Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- [12/18/2014 14:20:46.546] ConnecteurAD ST: Evaluating selection criteria for rule 'lockedByIntruder: Disable Locked By Intruder'.
- [12/18/2014 14:20:46.546] ConnecteurAD ST: (if-operation equal "modify") = FALSE.
- [12/18/2014 14:20:46.547] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.547] ConnecteurAD ST: Evaluating selection criteria for rule 'lockoutTime: Convert to Identity Vault time format'.
- [12/18/2014 14:20:46.547] ConnecteurAD ST: Rule selected.
- [12/18/2014 14:20:46.547] ConnecteurAD ST: Applying rule 'lockoutTime: Convert to Identity Vault time format'.
- [12/18/2014 14:20:46.547] ConnecteurAD ST: Action: do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
- [12/18/2014 14:20:46.547] ConnecteurAD ST: Policy returned:
- [12/18/2014 14:20:46.547] ConnecteurAD ST:
- <nds dtdversion="1.1" ndsversion="8.7">
- <source>
- <product asn1id="" build="20120330_120000" instance="\IDV\system\DriverSet\ConnecteurAD" version="4.0.0.0">AD</product>
- <contact>Novell, Inc.</contact>
- </source>
- <output>
- <instance class-name="user" event-id="0" src-dn="CN=user Test (2981),OU=Utilisateurs_Actifs,OU=MYDOMAIN,DC=nim2012,DC=intra">
- <association>4bbd396e31166841a908b7970c82ae97</association>
- </instance>
- <status event-id="0" level="success"/>
- </output>
- </nds>
- [12/18/2014 14:20:46.547] ConnecteurAD ST: Applying policy: NOVLDATACOLL-itp-DataCollectionQuerySupport.
- [12/18/2014 14:20:46.547] ConnecteurAD ST: Applying to instance #1.
- [12/18/2014 14:20:46.547] ConnecteurAD ST: Evaluating selection criteria for rule 'Rename @association-ref to @association and change @type from "dn" to "{dn}"'.
- [12/18/2014 14:20:46.547] ConnecteurAD ST: (if-operation equal "instance") = TRUE.
- [12/18/2014 14:20:46.547] ConnecteurAD ST: (if-op-property 'data-collection-query' equal "true") = FALSE.
- [12/18/2014 14:20:46.547] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.547] ConnecteurAD ST: Applying to status #2.
- [12/18/2014 14:20:46.547] ConnecteurAD ST: Evaluating selection criteria for rule 'Rename @association-ref to @association and change @type from "dn" to "{dn}"'.
- [12/18/2014 14:20:46.547] ConnecteurAD ST: (if-operation equal "instance") = FALSE.
- [12/18/2014 14:20:46.547] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.547] ConnecteurAD ST: Policy returned:
- [12/18/2014 14:20:46.547] ConnecteurAD ST:
- <nds dtdversion="1.1" ndsversion="8.7">
- <source>
- <product asn1id="" build="20120330_120000" instance="\IDV\system\DriverSet\ConnecteurAD" version="4.0.0.0">AD</product>
- <contact>Novell, Inc.</contact>
- </source>
- <output>
- <instance class-name="user" event-id="0" src-dn="CN=user Test (2981),OU=Utilisateurs_Actifs,OU=MYDOMAIN,DC=nim2012,DC=intra">
- <association>4bbd396e31166841a908b7970c82ae97</association>
- </instance>
- <status event-id="0" level="success"/>
- </output>
- </nds>
- [12/18/2014 14:20:46.547] ConnecteurAD ST: Applying policy: NOVLPWDSYNC-itp-EmailOnFailedPwdSub.
- [12/18/2014 14:20:46.547] ConnecteurAD ST: Applying to instance #1.
- [12/18/2014 14:20:46.547] ConnecteurAD ST: Evaluating selection criteria for rule 'Send e-mail on a failure when subscribing to passwords'.
- [12/18/2014 14:20:46.547] ConnecteurAD ST: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = FALSE.
- [12/18/2014 14:20:46.547] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.547] ConnecteurAD ST: Evaluating selection criteria for rule 'Send e-mail on failure to reset connected system password using the Identity Vault password'.
- [12/18/2014 14:20:46.547] ConnecteurAD ST: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = FALSE.
- [12/18/2014 14:20:46.547] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.547] ConnecteurAD ST: Applying to status #2.
- [12/18/2014 14:20:46.547] ConnecteurAD ST: Evaluating selection criteria for rule 'Send e-mail on a failure when subscribing to passwords'.
- [12/18/2014 14:20:46.547] ConnecteurAD ST: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = FALSE.
- [12/18/2014 14:20:46.547] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.547] ConnecteurAD ST: Evaluating selection criteria for rule 'Send e-mail on failure to reset connected system password using the Identity Vault password'.
- [12/18/2014 14:20:46.547] ConnecteurAD ST: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = FALSE.
- [12/18/2014 14:20:46.547] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.547] ConnecteurAD ST: Policy returned:
- [12/18/2014 14:20:46.547] ConnecteurAD ST:
- <nds dtdversion="1.1" ndsversion="8.7">
- <source>
- <product asn1id="" build="20120330_120000" instance="\IDV\system\DriverSet\ConnecteurAD" version="4.0.0.0">AD</product>
- <contact>Novell, Inc.</contact>
- </source>
- <output>
- <instance class-name="user" event-id="0" src-dn="CN=user Test (2981),OU=Utilisateurs_Actifs,OU=MYDOMAIN,DC=nim2012,DC=intra">
- <association>4bbd396e31166841a908b7970c82ae97</association>
- </instance>
- <status event-id="0" level="success"/>
- </output>
- </nds>
- [12/18/2014 14:20:46.547] ConnecteurAD ST: Applying policy: ADMigration-pub-flagControl.
- [12/18/2014 14:20:46.547] ConnecteurAD ST: Applying to instance #1.
- [12/18/2014 14:20:46.548] ConnecteurAD ST: Evaluating selection criteria for rule 'users AD flag veto'.
- [12/18/2014 14:20:46.548] ConnecteurAD ST: (if-class-name equal "User") = TRUE.
- [12/18/2014 14:20:46.548] ConnecteurAD ST: Query from policy
- [12/18/2014 14:20:46.548] ConnecteurAD ST:
- <nds dtdversion="4.0" ndsversion="8.x">
- <source>
- <product edition="Standard" version="4.0.1.0">DirXML</product>
- <contact>Novell, Inc.</contact>
- </source>
- <input>
- <query class-name="user" dest-dn="CN=user Test (2981),OU=Utilisateurs_Actifs,OU=MYDOMAIN,DC=nim2012,DC=intra" scope="entry">
- <association>4bbd396e31166841a908b7970c82ae97</association>
- <read-attr attr-name="adminDescription"/>
- </query>
- </input>
- </nds>
- [12/18/2014 14:20:46.548] ConnecteurAD ST: Submitting document to subscriber shim:
- [12/18/2014 14:20:46.548] ConnecteurAD ST:
- <nds dtdversion="4.0" ndsversion="8.x">
- <source>
- <product edition="Standard" version="4.0.1.0">DirXML</product>
- <contact>Novell, Inc.</contact>
- </source>
- <input>
- <query class-name="user" dest-dn="CN=user Test (2981),OU=Utilisateurs_Actifs,OU=MYDOMAIN,DC=nim2012,DC=intra" event-id="0" scope="entry">
- <association>4bbd396e31166841a908b7970c82ae97</association>
- <read-attr attr-name="adminDescription"/>
- </query>
- </input>
- </nds>
- [12/18/2014 14:20:46.548] ConnecteurAD ST: Remote Interface Driver: Sending...
- [12/18/2014 14:20:46.548] ConnecteurAD ST:
- <nds dtdversion="4.0" ndsversion="8.x">
- <source>
- <product edition="Standard" version="4.0.1.0">DirXML</product>
- <contact>Novell, Inc.</contact>
- </source>
- <input>
- <query class-name="user" dest-dn="CN=user Test (2981),OU=Utilisateurs_Actifs,OU=MYDOMAIN,DC=nim2012,DC=intra" event-id="0" scope="entry">
- <association>4bbd396e31166841a908b7970c82ae97</association>
- <read-attr attr-name="adminDescription"/>
- </query>
- </input>
- </nds>
- [12/18/2014 14:20:46.548] ConnecteurAD ST: Remote Interface Driver: Document sent.
