470]:ADTRACE PT: (if-xpath true "./operation-data/entitlement-impl/@state = '0'") = FALSE.
  6451. [07/10/12 03:58:29.470]:ADTRACE PT: (if-operation equal "status") = TRUE.
  6452. [07/10/12 03:58:29.470]:ADTRACE PT: (if-op-property 'accountAction' equal "accountDeleteByEntitlementRevoke") = FALSE.
  6453. [07/10/12 03:58:29.470]:ADTRACE PT: Rule rejected.
  6454. [07/10/12 03:58:29.470]:ADTRACE PT: Evaluating selection criteria for rule '00031202 - Account Disable By Entitlement Revoke'.
  6455. [07/10/12 03:58:29.470]:ADTRACE PT: (if-operation equal "status") = TRUE.
  6456. [07/10/12 03:58:29.470]:ADTRACE PT: (if-op-property 'accountAction' equal "accountDisableByEntitlementRevoke") = FALSE.
  6457. [07/10/12 03:58:29.470]:ADTRACE PT: Rule rejected.
  6458. [07/10/12 03:58:29.470]:ADTRACE PT: Evaluating selection criteria for rule '00031203 - Account Enable By Entitlement Grant'.
  6459. [07/10/12 03:58:29.470]:ADTRACE PT: (if-operation equal "status") = TRUE.
  6460. [07/10/12 03:58:29.470]:ADTRACE PT: (if-op-property 'accountAction' equal "accountEnableByEntitlementGrant") = FALSE.
  6461. [07/10/12 03:58:29.470]:ADTRACE PT: Rule rejected.
  6462. [07/10/12 03:58:29.470]:ADTRACE PT: Evaluating selection criteria for rule 'Generate Audit Event'.
  6463. [07/10/12 03:58:29.486]:ADTRACE PT: (if-operation equal "status") = TRUE.
  6464. [07/10/12 03:58:29.486]:ADTRACE PT: (if-local-variable 'auditEventID' available) = FALSE.
  6465. [07/10/12 03:58:29.486]:ADTRACE PT: Rule rejected.
  6466. [07/10/12 03:58:29.486]:ADTRACE PT: Applying to init-params #2.
  6467. [07/10/12 03:58:29.486]:ADTRACE PT: Evaluating selection criteria for rule '00031200 - Account Create By Entitlement Grant'.
  6468. [07/10/12 03:58:29.486]:ADTRACE PT: (if-operation equal "status") = FALSE.
  6469. [07/10/12 03:58:29.486]:ADTRACE PT: Rule rejected.
  6470. [07/10/12 03:58:29.486]:ADTRACE PT: Evaluating selection criteria for rule '00031201 - Account Delete By Entitlement Revoke'.
  6471. [07/10/12 03:58:29.486]:ADTRACE PT: (if-operation equal "status") = FALSE.
  6472. [07/10/12 03:58:29.486]:ADTRACE PT: (if-operation equal "status") = FALSE.
  6473. [07/10/12 03:58:29.486]:ADTRACE PT: Rule rejected.
  6474. [07/10/12 03:58:29.486]:ADTRACE PT: Evaluating selection criteria for rule '00031202 - Account Disable By Entitlement Revoke'.
  6475. [07/10/12 03:58:29.486]:ADTRACE PT: (if-operation equal "status") = FALSE.
  6476. [07/10/12 03:58:29.486]:ADTRACE PT: Rule rejected.
  6477. [07/10/12 03:58:29.486]:ADTRACE PT: Evaluating selection criteria for rule '00031203 - Account Enable By Entitlement Grant'.
  6478. [07/10/12 03:58:29.486]:ADTRACE PT: (if-operation equal "status") = FALSE.
  6479. [07/10/12 03:58:29.486]:ADTRACE PT: Rule rejected.
  6480. [07/10/12 03:58:29.486]:ADTRACE PT: Evaluating selection criteria for rule 'Generate Audit Event'.
  6481. [07/10/12 03:58:29.486]:ADTRACE PT: (if-operation equal "status") = FALSE.
  6482. [07/10/12 03:58:29.486]:ADTRACE PT: Rule rejected.
  6483. [07/10/12 03:58:29.486]:ADTRACE PT:Policy returned:
  6484. [07/10/12 03:58:29.486]:ADTRACE PT:
  6485. <nds dtdversion="3.5" ndsversion="8.x" remote-interface="yes">
  6486. <input>
  6487. <status event-id="report status" level="success">Remote driver successfully started.</status>
  6488. <init-params event-id="write state">
  6489. <publisher-state>
  6490. <cookie>TVNEUwMAAADNMm2Sil7NAQAAAAAAAAAAKAAAAL+0AAAAAAAAAAAAAAAAAAC/tAAAAAAAAG324OqoH71EtU0ZVbvRPtIBAAAAAAAAAAEAAAAAAAAAbfbg6qgfvUS1TRlVu9E+0r+0AAAAAAAA</cookie>
  6491. </publisher-state>
  6492. </init-params>
  6493. </input>
  6494. </nds>
  6495. [07/10/12 03:58:29.486]:ADTRACE PT:Applying policy: %+C%14CNOVLADENTEX-itp-InitEntitlementConfigurationResource%-C.
  6496. [07/10/12 03:58:29.486]:ADTRACE PT: Applying to status #1.
  6497. [07/10/12 03:58:29.486]:ADTRACE PT: Evaluating selection criteria for rule 'Make sure we only run once and when we're ready'.
  6498. [07/10/12 03:58:29.486]:ADTRACE PT: (if-local-variable 'objectClass' match ".+") = TRUE.
  6499. [07/10/12 03:58:29.486]:ADTRACE PT: (if-local-variable 'entConfigInitialized' equal "true") = TRUE.
  6500. [07/10/12 03:58:29.486]:ADTRACE PT: Rule selected.
  6501. [07/10/12 03:58:29.486]:ADTRACE PT: Applying rule 'Make sure we only run once and when we're ready'.
  6502. [07/10/12 03:58:29.486]:ADTRACE PT: Action: do-break().
  6503. [07/10/12 03:58:29.486]:ADTRACE PT: Applying to init-params #2.
  6504. [07/10/12 03:58:29.486]:ADTRACE PT: Evaluating selection criteria for rule 'Make sure we only run once and when we're ready'.
  6505. [07/10/12 03:58:29.486]:ADTRACE PT: (if-local-variable 'objectClass' match ".+") = TRUE.
  6506. [07/10/12 03:58:29.486]:ADTRACE PT: (if-local-variable 'entConfigInitialized' equal "true") = TRUE.
  6507. [07/10/12 03:58:29.486]:ADTRACE PT: Rule selected.
  6508. [07/10/12 03:58:29.486]:ADTRACE PT: Applying rule 'Make sure we only run once and when we're ready'.
  6509. [07/10/12 03:58:29.486]:ADTRACE PT: Action: do-break().