- [12/18/2014 14:20:46.621] ConnecteurAD :Remote Interface Driver: Received.
- [12/18/2014 14:20:46.621] ConnecteurAD :
- <nds dtdversion="1.1" ndsversion="8.7">
- <source>
- <product asn1id="" build="20120330_120000" instance="\IDV\system\DriverSet\ConnecteurAD" version="4.0.0.0">AD</product>
- <contact>Novell, Inc.</contact>
- </source>
- <output>
- <instance class-name="user" event-id="0" src-dn="CN=user Test (2981),OU=Utilisateurs_Actifs,OU=MYDOMAIN,DC=nim2012,DC=intra">
- <association>4bbd396e31166841a908b7970c82ae97</association>
- <attr attr-name="adminDescription">
- <value naming="true" type="string">nonmigrated</value>
- </attr>
- </instance>
- <status event-id="0" level="success"/>
- </output>
- </nds>
- [12/18/2014 14:20:46.621] ConnecteurAD :Remote Interface Driver: Received document for subscriber channel
- [12/18/2014 14:20:46.621] ConnecteurAD :Remote Interface Driver: Waiting for receive...
- [12/18/2014 14:20:46.621] ConnecteurAD ST: SubscriptionShim.execute() returned:
- [12/18/2014 14:20:46.621] ConnecteurAD ST:
- <nds dtdversion="1.1" ndsversion="8.7">
- <source>
- <product asn1id="" build="20120330_120000" instance="\IDV\system\DriverSet\ConnecteurAD" version="4.0.0.0">AD</product>
- <contact>Novell, Inc.</contact>
- </source>
- <output>
- <instance class-name="user" event-id="0" src-dn="CN=user Test (2981),OU=Utilisateurs_Actifs,OU=MYDOMAIN,DC=nim2012,DC=intra">
- <association>4bbd396e31166841a908b7970c82ae97</association>
- <attr attr-name="adminDescription">
- <value naming="true" type="string">nonmigrated</value>
- </attr>
- </instance>
- <status event-id="0" level="success"/>
- </output>
- </nds>
- [12/18/2014 14:20:46.621] ConnecteurAD ST: Query from policy result
- [12/18/2014 14:20:46.621] ConnecteurAD ST:
- <nds dtdversion="1.1" ndsversion="8.7">
- <source>
- <product asn1id="" build="20120330_120000" instance="\IDV\system\DriverSet\ConnecteurAD" version="4.0.0.0">AD</product>
- <contact>Novell, Inc.</contact>
- </source>
- <output>
- <instance class-name="user" event-id="0" src-dn="CN=user Test (2981),OU=Utilisateurs_Actifs,OU=MYDOMAIN,DC=nim2012,DC=intra">
- <association>4bbd396e31166841a908b7970c82ae97</association>
- <attr attr-name="adminDescription">
- <value naming="true" type="string">nonmigrated</value>
- </attr>
- </instance>
- <status event-id="0" level="success"/>
- </output>
- </nds>
- [12/18/2014 14:20:46.622] ConnecteurAD ST: (if-attr 'adminDescription' equal "nonmigrated") = TRUE.
- [12/18/2014 14:20:46.622] ConnecteurAD ST: Rule selected.
- [12/18/2014 14:20:46.622] ConnecteurAD ST: Applying rule 'users AD flag veto'.
- [12/18/2014 14:20:46.622] ConnecteurAD ST: Action: do-veto().
- [12/18/2014 14:20:46.622] ConnecteurAD ST: Applying to status #2.
- [12/18/2014 14:20:46.622] ConnecteurAD ST: Evaluating selection criteria for rule 'users AD flag veto'.
- [12/18/2014 14:20:46.622] ConnecteurAD ST: (if-class-name equal "User") = FALSE.
- [12/18/2014 14:20:46.622] ConnecteurAD ST: (if-class-name equal "user") = FALSE.
- [12/18/2014 14:20:46.622] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.622] ConnecteurAD ST: Policy returned:
- [12/18/2014 14:20:46.622] ConnecteurAD ST:
- <nds dtdversion="1.1" ndsversion="8.7">
- <source>
- <product asn1id="" build="20120330_120000" instance="\IDV\system\DriverSet\ConnecteurAD" version="4.0.0.0">AD</product>
- <contact>Novell, Inc.</contact>
- </source>
- <output>
- <status event-id="0" level="success"/>
- </output>
- </nds>
- [12/18/2014 14:20:46.622] ConnecteurAD ST: Applying schema mapping policies to input.
- [12/18/2014 14:20:46.622] ConnecteurAD ST: Applying policy: NOVLDATACOLL-smp-SkipSchemaMapping.
- [12/18/2014 14:20:46.622] ConnecteurAD ST: Applying to status #1.
- [12/18/2014 14:20:46.622] ConnecteurAD ST: Evaluating selection criteria for rule 'skip'.
- [12/18/2014 14:20:46.622] ConnecteurAD ST: (if-operation equal "instance") = FALSE.
- [12/18/2014 14:20:46.629] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.629] ConnecteurAD ST: Evaluating selection criteria for rule 'restore'.
- [12/18/2014 14:20:46.629] ConnecteurAD ST: (if-op-property 'restore-attr-names' equal "true") = FALSE.
- [12/18/2014 14:20:46.629] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.629] ConnecteurAD ST: Policy returned:
- [12/18/2014 14:20:46.629] ConnecteurAD ST:
- <nds dtdversion="1.1" ndsversion="8.7">
- <source>
- <product asn1id="" build="20120330_120000" instance="\IDV\system\DriverSet\ConnecteurAD" version="4.0.0.0">AD</product>
- <contact>Novell, Inc.</contact>
- </source>
- <output>
- <status event-id="0" level="success"/>
- </output>
- </nds>
- [12/18/2014 14:20:46.629] ConnecteurAD ST: Applying policy: NOVLADDCFG-smp.
- [12/18/2014 14:20:46.629] ConnecteurAD ST: Applying policy: NOVLDATACOLL-smp-SkipSchemaMapping.
- [12/18/2014 14:20:46.629] ConnecteurAD ST: Applying to status #1.
- [12/18/2014 14:20:46.629] ConnecteurAD ST: Evaluating selection criteria for rule 'skip'.
- [12/18/2014 14:20:46.629] ConnecteurAD ST: (if-operation equal "instance") = FALSE.
- [12/18/2014 14:20:46.629] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.629] ConnecteurAD ST: Evaluating selection criteria for rule 'restore'.
- [12/18/2014 14:20:46.629] ConnecteurAD ST: (if-op-property 'restore-attr-names' equal "true") = FALSE.
- [12/18/2014 14:20:46.629] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.629] ConnecteurAD ST: Policy returned:
- [12/18/2014 14:20:46.629] ConnecteurAD ST:
- <nds dtdversion="1.1" ndsversion="8.7">
- <source>
- <product asn1id="" build="20120330_120000" instance="\IDV\system\DriverSet\ConnecteurAD" version="4.0.0.0">AD</product>
- <contact>Novell, Inc.</contact>
- </source>
- <output>
- <status event-id="0" level="success"/>
- </output>
- </nds>
- [12/18/2014 14:20:46.629] ConnecteurAD ST: Resolving association references.
- [12/18/2014 14:20:46.629] ConnecteurAD ST: Query from policy result
- [12/18/2014 14:20:46.629] ConnecteurAD ST:
- <nds dtdversion="1.1" ndsversion="8.7">
- <source>
- <product asn1id="" build="20120330_120000" instance="\IDV\system\DriverSet\ConnecteurAD" version="4.0.0.0">AD</product>
- <contact>Novell, Inc.</contact>
- </source>
- <output>
- <status event-id="0" level="success"/>
- </output>
- </nds>
- [12/18/2014 14:20:46.629] ConnecteurAD ST: No matches found.
- [12/18/2014 14:20:46.629] ConnecteurAD ST: Evaluating selection criteria for rule 'match users based on NT logon name'.
- [12/18/2014 14:20:46.629] ConnecteurAD ST: (if-class-name equal "User") = TRUE.
- [12/18/2014 14:20:46.629] ConnecteurAD ST: (if-global-variable 'LogonNameMap' equal "true") = TRUE.
- [12/18/2014 14:20:46.629] ConnecteurAD ST: Rule selected.
- [12/18/2014 14:20:46.629] ConnecteurAD ST: Applying rule 'match users based on NT logon name'.
- [12/18/2014 14:20:46.629] ConnecteurAD ST: Action: do-find-matching-object(scope="subtree",arg-dn(token-global-variable("drv.user.container")),arg-match-attr("CN",token-replace-all("[^a-zA-Z0-9\x21\x23-\x29\x2d\x2e\x40\x5e-\x60\x7b\x7d\x7e\xc0-\xf6\xf8-\xff\u0410-\u044f]","",token-src-name()))).
- [12/18/2014 14:20:46.629] ConnecteurAD ST: arg-dn(token-global-variable("drv.user.container"))
- [12/18/2014 14:20:46.629] ConnecteurAD ST: token-global-variable("drv.user.container")
- [12/18/2014 14:20:46.629] ConnecteurAD ST: Token Value: "OU=Utilisateurs_Actifs,OU=MYDOMAIN,DC=nim2012,DC=intra".
- [12/18/2014 14:20:46.629] ConnecteurAD ST: Arg Value: "OU=Utilisateurs_Actifs,OU=MYDOMAIN,DC=nim2012,DC=intra".
- [12/18/2014 14:20:46.629] ConnecteurAD ST: arg-match-attr("CN",token-replace-all("[^a-zA-Z0-9\x21\x23-\x29\x2d\x2e\x40\x5e-\x60\x7b\x7d\x7e\xc0-\xf6\xf8-\xff\u0410-\u044f]","",token-src-name()))
- [12/18/2014 14:20:46.629] ConnecteurAD ST: arg-string(token-replace-all("[^a-zA-Z0-9\x21\x23-\x29\x2d\x2e\x40\x5e-\x60\x7b\x7d\x7e\xc0-\xf6\xf8-\xff\u0410-\u044f]","",token-src-name()))
- [12/18/2014 14:20:46.629] ConnecteurAD ST: token-replace-all("[^a-zA-Z0-9\x21\x23-\x29\x2d\x2e\x40\x5e-\x60\x7b\x7d\x7e\xc0-\xf6\xf8-\xff\u0410-\u044f]","",token-src-name())
- [12/18/2014 14:20:46.629] ConnecteurAD ST: token-replace-all("[^a-zA-Z0-9\x21\x23-\x29\x2d\x2e\x40\x5e-\x60\x7b\x7d\x7e\xc0-\xf6\xf8-\xff\u0410-\u044f]","",token-src-name())
- [12/18/2014 14:20:46.629] ConnecteurAD ST: token-src-name()
- [12/18/2014 14:20:46.630] ConnecteurAD ST: Token Value: "User Test (2981)".
- [12/18/2014 14:20:46.630] ConnecteurAD ST: Arg Value: "User Test (2981)".
- [12/18/2014 14:20:46.630] ConnecteurAD ST: Token Value: "UserLeLou?r(2981)".
- [12/18/2014 14:20:46.630] ConnecteurAD ST: Arg Value: "UserLeLou?r(2981)".
- [12/18/2014 14:20:46.630] ConnecteurAD ST: Query from policy
- [12/18/2014 14:20:46.630] ConnecteurAD ST:
- <nds dtdversion="4.0" ndsversion="8.x">
- <source>
- <product edition="Standard" version="4.0.1.0">DirXML</product>
- <contact>Novell, Inc.</contact>
- </source>
- <input>
- <query class-name="User" dest-dn="OU=Utilisateurs_Actifs,OU=MYDOMAIN,DC=nim2012,DC=intra" scope="subtree">
- <search-class class-name="User"/>
- <search-attr attr-name="CN">
- <value type="string">UserLeLou?r(2981)</value>
- </search-attr>
- <read-attr/>
- </query>
- </input>
- </nds>
- [12/18/2014 14:20:46.630] ConnecteurAD ST: Fixing up association references.
- [12/18/2014 14:20:46.630] ConnecteurAD ST: Applying schema mapping policies to output.
- [12/18/2014 14:20:46.630] ConnecteurAD ST: Applying policy: NOVLDATACOLL-smp-SkipSchemaMapping.
- [12/18/2014 14:20:46.630] ConnecteurAD ST: Applying to query #1.
- [12/18/2014 14:20:46.630] ConnecteurAD ST: Evaluating selection criteria for rule 'skip'.
- [12/18/2014 14:20:46.630] ConnecteurAD ST: (if-operation equal "instance") = FALSE.
- [12/18/2014 14:20:46.630] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.630] ConnecteurAD ST: Evaluating selection criteria for rule 'restore'.
- [12/18/2014 14:20:46.630] ConnecteurAD ST: (if-op-property 'restore-attr-names' equal "true") = FALSE.
- [12/18/2014 14:20:46.630] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.630] ConnecteurAD ST: Policy returned:
- [12/18/2014 14:20:46.630] ConnecteurAD ST:
- <nds dtdversion="4.0" ndsversion="8.x">
- <source>
- <product edition="Standard" version="4.0.1.0">DirXML</product>
- <contact>Novell, Inc.</contact>
- </source>
- <input>
- <query class-name="User" dest-dn="OU=Utilisateurs_Actifs,OU=MYDOMAIN,DC=nim2012,DC=intra" event-id="0" scope="subtree">
- <search-class class-name="User"/>
- <search-attr attr-name="CN">
- <value type="string">UserLeLou?r(2981)</value>
- </search-attr>
- <read-attr/>
- </query>
- </input>
- </nds>
- [12/18/2014 14:20:46.630] ConnecteurAD ST: Applying policy: NOVLADDCFG-smp.
- [12/18/2014 14:20:46.630] ConnecteurAD ST: Mapping attr-name 'CN' to 'cn'.
- [12/18/2014 14:20:46.630] ConnecteurAD ST: Mapping class-name 'User' to 'user'.
- [12/18/2014 14:20:46.630] ConnecteurAD ST: Mapping class-name 'User' to 'user'.
- [12/18/2014 14:20:46.630] ConnecteurAD ST: Applying policy: NOVLDATACOLL-smp-SkipSchemaMapping.
- [12/18/2014 14:20:46.630] ConnecteurAD ST: Applying to query #1.
- [12/18/2014 14:20:46.630] ConnecteurAD ST: Evaluating selection criteria for rule 'skip'.
- [12/18/2014 14:20:46.630] ConnecteurAD ST: (if-operation equal "instance") = FALSE.
- [12/18/2014 14:20:46.630] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.630] ConnecteurAD ST: Evaluating selection criteria for rule 'restore'.
- [12/18/2014 14:20:46.630] ConnecteurAD ST: (if-op-property 'restore-attr-names' equal "true") = FALSE.
- [12/18/2014 14:20:46.630] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.630] ConnecteurAD ST: Policy returned:
- [12/18/2014 14:20:46.630] ConnecteurAD ST:
- <nds dtdversion="4.0" ndsversion="8.x">
- <source>
- <product edition="Standard" version="4.0.1.0">DirXML</product>
- <contact>Novell, Inc.</contact>
- </source>
- <input>
- <query class-name="user" dest-dn="OU=Utilisateurs_Actifs,OU=MYDOMAIN,DC=nim2012,DC=intra" event-id="0" scope="subtree">
- <search-class class-name="user"/>
- <search-attr attr-name="cn">
- <value type="string">UserLeLou?r(2981)</value>
- </search-attr>
- <read-attr/>
- </query>
- </input>
- </nds>
- [12/18/2014 14:20:46.630] ConnecteurAD ST: Applying output transformation policies.