  6510. [07/10/12 03:58:29.486]:ADTRACE PT:Policy returned:
  6511. [07/10/12 03:58:29.486]:ADTRACE PT:
  6512. <nds dtdversion="3.5" ndsversion="8.x" remote-interface="yes">
  6513. <input>
  6514. <status event-id="report status" level="success">Remote driver successfully started.</status>
  6515. <init-params event-id="write state">
  6516. <publisher-state>
  6517. <cookie>TVNEUwMAAADNMm2Sil7NAQAAAAAAAAAAKAAAAL+0AAAAAAAAAAAAAAAAAAC/tAAAAAAAAG324OqoH71EtU0ZVbvRPtIBAAAAAAAAAAEAAAAAAAAAbfbg6qgfvUS1TRlVu9E+0r+0AAAAAAAA</cookie>
  6518. </publisher-state>
  6519. </init-params>
  6520. </input>
  6521. </nds>
  6522. [07/10/12 03:58:29.486]:ADTRACE PT:Applying policy: %+C%14CNOVLADMSINFO-itp-InitManagedSystemInfo%-C.
  6523. [07/10/12 03:58:29.486]:ADTRACE PT: Applying to status #1.
  6524. [07/10/12 03:58:29.486]:ADTRACE PT: Evaluating selection criteria for rule 'Make sure we only run once and when we're ready'.
  6525. [07/10/12 03:58:29.486]:ADTRACE PT: (if-local-variable 'objectClass' match ".+") = TRUE.
  6526. [07/10/12 03:58:29.501]:ADTRACE PT: (if-local-variable 'mSysInfoInitialized' equal "true") = TRUE.
  6527. [07/10/12 03:58:29.501]:ADTRACE PT: Rule selected.
  6528. [07/10/12 03:58:29.501]:ADTRACE PT: Applying rule 'Make sure we only run once and when we're ready'.
  6529. [07/10/12 03:58:29.501]:ADTRACE PT: Action: do-break().
  6530. [07/10/12 03:58:29.501]:ADTRACE PT: Applying to init-params #2.
  6531. [07/10/12 03:58:29.501]:ADTRACE PT: Evaluating selection criteria for rule 'Make sure we only run once and when we're ready'.
  6532. [07/10/12 03:58:29.501]:ADTRACE PT: (if-local-variable 'objectClass' match ".+") = TRUE.
  6533. [07/10/12 03:58:29.501]:ADTRACE PT: (if-local-variable 'mSysInfoInitialized' equal "true") = TRUE.
  6534. [07/10/12 03:58:29.501]:ADTRACE PT: Rule selected.
  6535. [07/10/12 03:58:29.501]:ADTRACE PT: Applying rule 'Make sure we only run once and when we're ready'.
  6536. [07/10/12 03:58:29.501]:ADTRACE PT: Action: do-break().
  6537. [07/10/12 03:58:29.501]:ADTRACE PT:Policy returned:
  6538. [07/10/12 03:58:29.501]:ADTRACE PT:
  6539. <nds dtdversion="3.5" ndsversion="8.x" remote-interface="yes">
  6540. <input>
  6541. <status event-id="report status" level="success">Remote driver successfully started.</status>
  6542. <init-params event-id="write state">
  6543. <publisher-state>
  6544. <cookie>TVNEUwMAAADNMm2Sil7NAQAAAAAAAAAAKAAAAL+0AAAAAAAAAAAAAAAAAAC/tAAAAAAAAG324OqoH71EtU0ZVbvRPtIBAAAAAAAAAAEAAAAAAAAAbfbg6qgfvUS1TRlVu9E+0r+0AAAAAAAA</cookie>
  6545. </publisher-state>
  6546. </init-params>
  6547. </input>
  6548. </nds>
  6549. [07/10/12 03:58:29.501]:ADTRACE PT:Applying policy: %+C%14CNOVLATRKBASE-itp-Publish%-C.
  6550. [07/10/12 03:58:29.501]:ADTRACE PT: Applying to status #1.
  6551. [07/10/12 03:58:29.501]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled or wrong object class'.
  6552. [07/10/12 03:58:29.501]:ADTRACE PT: Rule selected.
  6553. [07/10/12 03:58:29.501]:ADTRACE PT: Applying rule 'AccountTracking - disregard if disabled or wrong object class'.
  6554. [07/10/12 03:58:29.501]:ADTRACE PT: Action: do-if().
  6555. [07/10/12 03:58:29.501]:ADTRACE PT: Evaluating conditions.
  6556. [07/10/12 03:58:29.501]:ADTRACE PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  6557. [07/10/12 03:58:29.501]:ADTRACE PT: Performing else actions.
  6558. [07/10/12 03:58:29.501]:ADTRACE PT: Action: do-if().
  6559. [07/10/12 03:58:29.501]:ADTRACE PT: Evaluating conditions.
  6560. [07/10/12 03:58:29.501]:ADTRACE PT: (if-class-name available) = FALSE.
  6561. [07/10/12 03:58:29.501]:ADTRACE PT: Performing else actions.
  6562. [07/10/12 03:58:29.501]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - on add-association sync the operation-properties to status operations'.
  6563. [07/10/12 03:58:29.501]:ADTRACE PT: (if-operation equal "add-association") = FALSE.
  6564. [07/10/12 03:58:29.501]:ADTRACE PT: Rule rejected.
  6565. [07/10/12 03:58:29.501]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - Query for destination DN using Association'.
  6566. [07/10/12 03:58:29.501]:ADTRACE PT: (if-operation match "modify|delete|move|rename") = FALSE.
  6567. [07/10/12 03:58:29.501]:ADTRACE PT: Rule rejected.
  6568. [07/10/12 03:58:29.501]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - add interested properties to current doc for future use.'.
  6569. [07/10/12 03:58:29.501]:ADTRACE PT: (if-operation match "add|modify|delete|rename|move|status") = TRUE.
  6570. [07/10/12 03:58:29.501]:ADTRACE PT: Rule selected.
  6571. [07/10/12 03:58:29.501]:ADTRACE PT: Applying rule 'AccountTracking - add interested properties to current doc for future use.'.
  6572. [07/10/12 03:58:29.501]:ADTRACE PT: Action: do-for-each(arg-node-set(token-global-variable("drv.acctTrk.identifiers"))).
  6573. [07/10/12 03:58:29.501]:ADTRACE PT: arg-node-set(token-global-variable("drv.acctTrk.identifiers"))
  6574. [07/10/12 03:58:29.501]:ADTRACE PT: token-global-variable("drv.acctTrk.identifiers")
  6575. [07/10/12 03:58:29.501]:ADTRACE PT: Token Value: {"sAMAccountName","userPrincipalName","LDAPDN","association"}.
  6576. [07/10/12 03:58:29.501]:ADTRACE PT: Arg Value: {"sAMAccountName","userPrincipalName","LDAPDN","association"}.
  6577. [07/10/12 03:58:29.501]:ADTRACE PT: Performing actions for local-variable(current-node) = "sAMAccountName".
  6578. [07/10/12 03:58:29.501]:ADTRACE PT: Action: do-if().
  6579. [07/10/12 03:58:29.501]:ADTRACE PT: Evaluating conditions.
  6580. [07/10/12 03:58:29.501]:ADTRACE PT: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  6581. [07/10/12 03:58:29.501]:ADTRACE PT: Performing else actions.
  6582. [07/10/12 03:58:29.501]:ADTRACE PT: Action: do-if().
  6583. [07/10/12 03:58:29.501]:ADTRACE PT: Evaluating conditions.
  6584. [07/10/12 03:58:29.501]:ADTRACE PT: (if-local-variable 'current-node' equal "association") = FALSE.
  6585. [07/10/12 03:58:29.501]:ADTRACE PT: Performing else actions.