- [12/18/2014 14:20:46.630] ConnecteurAD ST: Applying policy: NOVLADDCFG-otp-FormatConversions.
- [12/18/2014 14:20:46.630] ConnecteurAD ST: Applying to query #1.
- [12/18/2014 14:20:46.630] ConnecteurAD ST: Evaluating selection criteria for rule 'Street Address: Convert LF to CR-LF'.
- [12/18/2014 14:20:46.630] ConnecteurAD ST: Rule selected.
- [12/18/2014 14:20:46.630] ConnecteurAD ST: Applying rule 'Street Address: Convert LF to CR-LF'.
- [12/18/2014 14:20:46.630] ConnecteurAD ST: Action: do-reformat-op-attr("streetAddress",token-replace-all("[^\r]\n","\r\n",token-local-variable("current-value"))).
- [12/18/2014 14:20:46.630] ConnecteurAD ST: Evaluating selection criteria for rule 'logonHours: Convert to Active Directory form'.
- [12/18/2014 14:20:46.630] ConnecteurAD ST: Rule selected.
- [12/18/2014 14:20:46.630] ConnecteurAD ST: Applying rule 'logonHours: Convert to Active Directory form'.
- [12/18/2014 14:20:46.630] ConnecteurAD ST: Action: do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2ADLenient($current-value)")).
- [12/18/2014 14:20:46.630] ConnecteurAD ST: Evaluating selection criteria for rule 'accountExpires: Convert to Active Directory form'.
- [12/18/2014 14:20:46.630] ConnecteurAD ST: (if-op-attr 'accountExpires' changing) = FALSE.
- [12/18/2014 14:20:46.630] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.630] ConnecteurAD ST: Evaluating selection criteria for rule 'lockoutTime: Convert to Active Directory form'.
- [12/18/2014 14:20:46.630] ConnecteurAD ST: (if-op-attr 'lockoutTime' available) = FALSE.
- [12/18/2014 14:20:46.630] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.630] ConnecteurAD ST: Evaluating selection criteria for rule 'Add: User - convert multi-valued Telephone to single value'.
- [12/18/2014 14:20:46.630] ConnecteurAD ST: (if-operation equal "add") = FALSE.
- [12/18/2014 14:20:46.630] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.630] ConnecteurAD ST: Evaluating selection criteria for rule 'update Active Directory logon name'.
- [12/18/2014 14:20:46.631] ConnecteurAD ST: (if-xpath true "self::status[@level = 'success']/operation-data/windows-2000-logon-name") = FALSE.
- [12/18/2014 14:20:46.631] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.631] ConnecteurAD ST: Policy returned:
- [12/18/2014 14:20:46.631] ConnecteurAD ST:
- <nds dtdversion="4.0" ndsversion="8.x">
- <source>
- <product edition="Standard" version="4.0.1.0">DirXML</product>
- <contact>Novell, Inc.</contact>
- </source>
- <input>
- <query class-name="user" dest-dn="OU=Utilisateurs_Actifs,OU=MYDOMAIN,DC=nim2012,DC=intra" event-id="0" scope="subtree">
- <search-class class-name="user"/>
- <search-attr attr-name="cn">
- <value type="string">UserLeLou?r(2981)</value>
- </search-attr>
- <read-attr/>
- </query>
- </input>
- </nds>
- [12/18/2014 14:20:46.631] ConnecteurAD ST: Applying policy: NOVLADDCFG-otp-ExchangeEntitlementQuery.
- [12/18/2014 14:20:46.631] ConnecteurAD ST: Applying to query #1.
- [12/18/2014 14:20:46.631] ConnecteurAD ST: Evaluating selection criteria for rule 'Add dest-dn to the Exchange Entitlement Query'.
- [12/18/2014 14:20:46.631] ConnecteurAD ST: (if-operation equal "query") = TRUE.
- [12/18/2014 14:20:46.631] ConnecteurAD ST: (if-class-name equal "msExchPrivateMDB") = FALSE.
- [12/18/2014 14:20:46.631] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.631] ConnecteurAD ST: Policy returned:
- [12/18/2014 14:20:46.631] ConnecteurAD ST:
- <nds dtdversion="4.0" ndsversion="8.x">
- <source>
- <product edition="Standard" version="4.0.1.0">DirXML</product>
- <contact>Novell, Inc.</contact>
- </source>
- <input>
- <query class-name="user" dest-dn="OU=Utilisateurs_Actifs,OU=MYDOMAIN,DC=nim2012,DC=intra" event-id="0" scope="subtree">
- <search-class class-name="user"/>
- <search-attr attr-name="cn">
- <value type="string">UserLeLou?r(2981)</value>
- </search-attr>
- <read-attr/>
- </query>
- </input>
- </nds>
- [12/18/2014 14:20:46.631] ConnecteurAD ST: Applying policy: NOVLPWDSYNC-otp-EmailOnFailedPwdPub.
- [12/18/2014 14:20:46.631] ConnecteurAD ST: Applying to query #1.
- [12/18/2014 14:20:46.631] ConnecteurAD ST: Evaluating selection criteria for rule 'Send e-mail for a failed publish password operation'.
- [12/18/2014 14:20:46.631] ConnecteurAD ST: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = FALSE.
- [12/18/2014 14:20:46.631] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.631] ConnecteurAD ST: Policy returned:
- [12/18/2014 14:20:46.631] ConnecteurAD ST:
- <nds dtdversion="4.0" ndsversion="8.x">
- <source>
- <product edition="Standard" version="4.0.1.0">DirXML</product>
- <contact>Novell, Inc.</contact>
- </source>
- <input>
- <query class-name="user" dest-dn="OU=Utilisateurs_Actifs,OU=MYDOMAIN,DC=nim2012,DC=intra" event-id="0" scope="subtree">
- <search-class class-name="user"/>
- <search-attr attr-name="cn">
- <value type="string">UserLeLou?r(2981)</value>
- </search-attr>
- <read-attr/>
- </query>
- </input>
- </nds>
- [12/18/2014 14:20:46.631] ConnecteurAD ST: Applying policy: NOVLADATRK-otp-Subscribe.
- [12/18/2014 14:20:46.631] ConnecteurAD ST: Applying to query #1.
- [12/18/2014 14:20:46.631] ConnecteurAD ST: Evaluating selection criteria for rule 'Do not process Account Tracking policies if modify with no source-dn '.
- [12/18/2014 14:20:46.631] ConnecteurAD ST: (if-operation equal "modify") = FALSE.
- [12/18/2014 14:20:46.631] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.631] ConnecteurAD ST: Evaluating selection criteria for rule 'AccountTracking - Initialize Realm Mapping'.
- [12/18/2014 14:20:46.631] ConnecteurAD ST: (if-global-variable 'drv.acctTrk.enable' equal "true") = TRUE.
- [12/18/2014 14:20:46.631] ConnecteurAD ST: (if-global-variable 'drv.acctTrk.mode' equal "fanout") = FALSE.
- [12/18/2014 14:20:46.631] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.631] ConnecteurAD ST: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled or wrong object class'.
- [12/18/2014 14:20:46.631] ConnecteurAD ST: Rule selected.
- [12/18/2014 14:20:46.631] ConnecteurAD ST: Applying rule 'AccountTracking - disregard if disabled or wrong object class'.
- [12/18/2014 14:20:46.631] ConnecteurAD ST: Action: do-if().
- [12/18/2014 14:20:46.631] ConnecteurAD ST: Evaluating conditions.
- [12/18/2014 14:20:46.631] ConnecteurAD ST: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
- [12/18/2014 14:20:46.631] ConnecteurAD ST: Performing else actions.
- [12/18/2014 14:20:46.631] ConnecteurAD ST: Action: do-for-each(arg-node-set(token-global-variable("drv.acctTrk.objectClass"))).
- [12/18/2014 14:20:46.631] ConnecteurAD ST: arg-node-set(token-global-variable("drv.acctTrk.objectClass"))
- [12/18/2014 14:20:46.631] ConnecteurAD ST: token-global-variable("drv.acctTrk.objectClass")
- [12/18/2014 14:20:46.631] ConnecteurAD ST: Token Value: {"user"}.
- [12/18/2014 14:20:46.631] ConnecteurAD ST: Arg Value: {"user"}.
- [12/18/2014 14:20:46.631] ConnecteurAD ST: Performing actions for local-variable(current-node) = "user".
- [12/18/2014 14:20:46.631] ConnecteurAD ST: Action: do-if().
- [12/18/2014 14:20:46.631] ConnecteurAD ST: Evaluating conditions.
- [12/18/2014 14:20:46.631] ConnecteurAD ST: Expanded variable reference '$current-node$' to 'user'.
- [12/18/2014 14:20:46.631] ConnecteurAD ST: (if-class-name equal "$current-node$") = TRUE.
- [12/18/2014 14:20:46.631] ConnecteurAD ST: Performing if actions.
- [12/18/2014 14:20:46.631] ConnecteurAD ST: Action: do-set-local-variable("pass",scope="policy","true").
- [12/18/2014 14:20:46.631] ConnecteurAD ST: arg-string("true")
- [12/18/2014 14:20:46.631] ConnecteurAD ST: token-text("true")
- [12/18/2014 14:20:46.631] ConnecteurAD ST: Arg Value: "true".
- [12/18/2014 14:20:46.631] ConnecteurAD ST: Action: do-if().
- [12/18/2014 14:20:46.631] ConnecteurAD ST: Evaluating conditions.
- [12/18/2014 14:20:46.631] ConnecteurAD ST: (if-local-variable 'pass' not-available) = FALSE.
- [12/18/2014 14:20:46.631] ConnecteurAD ST: Performing else actions.
- [12/18/2014 14:20:46.631] ConnecteurAD ST: Evaluating selection criteria for rule 'AccountTracking - add operation-data for regular operations'.
- [12/18/2014 14:20:46.631] ConnecteurAD ST: (if-operation match "add|modify|delete|rename|move") = FALSE.
- [12/18/2014 14:20:46.631] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.632] ConnecteurAD ST: Evaluating selection criteria for rule 'AccountTracking - add operation-data for mapped operations'.
- [12/18/2014 14:20:46.632] ConnecteurAD ST: (if-global-variable 'drv.acctTrk.mode' equal "fanout") = FALSE.
- [12/18/2014 14:20:46.632] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.632] ConnecteurAD ST: Evaluating selection criteria for rule 'AccountTracking - strip AccountTrackingAccountStatus attribute'.
- [12/18/2014 14:20:46.632] ConnecteurAD ST: (if-op-attr 'AccountTrackingAccountStatus' available) = FALSE.
- [12/18/2014 14:20:46.632] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.632] ConnecteurAD ST: Policy returned:
- [12/18/2014 14:20:46.632] ConnecteurAD ST:
- <nds dtdversion="4.0" ndsversion="8.x">
- <source>
- <product edition="Standard" version="4.0.1.0">DirXML</product>
- <contact>Novell, Inc.</contact>
- </source>
- <input>
- <query class-name="user" dest-dn="OU=Utilisateurs_Actifs,OU=MYDOMAIN,DC=nim2012,DC=intra" event-id="0" scope="subtree">
- <search-class class-name="user"/>
- <search-attr attr-name="cn">
- <value type="string">UserLeLou?r(2981)</value>
- </search-attr>
- <read-attr/>
- </query>
- </input>
- </nds>
- [12/18/2014 14:20:46.632] ConnecteurAD ST: Submitting document to subscriber shim:
- [12/18/2014 14:20:46.632] ConnecteurAD ST:
- <nds dtdversion="4.0" ndsversion="8.x">
- <source>
- <product edition="Standard" version="4.0.1.0">DirXML</product>
- <contact>Novell, Inc.</contact>
- </source>
- <input>
- <query class-name="user" dest-dn="OU=Utilisateurs_Actifs,OU=MYDOMAIN,DC=nim2012,DC=intra" event-id="0" scope="subtree">
- <search-class class-name="user"/>
- <search-attr attr-name="cn">
- <value type="string">UserLeLou?r(2981)</value>
- </search-attr>
- <read-attr/>
- </query>
- </input>
- </nds>
- [12/18/2014 14:20:46.632] ConnecteurAD ST: Remote Interface Driver: Sending...
- [12/18/2014 14:20:46.632] ConnecteurAD ST:
- <nds dtdversion="4.0" ndsversion="8.x">
- <source>
- <product edition="Standard" version="4.0.1.0">DirXML</product>
- <contact>Novell, Inc.</contact>
- </source>
- <input>
- <query class-name="user" dest-dn="OU=Utilisateurs_Actifs,OU=MYDOMAIN,DC=nim2012,DC=intra" event-id="0" scope="subtree">
- <search-class class-name="user"/>
- <search-attr attr-name="cn">
- <value type="string">UserLeLou?r(2981)</value>
- </search-attr>
- <read-attr/>
- </query>
- </input>
- </nds>
- [12/18/2014 14:20:46.632] ConnecteurAD ST: Remote Interface Driver: Document sent.
- [12/18/2014 14:20:46.684] ConnecteurAD :Remote Interface Driver: Received.
- [12/18/2014 14:20:46.684] ConnecteurAD :
- <nds dtdversion="1.1" ndsversion="8.7">
- <source>
- <product asn1id="" build="20120330_120000" instance="\IDV\system\DriverSet\ConnecteurAD" version="4.0.0.0">AD</product>
- <contact>Novell, Inc.</contact>
- </source>
- <output>
- <status event-id="0" level="success"/>
- </output>
- </nds>
- [12/18/2014 14:20:46.684] ConnecteurAD :Remote Interface Driver: Received document for subscriber channel
- [12/18/2014 14:20:46.684] ConnecteurAD :Remote Interface Driver: Waiting for receive...
- [12/18/2014 14:20:46.684] ConnecteurAD ST: SubscriptionShim.execute() returned:
- [12/18/2014 14:20:46.684] ConnecteurAD ST:
- <nds dtdversion="1.1" ndsversion="8.7">
- <source>
- <product asn1id="" build="20120330_120000" instance="\IDV\system\DriverSet\ConnecteurAD" version="4.0.0.0">AD</product>
- <contact>Novell, Inc.</contact>
- </source>
- <output>
- <status event-id="0" level="success"/>
- </output>
- </nds>
- [12/18/2014 14:20:46.684] ConnecteurAD ST: Applying input transformation policies.
- [12/18/2014 14:20:46.684] ConnecteurAD ST: Applying policy: NOVLADMSINFO-itp-InitManagedSystemInfo.
- [12/18/2014 14:20:46.684] ConnecteurAD ST: Applying to status #1.
- [12/18/2014 14:20:46.684] ConnecteurAD ST: Evaluating selection criteria for rule 'Make sure we only run once and when we're ready'.
- [12/18/2014 14:20:46.684] ConnecteurAD ST: (if-local-variable 'objectClass' match ".+") = TRUE.
- [12/18/2014 14:20:46.684] ConnecteurAD ST: (if-local-variable 'mSysInfoInitialized' equal "true") = TRUE.
- [12/18/2014 14:20:46.684] ConnecteurAD ST: Rule selected.
- [12/18/2014 14:20:46.684] ConnecteurAD ST: Applying rule 'Make sure we only run once and when we're ready'.
- [12/18/2014 14:20:46.684] ConnecteurAD ST: Action: do-break().
- [12/18/2014 14:20:46.684] ConnecteurAD ST: Policy returned:
- [12/18/2014 14:20:46.684] ConnecteurAD ST:
- <nds dtdversion="1.1" ndsversion="8.7">
- <source>
- <product asn1id="" build="20120330_120000" instance="\IDV\system\DriverSet\ConnecteurAD" version="4.0.0.0">AD</product>
- <contact>Novell, Inc.</contact>
- </source>
- <output>
- <status event-id="0" level="success"/>
- </output>
- </nds>
- [12/18/2014 14:20:46.684] ConnecteurAD ST: Applying policy: NOVLADATRK-itp-Publish.