  6586. [07/10/12 03:58:29.501]:ADTRACE PT: Action: do-if().
  6587. [07/10/12 03:58:29.517]:ADTRACE PT: Evaluating conditions.
  6588. [07/10/12 03:58:29.517]:ADTRACE PT: Expanded variable reference '$current-node$' to 'sAMAccountName'.
  6589. [07/10/12 03:58:29.517]:ADTRACE PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  6590. [07/10/12 03:58:29.517]:ADTRACE PT: Expanded variable reference '$current-node$' to 'sAMAccountName'.
  6591. [07/10/12 03:58:29.517]:ADTRACE PT: (if-op-attr '$current-node$' available) = FALSE.
  6592. [07/10/12 03:58:29.517]:ADTRACE PT: Performing else actions.
  6593. [07/10/12 03:58:29.517]:ADTRACE PT: Performing actions for local-variable(current-node) = "userPrincipalName".
  6594. [07/10/12 03:58:29.517]:ADTRACE PT: Action: do-if().
  6595. [07/10/12 03:58:29.517]:ADTRACE PT: Evaluating conditions.
  6596. [07/10/12 03:58:29.517]:ADTRACE PT: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  6597. [07/10/12 03:58:29.517]:ADTRACE PT: Performing else actions.
  6598. [07/10/12 03:58:29.517]:ADTRACE PT: Action: do-if().
  6599. [07/10/12 03:58:29.517]:ADTRACE PT: Evaluating conditions.
  6600. [07/10/12 03:58:29.517]:ADTRACE PT: (if-local-variable 'current-node' equal "association") = FALSE.
  6601. [07/10/12 03:58:29.517]:ADTRACE PT: Performing else actions.
  6602. [07/10/12 03:58:29.517]:ADTRACE PT: Action: do-if().
  6603. [07/10/12 03:58:29.517]:ADTRACE PT: Evaluating conditions.
  6604. [07/10/12 03:58:29.517]:ADTRACE PT: Expanded variable reference '$current-node$' to 'userPrincipalName'.
  6605. [07/10/12 03:58:29.517]:ADTRACE PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  6606. [07/10/12 03:58:29.517]:ADTRACE PT: Expanded variable reference '$current-node$' to 'userPrincipalName'.
  6607. [07/10/12 03:58:29.517]:ADTRACE PT: (if-op-attr '$current-node$' available) = FALSE.
  6608. [07/10/12 03:58:29.517]:ADTRACE PT: Performing else actions.
  6609. [07/10/12 03:58:29.517]:ADTRACE PT: Performing actions for local-variable(current-node) = "LDAPDN".
  6610. [07/10/12 03:58:29.517]:ADTRACE PT: Action: do-if().
  6611. [07/10/12 03:58:29.517]:ADTRACE PT: Evaluating conditions.
  6612. [07/10/12 03:58:29.517]:ADTRACE PT: (if-local-variable 'current-node' equal "LDAPDN") = TRUE.
  6613. [07/10/12 03:58:29.517]:ADTRACE PT: Expanded variable reference '$current-node$' to 'LDAPDN'.
  6614. [07/10/12 03:58:29.517]:ADTRACE PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  6615. [07/10/12 03:58:29.517]:ADTRACE PT: (if-src-dn available) = FALSE.
  6616. [07/10/12 03:58:29.517]:ADTRACE PT: Performing else actions.
  6617. [07/10/12 03:58:29.517]:ADTRACE PT: Action: do-if().
  6618. [07/10/12 03:58:29.517]:ADTRACE PT: Evaluating conditions.
  6619. [07/10/12 03:58:29.517]:ADTRACE PT: (if-local-variable 'current-node' equal "association") = FALSE.
  6620. [07/10/12 03:58:29.517]:ADTRACE PT: Performing else actions.
  6621. [07/10/12 03:58:29.517]:ADTRACE PT: Action: do-if().
  6622. [07/10/12 03:58:29.517]:ADTRACE PT: Evaluating conditions.
  6623. [07/10/12 03:58:29.517]:ADTRACE PT: Expanded variable reference '$current-node$' to 'LDAPDN'.
  6624. [07/10/12 03:58:29.517]:ADTRACE PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  6625. [07/10/12 03:58:29.517]:ADTRACE PT: Expanded variable reference '$current-node$' to 'LDAPDN'.
  6626. [07/10/12 03:58:29.517]:ADTRACE PT: (if-op-attr '$current-node$' available) = FALSE.
  6627. [07/10/12 03:58:29.517]:ADTRACE PT: Performing else actions.
  6628. [07/10/12 03:58:29.517]:ADTRACE PT: Performing actions for local-variable(current-node) = "association".
  6629. [07/10/12 03:58:29.517]:ADTRACE PT: Action: do-if().
  6630. [07/10/12 03:58:29.517]:ADTRACE PT: Evaluating conditions.
  6631. [07/10/12 03:58:29.517]:ADTRACE PT: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  6632. [07/10/12 03:58:29.517]:ADTRACE PT: Performing else actions.
  6633. [07/10/12 03:58:29.517]:ADTRACE PT: Action: do-if().
  6634. [07/10/12 03:58:29.517]:ADTRACE PT: Evaluating conditions.
  6635. [07/10/12 03:58:29.517]:ADTRACE PT: (if-local-variable 'current-node' equal "association") = TRUE.
  6636. [07/10/12 03:58:29.517]:ADTRACE PT: Expanded variable reference '$current-node$' to 'association'.
  6637. [07/10/12 03:58:29.517]:ADTRACE PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  6638. [07/10/12 03:58:29.517]:ADTRACE PT: (if-association available) = FALSE.
  6639. [07/10/12 03:58:29.517]:ADTRACE PT: Performing else actions.
  6640. [07/10/12 03:58:29.517]:ADTRACE PT: Action: do-if().
  6641. [07/10/12 03:58:29.517]:ADTRACE PT: Evaluating conditions.
  6642. [07/10/12 03:58:29.517]:ADTRACE PT: Expanded variable reference '$current-node$' to 'association'.
  6643. [07/10/12 03:58:29.517]:ADTRACE PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  6644. [07/10/12 03:58:29.533]:ADTRACE PT: Expanded variable reference '$current-node$' to 'association'.
  6645. [07/10/12 03:58:29.533]:ADTRACE PT: (if-op-attr '$current-node$' available) = FALSE.
  6646. [07/10/12 03:58:29.533]:ADTRACE PT: Performing else actions.
  6647. [07/10/12 03:58:29.533]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - Initialize status properties on published events'.
  6648. [07/10/12 03:58:29.533]:ADTRACE PT: (if-operation match "add|modify|delete|rename|move") = FALSE.
  6649. [07/10/12 03:58:29.533]:ADTRACE PT: Rule rejected.
  6650. [07/10/12 03:58:29.533]:ADTRACE PT: Applying to init-params #2.
  6651. [07/10/12 03:58:29.533]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled or wrong object class'.
  6652. [07/10/12 03:58:29.533]:ADTRACE PT: Rule selected.
  6653. [07/10/12 03:58:29.533]:ADTRACE PT: Applying rule 'AccountTracking - disregard if disabled or wrong object class'.
  6654. [07/10/12 03:58:29.533]:ADTRACE PT: Action: do-if().
  6655. [07/10/12 03:58:29.533]:ADTRACE PT: Evaluating conditions.