- [12/18/2014 14:20:46.684] ConnecteurAD ST: Applying to status #1.
- [12/18/2014 14:20:46.684] ConnecteurAD ST: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled or wrong object class'.
- [12/18/2014 14:20:46.684] ConnecteurAD ST: Rule selected.
- [12/18/2014 14:20:46.684] ConnecteurAD ST: Applying rule 'AccountTracking - disregard if disabled or wrong object class'.
- [12/18/2014 14:20:46.684] ConnecteurAD ST: Action: do-if().
- [12/18/2014 14:20:46.684] ConnecteurAD ST: Evaluating conditions.
- [12/18/2014 14:20:46.684] ConnecteurAD ST: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
- [12/18/2014 14:20:46.684] ConnecteurAD ST: Performing else actions.
- [12/18/2014 14:20:46.684] ConnecteurAD ST: Action: do-if().
- [12/18/2014 14:20:46.684] ConnecteurAD ST: Evaluating conditions.
- [12/18/2014 14:20:46.684] ConnecteurAD ST: (if-class-name available) = FALSE.
- [12/18/2014 14:20:46.684] ConnecteurAD ST: Performing else actions.
- [12/18/2014 14:20:46.684] ConnecteurAD ST: Evaluating selection criteria for rule 'AccountTracking - on add-association sync the operation-properties to status operations'.
- [12/18/2014 14:20:46.684] ConnecteurAD ST: (if-operation equal "add-association") = FALSE.
- [12/18/2014 14:20:46.684] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.684] ConnecteurAD ST: Evaluating selection criteria for rule 'AccountTracking - Query for destination DN using Association'.
- [12/18/2014 14:20:46.684] ConnecteurAD ST: (if-operation match "modify|delete|move|rename") = FALSE.
- [12/18/2014 14:20:46.684] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.684] ConnecteurAD ST: Evaluating selection criteria for rule 'AccountTracking - add interested properties to current doc for future use.'.
- [12/18/2014 14:20:46.684] ConnecteurAD ST: (if-operation match "add|modify|delete|rename|move|status") = TRUE.
- [12/18/2014 14:20:46.684] ConnecteurAD ST: Rule selected.
- [12/18/2014 14:20:46.684] ConnecteurAD ST: Applying rule 'AccountTracking - add interested properties to current doc for future use.'.
- [12/18/2014 14:20:46.684] ConnecteurAD ST: Action: do-for-each(arg-node-set(token-global-variable("drv.acctTrk.identifiers"))).
- [12/18/2014 14:20:46.684] ConnecteurAD ST: arg-node-set(token-global-variable("drv.acctTrk.identifiers"))
- [12/18/2014 14:20:46.684] ConnecteurAD ST: token-global-variable("drv.acctTrk.identifiers")
- [12/18/2014 14:20:46.684] ConnecteurAD ST: Token Value: {"sAMAccountName","userPrincipalName","LDAPDN","association"}.
- [12/18/2014 14:20:46.684] ConnecteurAD ST: Arg Value: {"sAMAccountName","userPrincipalName","LDAPDN","association"}.
- [12/18/2014 14:20:46.684] ConnecteurAD ST: Performing actions for local-variable(current-node) = "sAMAccountName".
- [12/18/2014 14:20:46.684] ConnecteurAD ST: Action: do-if().
- [12/18/2014 14:20:46.684] ConnecteurAD ST: Evaluating conditions.
- [12/18/2014 14:20:46.684] ConnecteurAD ST: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: Performing else actions.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: Action: do-if().
- [12/18/2014 14:20:46.685] ConnecteurAD ST: Evaluating conditions.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: (if-local-variable 'current-node' equal "association") = FALSE.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: Performing else actions.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: Action: do-if().
- [12/18/2014 14:20:46.685] ConnecteurAD ST: Evaluating conditions.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: Expanded variable reference '$current-node$' to 'sAMAccountName'.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: Expanded variable reference '$current-node$' to 'sAMAccountName'.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: (if-op-attr '$current-node$' available) = FALSE.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: Performing else actions.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: Performing actions for local-variable(current-node) = "userPrincipalName".
- [12/18/2014 14:20:46.685] ConnecteurAD ST: Action: do-if().
- [12/18/2014 14:20:46.685] ConnecteurAD ST: Evaluating conditions.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: Performing else actions.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: Action: do-if().
- [12/18/2014 14:20:46.685] ConnecteurAD ST: Evaluating conditions.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: (if-local-variable 'current-node' equal "association") = FALSE.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: Performing else actions.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: Action: do-if().
- [12/18/2014 14:20:46.685] ConnecteurAD ST: Evaluating conditions.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: Expanded variable reference '$current-node$' to 'userPrincipalName'.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: Expanded variable reference '$current-node$' to 'userPrincipalName'.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: (if-op-attr '$current-node$' available) = FALSE.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: Performing else actions.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: Performing actions for local-variable(current-node) = "LDAPDN".
- [12/18/2014 14:20:46.685] ConnecteurAD ST: Action: do-if().
- [12/18/2014 14:20:46.685] ConnecteurAD ST: Evaluating conditions.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: (if-local-variable 'current-node' equal "LDAPDN") = TRUE.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: Expanded variable reference '$current-node$' to 'LDAPDN'.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: (if-src-dn available) = FALSE.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: Performing else actions.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: Action: do-if().
- [12/18/2014 14:20:46.685] ConnecteurAD ST: Evaluating conditions.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: (if-local-variable 'current-node' equal "association") = FALSE.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: Performing else actions.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: Action: do-if().
- [12/18/2014 14:20:46.685] ConnecteurAD ST: Evaluating conditions.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: Expanded variable reference '$current-node$' to 'LDAPDN'.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: Expanded variable reference '$current-node$' to 'LDAPDN'.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: (if-op-attr '$current-node$' available) = FALSE.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: Performing else actions.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: Performing actions for local-variable(current-node) = "association".
- [12/18/2014 14:20:46.685] ConnecteurAD ST: Action: do-if().
- [12/18/2014 14:20:46.685] ConnecteurAD ST: Evaluating conditions.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: Performing else actions.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: Action: do-if().
- [12/18/2014 14:20:46.685] ConnecteurAD ST: Evaluating conditions.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: (if-local-variable 'current-node' equal "association") = TRUE.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: Expanded variable reference '$current-node$' to 'association'.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: (if-association available) = FALSE.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: Performing else actions.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: Action: do-if().
- [12/18/2014 14:20:46.685] ConnecteurAD ST: Evaluating conditions.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: Expanded variable reference '$current-node$' to 'association'.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: Expanded variable reference '$current-node$' to 'association'.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: (if-op-attr '$current-node$' available) = FALSE.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: Performing else actions.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: Evaluating selection criteria for rule 'AccountTracking - Initialize status properties on published events'.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: (if-operation match "add|modify|delete|rename|move") = FALSE.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: Policy returned:
- [12/18/2014 14:20:46.685] ConnecteurAD ST:
- <nds dtdversion="1.1" ndsversion="8.7">
- <source>
- <product asn1id="" build="20120330_120000" instance="\IDV\system\DriverSet\ConnecteurAD" version="4.0.0.0">AD</product>
- <contact>Novell, Inc.</contact>
- </source>
- <output>
- <status event-id="0" level="success"/>
- </output>
- </nds>
- [12/18/2014 14:20:46.685] ConnecteurAD ST: Applying policy: NOVLADATRK-itp-WriteAccounts.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: Applying to status #1.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: Evaluating selection criteria for rule 'AccountTracking - Initialize Realm Mapping'.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: (if-global-variable 'drv.acctTrk.enable' equal "true") = TRUE.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: (if-global-variable 'drv.acctTrk.mode' equal "fanout") = FALSE.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.685] ConnecteurAD ST: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled'.
- [12/18/2014 14:20:46.686] ConnecteurAD ST: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
- [12/18/2014 14:20:46.686] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.686] ConnecteurAD ST: Evaluating selection criteria for rule 'AccountTracking - query DirXML-Accounts Attribute'.