  6656. [07/10/12 03:58:29.533]:ADTRACE PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  6657. [07/10/12 03:58:29.533]:ADTRACE PT: Performing else actions.
  6658. [07/10/12 03:58:29.533]:ADTRACE PT: Action: do-if().
  6659. [07/10/12 03:58:29.533]:ADTRACE PT: Evaluating conditions.
  6660. [07/10/12 03:58:29.533]:ADTRACE PT: (if-class-name available) = FALSE.
  6661. [07/10/12 03:58:29.533]:ADTRACE PT: Performing else actions.
  6662. [07/10/12 03:58:29.533]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - on add-association sync the operation-properties to status operations'.
  6663. [07/10/12 03:58:29.533]:ADTRACE PT: (if-operation equal "add-association") = FALSE.
  6664. [07/10/12 03:58:29.533]:ADTRACE PT: Rule rejected.
  6665. [07/10/12 03:58:29.533]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - Query for destination DN using Association'.
  6666. [07/10/12 03:58:29.533]:ADTRACE PT: (if-operation match "modify|delete|move|rename") = FALSE.
  6667. [07/10/12 03:58:29.533]:ADTRACE PT: Rule rejected.
  6668. [07/10/12 03:58:29.533]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - add interested properties to current doc for future use.'.
  6669. [07/10/12 03:58:29.533]:ADTRACE PT: (if-operation match "add|modify|delete|rename|move|status") = FALSE.
  6670. [07/10/12 03:58:29.533]:ADTRACE PT: Rule rejected.
  6671. [07/10/12 03:58:29.533]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - Initialize status properties on published events'.
  6672. [07/10/12 03:58:29.533]:ADTRACE PT: (if-operation match "add|modify|delete|rename|move") = FALSE.
  6673. [07/10/12 03:58:29.533]:ADTRACE PT: Rule rejected.
  6674. [07/10/12 03:58:29.533]:ADTRACE PT:Policy returned:
  6675. [07/10/12 03:58:29.533]:ADTRACE PT:
  6676. <nds dtdversion="3.5" ndsversion="8.x" remote-interface="yes">
  6677. <input>
  6678. <status event-id="report status" level="success">Remote driver successfully started.</status>
  6679. <init-params event-id="write state">
  6680. <publisher-state>
  6681. <cookie>TVNEUwMAAADNMm2Sil7NAQAAAAAAAAAAKAAAAL+0AAAAAAAAAAAAAAAAAAC/tAAAAAAAAG324OqoH71EtU0ZVbvRPtIBAAAAAAAAAAEAAAAAAAAAbfbg6qgfvUS1TRlVu9E+0r+0AAAAAAAA</cookie>
  6682. </publisher-state>
  6683. </init-params>
  6684. </input>
  6685. </nds>
  6686. [07/10/12 03:58:29.533]:ADTRACE PT:Applying policy: %+C%14CNOVLATRKBASE-itp-WriteAccounts%-C.
  6687. [07/10/12 03:58:29.533]:ADTRACE PT: Applying to status #1.
  6688. [07/10/12 03:58:29.533]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - Initialize Realm Mapping'.
  6689. [07/10/12 03:58:29.533]:ADTRACE PT: (if-global-variable 'drv.acctTrk.enable' equal "true") = TRUE.
  6690. [07/10/12 03:58:29.533]:ADTRACE PT: (if-global-variable 'drv.acctTrk.mode' equal "fanout") = FALSE.
  6691. [07/10/12 03:58:29.533]:ADTRACE PT: Rule rejected.
  6692. [07/10/12 03:58:29.533]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled'.
  6693. [07/10/12 03:58:29.533]:ADTRACE PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  6694. [07/10/12 03:58:29.533]:ADTRACE PT: Rule rejected.
  6695. [07/10/12 03:58:29.533]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - query DirXML-Accounts Attribute'.
  6696. [07/10/12 03:58:29.533]:ADTRACE PT: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  6697. [07/10/12 03:58:29.533]:ADTRACE PT: Rule rejected.
  6698. [07/10/12 03:58:29.533]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - remove Dirxml-Account values on regular delete operation'.
  6699. [07/10/12 03:58:29.533]:ADTRACE PT: (if-operation match "delete|remove-association") = FALSE.
  6700. [07/10/12 03:58:29.533]:ADTRACE PT: (if-operation equal "status") = TRUE.
  6701. [07/10/12 03:58:29.533]:ADTRACE PT: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  6702. [07/10/12 03:58:29.533]:ADTRACE PT: Rule rejected.
  6703. [07/10/12 03:58:29.548]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - update DirXMLAccounts attribute on regular operations'.
  6704. [07/10/12 03:58:29.548]:ADTRACE PT: (if-op-property 'AccountTracking-Operation' not-available) = TRUE.
  6705. [07/10/12 03:58:29.548]:ADTRACE PT: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  6706. [07/10/12 03:58:29.548]:ADTRACE PT: (if-operation equal "status") = TRUE.
  6707. [07/10/12 03:58:29.548]:ADTRACE PT: (if-xpath true "./@level='success' or ./@level='warning'") = TRUE.
  6708. [07/10/12 03:58:29.548]:ADTRACE PT: (if-op-property 'AccountTracking-Operation' available) = FALSE.
  6709. [07/10/12 03:58:29.548]:ADTRACE PT: Rule rejected.
  6710. [07/10/12 03:58:29.548]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - update DirXMLAccounts attribute on mapped operations'.
  6711. [07/10/12 03:58:29.548]:ADTRACE PT: (if-xpath true "operation-data/account-tracking-operation") = FALSE.
  6712. [07/10/12 03:58:29.548]:ADTRACE PT: (if-xpath true "operation-data/account-tracking-operation") = FALSE.
  6713. [07/10/12 03:58:29.548]:ADTRACE PT: Rule rejected.
  6714. [07/10/12 03:58:29.548]:ADTRACE PT: Applying to init-params #2.
  6715. [07/10/12 03:58:29.548]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - Initialize Realm Mapping'.
  6716. [07/10/12 03:58:29.548]:ADTRACE PT: (if-global-variable 'drv.acctTrk.enable' equal "true") = TRUE.
  6717. [07/10/12 03:58:29.548]:ADTRACE PT: (if-global-variable 'drv.acctTrk.mode' equal "fanout") = FALSE.
  6718. [07/10/12 03:58:29.548]:ADTRACE PT: Rule rejected.
  6719. [07/10/12 03:58:29.548]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled'.
  6720. [07/10/12 03:58:29.548]:ADTRACE PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  6721. [07/10/12 03:58:29.548]:ADTRACE PT: Rule rejected.
  6722. [07/10/12 03:58:29.548]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - query DirXML-Accounts Attribute'.
  6723. [07/10/12 03:58:29.548]:ADTRACE PT: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  6724. [07/10/12 03:58:29.548]:ADTRACE PT: Rule rejected.
  6725. [07/10/12 03:58:29.548]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - remove Dirxml-Account values on regular delete operation'.
  6726. [07/10/12 03:58:29.548]:ADTRACE PT: (if-operation match "delete|remove-association") = FALSE.
  6727. [07/10/12 03:58:29.548]:ADTRACE PT: (if-operation equal "status") = FALSE.
  6728. [07/10/12 03:58:29.548]:ADTRACE PT: Rule rejected.