- [12/18/2014 14:20:46.686] ConnecteurAD ST: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
- [12/18/2014 14:20:46.686] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.686] ConnecteurAD ST: Evaluating selection criteria for rule 'AccountTracking - remove Dirxml-Account values on regular delete operation or revoke'.
- [12/18/2014 14:20:46.686] ConnecteurAD ST: (if-operation match "delete|remove-association") = FALSE.
- [12/18/2014 14:20:46.686] ConnecteurAD ST: (if-operation equal "status") = TRUE.
- [12/18/2014 14:20:46.686] ConnecteurAD ST: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
- [12/18/2014 14:20:46.686] ConnecteurAD ST: (if-operation equal "status") = TRUE.
- [12/18/2014 14:20:46.686] ConnecteurAD ST: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
- [12/18/2014 14:20:46.686] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.686] ConnecteurAD ST: Evaluating selection criteria for rule 'AccountTracking - update DirXMLAccounts attribute on regular operations'.
- [12/18/2014 14:20:46.686] ConnecteurAD ST: (if-op-property 'AccountTracking-Operation' not-available) = TRUE.
- [12/18/2014 14:20:46.686] ConnecteurAD ST: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
- [12/18/2014 14:20:46.686] ConnecteurAD ST: (if-operation equal "status") = TRUE.
- [12/18/2014 14:20:46.686] ConnecteurAD ST: (if-xpath true "./@level='success' or ./@level='warning'") = TRUE.
- [12/18/2014 14:20:46.686] ConnecteurAD ST: (if-op-property 'AccountTracking-Operation' available) = FALSE.
- [12/18/2014 14:20:46.686] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.686] ConnecteurAD ST: Evaluating selection criteria for rule 'AccountTracking - update DirXMLAccounts attribute on mapped operations'.
- [12/18/2014 14:20:46.686] ConnecteurAD ST: (if-xpath true "operation-data/account-tracking-operation") = FALSE.
- [12/18/2014 14:20:46.686] ConnecteurAD ST: (if-xpath true "operation-data/account-tracking-operation") = FALSE.
- [12/18/2014 14:20:46.686] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.686] ConnecteurAD ST: Policy returned:
- [12/18/2014 14:20:46.686] ConnecteurAD ST:
- <nds dtdversion="1.1" ndsversion="8.7">
- <source>
- <product asn1id="" build="20120330_120000" instance="\IDV\system\DriverSet\ConnecteurAD" version="4.0.0.0">AD</product>
- <contact>Novell, Inc.</contact>
- </source>
- <output>
- <status event-id="0" level="success"/>
- </output>
- </nds>
- [12/18/2014 14:20:46.686] ConnecteurAD ST: Applying policy: NOVLADDCFG-itp-SubscriberUserAdd.
- [12/18/2014 14:20:46.686] ConnecteurAD ST: Applying to status #1.
- [12/18/2014 14:20:46.686] ConnecteurAD ST: Evaluating selection criteria for rule 'Populate DirXML-ADContext on initial user add'.
- [12/18/2014 14:20:46.686] ConnecteurAD ST: (if-operation equal "add-association") = FALSE.
- [12/18/2014 14:20:46.686] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.686] ConnecteurAD ST: Policy returned:
- [12/18/2014 14:20:46.686] ConnecteurAD ST:
- <nds dtdversion="1.1" ndsversion="8.7">
- <source>
- <product asn1id="" build="20120330_120000" instance="\IDV\system\DriverSet\ConnecteurAD" version="4.0.0.0">AD</product>
- <contact>Novell, Inc.</contact>
- </source>
- <output>
- <status event-id="0" level="success"/>
- </output>
- </nds>
- [12/18/2014 14:20:46.686] ConnecteurAD ST: Applying policy: NOVLADDCFG-itp-FormatConversions.
- [12/18/2014 14:20:46.686] ConnecteurAD ST: Applying to status #1.
- [12/18/2014 14:20:46.686] ConnecteurAD ST: Evaluating selection criteria for rule 'streetAddress: Convert CR-LF to LF'.
- [12/18/2014 14:20:46.686] ConnecteurAD ST: Rule selected.
- [12/18/2014 14:20:46.686] ConnecteurAD ST: Applying rule 'streetAddress: Convert CR-LF to LF'.
- [12/18/2014 14:20:46.686] ConnecteurAD ST: Action: do-reformat-op-attr("streetAddress",token-replace-all("\r\n","\r",token-local-variable("current-value"))).
- [12/18/2014 14:20:46.686] ConnecteurAD ST: Evaluating selection criteria for rule 'logonHours: Convert to Login Allowed Time Map form'.
- [12/18/2014 14:20:46.686] ConnecteurAD ST: Rule selected.
- [12/18/2014 14:20:46.686] ConnecteurAD ST: Applying rule 'logonHours: Convert to Login Allowed Time Map form'.
- [12/18/2014 14:20:46.686] ConnecteurAD ST: Action: do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2eDir($current-value)")).
- [12/18/2014 14:20:46.686] ConnecteurAD ST: Evaluating selection criteria for rule 'accountExpires: Convert to Identity Vault time format'.
- [12/18/2014 14:20:46.686] ConnecteurAD ST: Rule selected.
- [12/18/2014 14:20:46.686] ConnecteurAD ST: Applying rule 'accountExpires: Convert to Identity Vault time format'.
- [12/18/2014 14:20:46.686] ConnecteurAD ST: Action: do-reformat-op-attr("accountExpires",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
- [12/18/2014 14:20:46.686] ConnecteurAD ST: Evaluating selection criteria for rule 'lockedByIntruder: Enable Locked By Intruder'.
- [12/18/2014 14:20:46.686] ConnecteurAD ST: (if-operation equal "modify") = FALSE.
- [12/18/2014 14:20:46.686] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.686] ConnecteurAD ST: Evaluating selection criteria for rule 'lockedByIntruder: Disable Locked By Intruder'.
- [12/18/2014 14:20:46.686] ConnecteurAD ST: (if-operation equal "modify") = FALSE.
- [12/18/2014 14:20:46.686] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.686] ConnecteurAD ST: Evaluating selection criteria for rule 'lockoutTime: Convert to Identity Vault time format'.
- [12/18/2014 14:20:46.686] ConnecteurAD ST: Rule selected.
- [12/18/2014 14:20:46.686] ConnecteurAD ST: Applying rule 'lockoutTime: Convert to Identity Vault time format'.
- [12/18/2014 14:20:46.686] ConnecteurAD ST: Action: do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
- [12/18/2014 14:20:46.686] ConnecteurAD ST: Policy returned:
- [12/18/2014 14:20:46.686] ConnecteurAD ST:
- <nds dtdversion="1.1" ndsversion="8.7">
- <source>
- <product asn1id="" build="20120330_120000" instance="\IDV\system\DriverSet\ConnecteurAD" version="4.0.0.0">AD</product>
- <contact>Novell, Inc.</contact>
- </source>
- <output>
- <status event-id="0" level="success"/>
- </output>
- </nds>
- [12/18/2014 14:20:46.686] ConnecteurAD ST: Applying policy: NOVLDATACOLL-itp-DataCollectionQuerySupport.
- [12/18/2014 14:20:46.686] ConnecteurAD ST: Applying to status #1.
- [12/18/2014 14:20:46.686] ConnecteurAD ST: Evaluating selection criteria for rule 'Rename @association-ref to @association and change @type from "dn" to "{dn}"'.
- [12/18/2014 14:20:46.686] ConnecteurAD ST: (if-operation equal "instance") = FALSE.
- [12/18/2014 14:20:46.686] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.686] ConnecteurAD ST: Policy returned:
- [12/18/2014 14:20:46.686] ConnecteurAD ST:
- <nds dtdversion="1.1" ndsversion="8.7">
- <source>
- <product asn1id="" build="20120330_120000" instance="\IDV\system\DriverSet\ConnecteurAD" version="4.0.0.0">AD</product>
- <contact>Novell, Inc.</contact>
- </source>
- <output>
- <status event-id="0" level="success"/>
- </output>
- </nds>
- [12/18/2014 14:20:46.686] ConnecteurAD ST: Applying policy: NOVLPWDSYNC-itp-EmailOnFailedPwdSub.