  6729. [07/10/12 03:58:29.548]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - update DirXMLAccounts attribute on regular operations'.
  6730. [07/10/12 03:58:29.548]:ADTRACE PT: (if-op-property 'AccountTracking-Operation' not-available) = TRUE.
  6731. [07/10/12 03:58:29.548]:ADTRACE PT: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  6732. [07/10/12 03:58:29.548]:ADTRACE PT: (if-operation equal "status") = FALSE.
  6733. [07/10/12 03:58:29.548]:ADTRACE PT: Rule rejected.
  6734. [07/10/12 03:58:29.548]:ADTRACE PT: Evaluating selection criteria for rule 'AccountTracking - update DirXMLAccounts attribute on mapped operations'.
  6735. [07/10/12 03:58:29.548]:ADTRACE PT: (if-xpath true "operation-data/account-tracking-operation") = FALSE.
  6736. [07/10/12 03:58:29.548]:ADTRACE PT: (if-xpath true "operation-data/account-tracking-operation") = FALSE.
  6737. [07/10/12 03:58:29.548]:ADTRACE PT: Rule rejected.
  6738. [07/10/12 03:58:29.548]:ADTRACE PT:Policy returned:
  6739. [07/10/12 03:58:29.548]:ADTRACE PT:
  6740. <nds dtdversion="3.5" ndsversion="8.x" remote-interface="yes">
  6741. <input>
  6742. <status event-id="report status" level="success">Remote driver successfully started.</status>
  6743. <init-params event-id="write state">
  6744. <publisher-state>
  6745. <cookie>TVNEUwMAAADNMm2Sil7NAQAAAAAAAAAAKAAAAL+0AAAAAAAAAAAAAAAAAAC/tAAAAAAAAG324OqoH71EtU0ZVbvRPtIBAAAAAAAAAAEAAAAAAAAAbfbg6qgfvUS1TRlVu9E+0r+0AAAAAAAA</cookie>
  6746. </publisher-state>
  6747. </init-params>
  6748. </input>
  6749. </nds>
  6750. [07/10/12 03:58:29.548]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-itp-SubscriberUserAdd%-C.
  6751. [07/10/12 03:58:29.548]:ADTRACE PT: Applying to status #1.
  6752. [07/10/12 03:58:29.548]:ADTRACE PT: Evaluating selection criteria for rule 'Populate DirXML-ADContext on initial user add'.
  6753. [07/10/12 03:58:29.548]:ADTRACE PT: (if-operation equal "add-association") = FALSE.
  6754. [07/10/12 03:58:29.548]:ADTRACE PT: Rule rejected.
  6755. [07/10/12 03:58:29.548]:ADTRACE PT: Applying to init-params #2.
  6756. [07/10/12 03:58:29.548]:ADTRACE PT: Evaluating selection criteria for rule 'Populate DirXML-ADContext on initial user add'.
  6757. [07/10/12 03:58:29.548]:ADTRACE PT: (if-operation equal "add-association") = FALSE.
  6758. [07/10/12 03:58:29.548]:ADTRACE PT: Rule rejected.
  6759. [07/10/12 03:58:29.548]:ADTRACE PT:Policy returned:
  6760. [07/10/12 03:58:29.564]:ADTRACE PT:
  6761. <nds dtdversion="3.5" ndsversion="8.x" remote-interface="yes">
  6762. <input>
  6763. <status event-id="report status" level="success">Remote driver successfully started.</status>
  6764. <init-params event-id="write state">
  6765. <publisher-state>
  6766. <cookie>TVNEUwMAAADNMm2Sil7NAQAAAAAAAAAAKAAAAL+0AAAAAAAAAAAAAAAAAAC/tAAAAAAAAG324OqoH71EtU0ZVbvRPtIBAAAAAAAAAAEAAAAAAAAAbfbg6qgfvUS1TRlVu9E+0r+0AAAAAAAA</cookie>
  6767. </publisher-state>
  6768. </init-params>
  6769. </input>
  6770. </nds>
  6771. [07/10/12 03:58:29.564]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-itp-FormatConversions%-C.
  6772. [07/10/12 03:58:29.564]:ADTRACE PT: Applying to status #1.
  6773. [07/10/12 03:58:29.564]:ADTRACE PT: Evaluating selection criteria for rule 'streetAddress: Convert CR-LF to LF'.
  6774. [07/10/12 03:58:29.564]:ADTRACE PT: Rule selected.
  6775. [07/10/12 03:58:29.564]:ADTRACE PT: Applying rule 'streetAddress: Convert CR-LF to LF'.
  6776. [07/10/12 03:58:29.564]:ADTRACE PT: Action: do-reformat-op-attr("streetAddress",token-replace-all("\r\n","\r",token-local-variable("current-value"))).
  6777. [07/10/12 03:58:29.564]:ADTRACE PT: Evaluating selection criteria for rule 'logonHours: Convert to Login Allowed Time Map form'.
  6778. [07/10/12 03:58:29.564]:ADTRACE PT: Rule selected.
  6779. [07/10/12 03:58:29.564]:ADTRACE PT: Applying rule 'logonHours: Convert to Login Allowed Time Map form'.
  6780. [07/10/12 03:58:29.564]:ADTRACE PT: Action: do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2eDir($current-value)")).
  6781. [07/10/12 03:58:29.564]:ADTRACE PT: Evaluating selection criteria for rule 'accountExpires: Convert to Identity Vault time format'.
  6782. [07/10/12 03:58:29.564]:ADTRACE PT: Rule selected.
  6783. [07/10/12 03:58:29.564]:ADTRACE PT: Applying rule 'accountExpires: Convert to Identity Vault time format'.
  6784. [07/10/12 03:58:29.564]:ADTRACE PT: Action: do-reformat-op-attr("accountExpires",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
  6785. [07/10/12 03:58:29.564]:ADTRACE PT: Evaluating selection criteria for rule 'lockoutTime: Convert to Identity Vault time format'.
  6786. [07/10/12 03:58:29.564]:ADTRACE PT: Rule selected.
  6787. [07/10/12 03:58:29.564]:ADTRACE PT: Applying rule 'lockoutTime: Convert to Identity Vault time format'.
  6788. [07/10/12 03:58:29.564]:ADTRACE PT: Action: do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
  6789. [07/10/12 03:58:29.564]:ADTRACE PT: Applying to init-params #2.
  6790. [07/10/12 03:58:29.564]:ADTRACE PT: Evaluating selection criteria for rule 'streetAddress: Convert CR-LF to LF'.
  6791. [07/10/12 03:58:29.564]:ADTRACE PT: Rule selected.
  6792. [07/10/12 03:58:29.564]:ADTRACE PT: Applying rule 'streetAddress: Convert CR-LF to LF'.
  6793. [07/10/12 03:58:29.564]:ADTRACE PT: Action: do-reformat-op-attr("streetAddress",token-replace-all("\r\n","\r",token-local-variable("current-value"))).
  6794. [07/10/12 03:58:29.564]:ADTRACE PT: Evaluating selection criteria for rule 'logonHours: Convert to Login Allowed Time Map form'.
  6795. [07/10/12 03:58:29.564]:ADTRACE PT: Rule selected.
  6796. [07/10/12 03:58:29.564]:ADTRACE PT: Applying rule 'logonHours: Convert to Login Allowed Time Map form'.
  6797. [07/10/12 03:58:29.564]:ADTRACE PT: Action: do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2eDir($current-value)")).
  6798. [07/10/12 03:58:29.564]:ADTRACE PT: Evaluating selection criteria for rule 'accountExpires: Convert to Identity Vault time format'.
  6799. [07/10/12 03:58:29.564]:ADTRACE PT: Rule selected.
  6800. [07/10/12 03:58:29.564]:ADTRACE PT: Applying rule 'accountExpires: Convert to Identity Vault time format'.
  6801. [07/10/12 03:58:29.564]:ADTRACE PT: Action: do-reformat-op-attr("accountExpires",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
  6802. [07/10/12 03:58:29.564]:ADTRACE PT: Evaluating selection criteria for rule 'lockoutTime: Convert to Identity Vault time format'.
  6803. [07/10/12 03:58:29.564]:ADTRACE PT: Rule selected.
  6804. [07/10/12 03:58:29.564]:ADTRACE PT: Applying rule 'lockoutTime: Convert to Identity Vault time format'.
  6805. [07/10/12 03:58:29.564]:ADTRACE PT: Action: do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
  6806. [07/10/12 03:58:29.579]:ADTRACE PT:Policy returned:
  6807. [07/10/12 03:58:29.579]:ADTRACE PT:
  6808. <nds dtdversion="3.5" ndsversion="8.x" remote-interface="yes">
  6809. <input>
  6810. <status event-id="report status" level="success">Remote driver successfully started.</status>
  6811. <init-params event-id="write state">
  6812. <publisher-state>
  6813. <cookie>TVNEUwMAAADNMm2Sil7NAQAAAAAAAAAAKAAAAL+0AAAAAAAAAAAAAAAAAAC/tAAAAAAAAG324OqoH71EtU0ZVbvRPtIBAAAAAAAAAAEAAAAAAAAAbfbg6qgfvUS1TRlVu9E+0r+0AAAAAAAA</cookie>
  6814. </publisher-state>
  6815. </init-params>
  6816. </input>
  6817. </nds>
  6818. [07/10/12 03:58:29.579]:ADTRACE PT:Applying policy: %+C%14CNOVLDATACOLL-itp-DataCollectionQuerySupport%-C.
  6819. [07/10/12 03:58:29.579]:ADTRACE PT: Applying to status #1.
  6820. [07/10/12 03:58:29.579]:ADTRACE PT: Evaluating selection criteria for rule 'Rename @association-ref to @association and change @type from "dn" to "{dn}"'.
  6821. [07/10/12 03:58:29.579]:ADTRACE PT: (if-operation equal "instance") = FALSE.
  6822. [07/10/12 03:58:29.579]:ADTRACE PT: Rule rejected.
  6823. [07/10/12 03:58:29.579]:ADTRACE PT: Applying to init-params #2.
  6824. [07/10/12 03:58:29.579]:ADTRACE PT: Evaluating selection criteria for rule 'Rename @association-ref to @association and change @type from "dn" to "{dn}"'.
  6825. [07/10/12 03:58:29.579]:ADTRACE PT: (if-operation equal "instance") = FALSE.
  6826. [07/10/12 03:58:29.579]:ADTRACE PT: Rule rejected.
  6827. [07/10/12 03:58:29.579]:ADTRACE PT:Policy returned:
  6828. [07/10/12 03:58:29.579]:ADTRACE PT:
  6829. <nds dtdversion="3.5" ndsversion="8.x" remote-interface="yes">
  6830. <input>
  6831. <status event-id="report status" level="success">Remote driver successfully started.</status>
  6832. <init-params event-id="write state">
  6833. <publisher-state>
  6834. <cookie>TVNEUwMAAADNMm2Sil7NAQAAAAAAAAAAKAAAAL+0AAAAAAAAAAAAAAAAAAC/tAAAAAAAAG324OqoH71EtU0ZVbvRPtIBAAAAAAAAAAEAAAAAAAAAbfbg6qgfvUS1TRlVu9E+0r+0AAAAAAAA</cookie>
  6835. </publisher-state>
  6836. </init-params>
  6837. </input>
  6838. </nds>
  6839. [07/10/12 03:58:29.579]:ADTRACE PT:Applying policy: %+C%14CNOVLADENTEX-itp-EntitlementsImpl%-C.
  6840. [07/10/12 03:58:29.579]:ADTRACE PT: Applying to status #1.
  6841. [07/10/12 03:58:29.579]:ADTRACE PT: Evaluating selection criteria for rule 'Intercept ADDomain (tagged identity query) query response'.
  6842. [07/10/12 03:58:29.579]:ADTRACE PT: (if-operation equal "instance") = FALSE.
  6843. [07/10/12 03:58:29.579]:ADTRACE PT: Rule rejected.
  6844. [07/10/12 03:58:29.579]:ADTRACE PT: Evaluating selection criteria for rule 'Intercept ADDomain (tagged identity query) query status'.
  6845. [07/10/12 03:58:29.579]:ADTRACE PT: (if-xpath true "../status[@event-id='query-driver-ident']/operation-data/@UserAccountEntitlementQuery") = FALSE.
  6846. [07/10/12 03:58:29.579]:ADTRACE PT: Rule rejected.
  6847. [07/10/12 03:58:29.579]:ADTRACE PT: Evaluating selection criteria for rule 'Check target of add-association for group membership entitlements'.
  6848. [07/10/12 03:58:29.579]:ADTRACE PT: (if-global-variable 'drv.entitlement.Group' equal "true") = TRUE.
  6849. [07/10/12 03:58:29.579]:ADTRACE PT: (if-operation equal "add-association") = FALSE.
  6850. [07/10/12 03:58:29.579]:ADTRACE PT: Rule rejected.
  6851. [07/10/12 03:58:29.579]:ADTRACE PT: Evaluating selection criteria for rule 'Check target of add-association for Exchange mailbox entitlements'.
  6852. [07/10/12 03:58:29.579]:ADTRACE PT: (if-global-variable 'drv.exchMailboxMethod' equal "entitlement") = FALSE.
  6853. [07/10/12 03:58:29.579]:ADTRACE PT: Rule rejected.
  6854. [07/10/12 03:58:29.579]:ADTRACE PT: Applying to init-params #2.
  6855. [07/10/12 03:58:29.579]:ADTRACE PT: Evaluating selection criteria for rule 'Intercept ADDomain (tagged identity query) query response'.
  6856. [07/10/12 03:58:29.579]:ADTRACE PT: (if-operation equal "instance") = FALSE.
  6857. [07/10/12 03:58:29.579]:ADTRACE PT: Rule rejected.
  6858. [07/10/12 03:58:29.579]:ADTRACE PT: Evaluating selection criteria for rule 'Intercept ADDomain (tagged identity query) query status'.
  6859. [07/10/12 03:58:29.579]:ADTRACE PT: (if-xpath true "../status[@event-id='query-driver-ident']/operation-data/@UserAccountEntitlementQuery") = FALSE.
  6860. [07/10/12 03:58:29.579]:ADTRACE PT: Rule rejected.
  6861. [07/10/12 03:58:29.579]:ADTRACE PT: Evaluating selection criteria for rule 'Check target of add-association for group membership entitlements'.
  6862. [07/10/12 03:58:29.579]:ADTRACE PT: (if-global-variable 'drv.entitlement.Group' equal "true") = TRUE.
  6863. [07/10/12 03:58:29.579]:ADTRACE PT: (if-operation equal "add-association") = FALSE.
  6864. [07/10/12 03:58:29.579]:ADTRACE PT: Rule rejected.
  6865. [07/10/12 03:58:29.579]:ADTRACE PT: Evaluating selection criteria for rule 'Check target of add-association for Exchange mailbox entitlements'.
  6866. [07/10/12 03:58:29.579]:ADTRACE PT: (if-global-variable 'drv.exchMailboxMethod' equal "entitlement") = FALSE.
  6867. [07/10/12 03:58:29.579]:ADTRACE PT: Rule rejected.
  6868. [07/10/12 03:58:29.579]:ADTRACE PT:Policy returned:
  6869. [07/10/12 03:58:29.595]:ADTRACE PT:
  6870. <nds dtdversion="3.5" ndsversion="8.x" remote-interface="yes">
  6871. <input>
  6872. <status event-id="report status" level="success">Remote driver successfully started.</status>
  6873. <init-params event-id="write state">
  6874. <publisher-state>
  6875. <cookie>TVNEUwMAAADNMm2Sil7NAQAAAAAAAAAAKAAAAL+0AAAAAAAAAAAAAAAAAAC/tAAAAAAAAG324OqoH71EtU0ZVbvRPtIBAAAAAAAAAAEAAAAAAAAAbfbg6qgfvUS1TRlVu9E+0r+0AAAAAAAA</cookie>
  6876. </publisher-state>
  6877. </init-params>
  6878. </input>
  6879. </nds>
  6880. [07/10/12 03:58:29.595]:ADTRACE PT:Applying policy: %+C%14CNOVLPWDSYNC-itp-EmailOnFailedPwdSub%-C.
  6881. [07/10/12 03:58:29.595]:ADTRACE PT: Applying to status #1.
  6882. [07/10/12 03:58:29.595]:ADTRACE PT: Evaluating selection criteria for rule 'Send e-mail on a failure when subscribing to passwords'.
  6883. [07/10/12 03:58:29.595]:ADTRACE PT: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  6884. [07/10/12 03:58:29.595]:ADTRACE PT: (if-operation equal "status") = TRUE.
  6885. [07/10/12 03:58:29.595]:ADTRACE PT: (if-xpath true "self::status[@level != 'success'][text() != '']/operation-data/password-subscribe-status/association[text() != '']") = FALSE.
  6886. [07/10/12 03:58:29.595]:ADTRACE PT: Rule rejected.
  6887. [07/10/12 03:58:29.595]:ADTRACE PT: Evaluating selection criteria for rule 'Send e-mail on failure to reset connected system password using the Identity Vault password'.
  6888. [07/10/12 03:58:29.595]:ADTRACE PT: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  6889. [07/10/12 03:58:29.595]:ADTRACE PT: (if-operation equal "status") = TRUE.
  6890. [07/10/12 03:58:29.595]:ADTRACE PT: (if-xpath true "self::status[@level != 'success']/operation-data/password-reset-status") = FALSE.
  6891. [07/10/12 03:58:29.595]:ADTRACE PT: Rule rejected.
  6892. [07/10/12 03:58:29.595]:ADTRACE PT: Applying to init-params #2.
  6893. [07/10/12 03:58:29.595]:ADTRACE PT: Evaluating selection criteria for rule 'Send e-mail on a failure when subscribing to passwords'.
  6894. [07/10/12 03:58:29.595]:ADTRACE PT: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  6895. [07/10/12 03:58:29.595]:ADTRACE PT: (if-operation equal "status") = FALSE.
  6896. [07/10/12 03:58:29.595]:ADTRACE PT: Rule rejected.
  6897. [07/10/12 03:58:29.595]:ADTRACE PT: Evaluating selection criteria for rule 'Send e-mail on failure to reset connected system password using the Identity Vault password'.
  6898. [07/10/12 03:58:29.595]:ADTRACE PT: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  6899. [07/10/12 03:58:29.595]:ADTRACE PT: (if-operation equal "status") = FALSE.
  6900. [07/10/12 03:58:29.595]:ADTRACE PT: Rule rejected.
  6901. [07/10/12 03:58:29.595]:ADTRACE PT:Policy returned:
  6902. [07/10/12 03:58:29.595]:ADTRACE PT:
  6903. <nds dtdversion="3.5" ndsversion="8.x" remote-interface="yes">
  6904. <input>
  6905. <status event-id="report status" level="success">Remote driver successfully started.</status>
  6906. <init-params event-id="write state">
  6907. <publisher-state>
  6908. <cookie>TVNEUwMAAADNMm2Sil7NAQAAAAAAAAAAKAAAAL+0AAAAAAAAAAAAAAAAAAC/tAAAAAAAAG324OqoH71EtU0ZVbvRPtIBAAAAAAAAAAEAAAAAAAAAbfbg6qgfvUS1TRlVu9E+0r+0AAAAAAAA</cookie>
  6909. </publisher-state>
  6910. </init-params>
  6911. </input>
  6912. </nds>
  6913. [07/10/12 03:58:29.595]:ADTRACE PT:Applying schema mapping policies to input.
  6914. [07/10/12 03:58:29.595]:ADTRACE PT:Applying policy: %+C%14CNOVLDATACOLL-smp-SkipSchemaMapping%-C.
  6915. [07/10/12 03:58:29.595]:ADTRACE PT: Applying to status #1.
  6916. [07/10/12 03:58:29.595]:ADTRACE PT: Evaluating selection criteria for rule 'skip'.
  6917. [07/10/12 03:58:29.595]:ADTRACE PT: (if-operation equal "instance") = FALSE.
  6918. [07/10/12 03:58:29.595]:ADTRACE PT: Rule rejected.
  6919. [07/10/12 03:58:29.595]:ADTRACE PT: Evaluating selection criteria for rule 'restore'.
  6920. [07/10/12 03:58:29.595]:ADTRACE PT: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  6921. [07/10/12 03:58:29.595]:ADTRACE PT: Rule rejected.
  6922. [07/10/12 03:58:29.595]:ADTRACE PT: Applying to init-params #2.
  6923. [07/10/12 03:58:29.595]:ADTRACE PT: Evaluating selection criteria for rule 'skip'.
  6924. [07/10/12 03:58:29.595]:ADTRACE PT: (if-operation equal "instance") = FALSE.
  6925. [07/10/12 03:58:29.595]:ADTRACE PT: Rule rejected.
  6926. [07/10/12 03:58:29.595]:ADTRACE PT: Evaluating selection criteria for rule 'restore'.
  6927. [07/10/12 03:58:29.595]:ADTRACE PT: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  6928. [07/10/12 03:58:29.595]:ADTRACE PT: Rule rejected.
  6929. [07/10/12 03:58:29.595]:ADTRACE PT:Policy returned:
  6930. [07/10/12 03:58:29.595]:ADTRACE PT:
  6931. <nds dtdversion="3.5" ndsversion="8.x" remote-interface="yes">
  6932. <input>
  6933. <status event-id="report status" level="success">Remote driver successfully started.</status>
  6934. <init-params event-id="write state">
  6935. <publisher-state>
  6936. <cookie>TVNEUwMAAADNMm2Sil7NAQAAAAAAAAAAKAAAAL+0AAAAAAAAAAAAAAAAAAC/tAAAAAAAAG324OqoH71EtU0ZVbvRPtIBAAAAAAAAAAEAAAAAAAAAbfbg6qgfvUS1TRlVu9E+0r+0AAAAAAAA</cookie>
  6937. </publisher-state>
  6938. </init-params>
  6939. </input>
  6940. </nds>
  6941. [07/10/12 03:58:29.611]:ADTRACE PT:Applying policy: %+C%14CNOVLADDCFG-smp%-C.
  6942. [07/10/12 03:58:29.611]:ADTRACE PT:Applying policy: %+C%14CNOVLDATACOLL-smp-SkipSchemaMapping%-C.
  6943. [07/10/12 03:58:29.611]:ADTRACE PT: Applying to status #1.
  6944. [07/10/12 03:58:29.611]:ADTRACE PT: Evaluating selection criteria for rule 'skip'.
  6945. [07/10/12 03:58:29.611]:ADTRACE PT: (if-operation equal "instance") = FALSE.
  6946. [07/10/12 03:58:29.611]:ADTRACE PT: Rule rejected.
  6947. [07/10/12 03:58:29.611]:ADTRACE PT: Evaluating selection criteria for rule 'restore'.
  6948. [07/10/12 03:58:29.611]:ADTRACE PT: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  6949. [07/10/12 03:58:29.611]:ADTRACE PT: Rule rejected.
  6950. [07/10/12 03:58:29.611]:ADTRACE PT: Applying to init-params #2.
  6951. [07/10/12 03:58:29.611]:ADTRACE PT: Evaluating selection criteria for rule 'skip'.
  6952. [07/10/12 03:58:29.611]:ADTRACE PT: (if-operation equal "instance") = FALSE.
  6953. [07/10/12 03:58:29.611]:ADTRACE PT: Rule rejected.
  6954. [07/10/12 03:58:29.611]:ADTRACE PT: Evaluating selection criteria for rule 'restore'.
  6955. [07/10/12 03:58:29.611]:ADTRACE PT: (if-op-property 'restore-attr-names' equal "true") = FALSE.
  6956. [07/10/12 03:58:29.611]:ADTRACE PT: Rule rejected.
  6957. [07/10/12 03:58:29.611]:ADTRACE PT:Policy returned:
  6958. [07/10/12 03:58:29.611]:ADTRACE PT:
  6959. <nds dtdversion="3.5" ndsversion="8.x" remote-interface="yes">
  6960. <input>
  6961. <status event-id="report status" level="success">Remote driver successfully started.</status>
  6962. <init-params event-id="write state">
  6963. <publisher-state>
  6964. <cookie>TVNEUwMAAADNMm2Sil7NAQAAAAAAAAAAKAAAAL+0AAAAAAAAAAAAAAAAAAC/tAAAAAAAAG324OqoH71EtU0ZVbvRPtIBAAAAAAAAAAEAAAAAAAAAbfbg6qgfvUS1TRlVu9E+0r+0AAAAAAAA</cookie>
  6965. </publisher-state>
  6966. </init-params>
  6967. </input>
  6968. </nds>
  6969. [07/10/12 03:58:29.611]:ADTRACE PT:Resolving association references.
  6970. [07/10/12 03:58:29.611]:ADTRACE PT:Reading XML attribute vnd.nds.stream://xxxxxIDM/xxxxx/IDMDriverGroup/Driver+Set/Active+Directory+Driver#DirXML-DriverStorage.
  6971. [07/10/12 03:58:29.611]:ADTRACE PT:Writing driver state.
  6972. [07/10/12 03:58:29.611]:ADTRACE PT:Writing XML attribute vnd.nds.stream://xxxxxIDM/xxxxx/IDMDriverGroup/Driver+Set/Active+Directory+Driver#DirXML-DriverStorage.
  6973. [07/10/12 03:58:29.736]:ADTRACE PT:Applying event transformation policies.
  6974. [07/10/12 03:58:29.736]:ADTRACE PT:Applying policy: %+C%14CNOVLADENTEX-pub-etp-EntitlementsImpl%-C.
  6975. [07/10/12 03:58:29.736]:ADTRACE PT: Applying to status #1.
  6976. [07/10/12 03:58:29.736]:ADTRACE PT: Evaluating selection criteria for rule 'Disallow user account delete when using entitlements'.
  6977. [07/10/12 03:58:29.736]:ADTRACE PT: (if-operation equal "delete") = FALSE.
  6978. [07/10/12 03:58:29.736]:ADTRACE PT: Rule rejected.
  6979. [07/10/12 03:58:29.736]:ADTRACE PT: Evaluating selection criteria for rule 'Strip Login Disabled from operation (Disable Option)'.
  6980. [07/10/12 03:58:29.736]:ADTRACE PT: (if-global-variable 'drv.entitlement.UserAccount' equal "true") = TRUE.
  6981. [07/10/12 03:58:29.736]:ADTRACE PT: (if-global-variable 'drv.entitlement.remove' equal "disable") = TRUE.
  6982. [07/10/12 03:58:29.736]:ADTRACE PT: (if-class-name equal "User") = FALSE.
  6983. [07/10/12 03:58:29.736]:ADTRACE PT: Rule rejected.
  6984. [07/10/12 03:58:29.736]:ADTRACE PT: Applying to init-params #2.
  6985. [07/10/12 03:58:29.736]:ADTRACE PT: Evaluating selection criteria for rule 'Disallow user account delete when using entitlements'.
  6986. [07/10/12 03:58:29.736]:ADTRACE PT: (if-operation equal "delete") = FALSE.
  6987. [07/10/12 03:58:29.736]:ADTRACE PT: Rule rejected.
  6988. [07/10/12 03:58:29.736]:ADTRACE PT: Evaluating selection criteria for rule 'Strip Login Disabled from operation (Disable Option)'.
  6989. [07/10/12 03:58:29.736]:ADTRACE PT: (if-global-variable 'drv.entitlement.UserAccount' equal "true") = TRUE.
  6990. [07/10/12 03:58:29.736]:ADTRACE PT: (if-global-variable 'drv.entitlement.remove' equal "disable") = TRUE.
  6991. [07/10/12 03:58:29.736]:ADTRACE PT: (if-class-name equal "User") = FALSE.
  6992. [07/10/12 03:58:29.736]:ADTRACE PT: Rule rejected.
  6993. [07/10/12 03:58:29.736]:ADTRACE PT:Policy returned:
  6994. [07/10/12 03:58:29.736]:ADTRACE PT:
  6995. <nds dtdversion="3.5" ndsversion="8.x" remote-interface="yes">
  6996. <input>
  6997. <status event-id="report status" level="success">Remote driver successfully started.</status>
  6998. <init-params event-id="write state">
  6999. <publisher-state>
  7000. <cookie>TVNEUwMAAADNMm2Sil7NAQAAAAAAAAAAKAAAAL+0AAAAAAAAAAAAAAAAAAC/tAAAAAAAAG324OqoH71EtU0ZVbvRPtIBAAAAAAAAAAEAAAAAAAAAbfbg6qgfvUS1TRlVu9E+0r+0AAAAAAAA</cookie>
  7001. </publisher-state>
  7002. </init-params>
  7003. </input>
  7004. </nds>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!