- [12/18/2014 14:20:46.687] ConnecteurAD ST: Applying to status #1.
- [12/18/2014 14:20:46.687] ConnecteurAD ST: Evaluating selection criteria for rule 'Send e-mail on a failure when subscribing to passwords'.
- [12/18/2014 14:20:46.687] ConnecteurAD ST: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = FALSE.
- [12/18/2014 14:20:46.687] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.687] ConnecteurAD ST: Evaluating selection criteria for rule 'Send e-mail on failure to reset connected system password using the Identity Vault password'.
- [12/18/2014 14:20:46.687] ConnecteurAD ST: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = FALSE.
- [12/18/2014 14:20:46.687] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.687] ConnecteurAD ST: Policy returned:
- [12/18/2014 14:20:46.687] ConnecteurAD ST:
- <nds dtdversion="1.1" ndsversion="8.7">
- <source>
- <product asn1id="" build="20120330_120000" instance="\IDV\system\DriverSet\ConnecteurAD" version="4.0.0.0">AD</product>
- <contact>Novell, Inc.</contact>
- </source>
- <output>
- <status event-id="0" level="success"/>
- </output>
- </nds>
- [12/18/2014 14:20:46.687] ConnecteurAD ST: Applying policy: ADMigration-pub-flagControl.
- [12/18/2014 14:20:46.687] ConnecteurAD ST: Applying to status #1.
- [12/18/2014 14:20:46.687] ConnecteurAD ST: Evaluating selection criteria for rule 'users AD flag veto'.
- [12/18/2014 14:20:46.687] ConnecteurAD ST: (if-class-name equal "User") = FALSE.
- [12/18/2014 14:20:46.687] ConnecteurAD ST: (if-class-name equal "user") = FALSE.
- [12/18/2014 14:20:46.687] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.687] ConnecteurAD ST: Policy returned:
- [12/18/2014 14:20:46.687] ConnecteurAD ST:
- <nds dtdversion="1.1" ndsversion="8.7">
- <source>
- <product asn1id="" build="20120330_120000" instance="\IDV\system\DriverSet\ConnecteurAD" version="4.0.0.0">AD</product>
- <contact>Novell, Inc.</contact>
- </source>
- <output>
- <status event-id="0" level="success"/>
- </output>
- </nds>
- [12/18/2014 14:20:46.687] ConnecteurAD ST: Applying schema mapping policies to input.
- [12/18/2014 14:20:46.687] ConnecteurAD ST: Applying policy: NOVLDATACOLL-smp-SkipSchemaMapping.
- [12/18/2014 14:20:46.687] ConnecteurAD ST: Applying to status #1.
- [12/18/2014 14:20:46.687] ConnecteurAD ST: Evaluating selection criteria for rule 'skip'.
- [12/18/2014 14:20:46.687] ConnecteurAD ST: (if-operation equal "instance") = FALSE.
- [12/18/2014 14:20:46.687] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.687] ConnecteurAD ST: Evaluating selection criteria for rule 'restore'.
- [12/18/2014 14:20:46.687] ConnecteurAD ST: (if-op-property 'restore-attr-names' equal "true") = FALSE.
- [12/18/2014 14:20:46.687] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.687] ConnecteurAD ST: Policy returned:
- [12/18/2014 14:20:46.687] ConnecteurAD ST:
- <nds dtdversion="1.1" ndsversion="8.7">
- <source>
- <product asn1id="" build="20120330_120000" instance="\IDV\system\DriverSet\ConnecteurAD" version="4.0.0.0">AD</product>
- <contact>Novell, Inc.</contact>
- </source>
- <output>
- <status event-id="0" level="success"/>
- </output>
- </nds>
- [12/18/2014 14:20:46.687] ConnecteurAD ST: Applying policy: NOVLADDCFG-smp.
- [12/18/2014 14:20:46.687] ConnecteurAD ST: Applying policy: NOVLDATACOLL-smp-SkipSchemaMapping.
- [12/18/2014 14:20:46.687] ConnecteurAD ST: Applying to status #1.
- [12/18/2014 14:20:46.687] ConnecteurAD ST: Evaluating selection criteria for rule 'skip'.
- [12/18/2014 14:20:46.687] ConnecteurAD ST: (if-operation equal "instance") = FALSE.
- [12/18/2014 14:20:46.687] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.687] ConnecteurAD ST: Evaluating selection criteria for rule 'restore'.
- [12/18/2014 14:20:46.687] ConnecteurAD ST: (if-op-property 'restore-attr-names' equal "true") = FALSE.
- [12/18/2014 14:20:46.687] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.687] ConnecteurAD ST: Policy returned:
- [12/18/2014 14:20:46.687] ConnecteurAD ST:
- <nds dtdversion="1.1" ndsversion="8.7">
- <source>
- <product asn1id="" build="20120330_120000" instance="\IDV\system\DriverSet\ConnecteurAD" version="4.0.0.0">AD</product>
- <contact>Novell, Inc.</contact>
- </source>
- <output>
- <status event-id="0" level="success"/>
- </output>
- </nds>
- [12/18/2014 14:20:46.687] ConnecteurAD ST: Resolving association references.
- [12/18/2014 14:20:46.688] ConnecteurAD ST: Query from policy result
- [12/18/2014 14:20:46.688] ConnecteurAD ST:
- <nds dtdversion="1.1" ndsversion="8.7">
- <source>
- <product asn1id="" build="20120330_120000" instance="\IDV\system\DriverSet\ConnecteurAD" version="4.0.0.0">AD</product>
- <contact>Novell, Inc.</contact>
- </source>
- <output>
- <status event-id="0" level="success"/>
- </output>
- </nds>
- [12/18/2014 14:20:46.688] ConnecteurAD ST: No matches found.
- [12/18/2014 14:20:46.688] ConnecteurAD ST: Evaluating selection criteria for rule 'match users based on full name'.
- [12/18/2014 14:20:46.688] ConnecteurAD ST: (if-class-name equal "User") = TRUE.
- [12/18/2014 14:20:46.688] ConnecteurAD ST: (if-global-variable 'FullNameMap' equal "true") = TRUE.
- [12/18/2014 14:20:46.688] ConnecteurAD ST: (if-op-attr 'Full Name' available) = FALSE.
- [12/18/2014 14:20:46.688] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.688] ConnecteurAD ST: Evaluating selection criteria for rule 'match everything else'.
- [12/18/2014 14:20:46.688] ConnecteurAD ST: Rule selected.
- [12/18/2014 14:20:46.688] ConnecteurAD ST: Applying rule 'match everything else'.
- [12/18/2014 14:20:46.688] ConnecteurAD ST: Action: do-if().
- [12/18/2014 14:20:46.688] ConnecteurAD ST: Evaluating conditions.
- [12/18/2014 14:20:46.688] ConnecteurAD ST: (if-global-variable 'drv.subPlacementType' equal "flat") = TRUE.
- [12/18/2014 14:20:46.688] ConnecteurAD ST: Performing if actions.
- [12/18/2014 14:20:46.688] ConnecteurAD ST: Action: do-find-matching-object(scope="entry",arg-dn(token-src-dn(convert="true",length="1",start="-1")+","+token-global-variable("drv.user.container"))).
- [12/18/2014 14:20:46.688] ConnecteurAD ST: arg-dn(token-src-dn(convert="true",length="1",start="-1")+","+token-global-variable("drv.user.container"))
- [12/18/2014 14:20:46.688] ConnecteurAD ST: token-src-dn(convert="true",length="1",start="-1")
- [12/18/2014 14:20:46.688] ConnecteurAD ST: Token Value: "CN=User Test (2981)".
- [12/18/2014 14:20:46.688] ConnecteurAD ST: token-text(",")
- [12/18/2014 14:20:46.688] ConnecteurAD ST: token-global-variable("drv.user.container")
- [12/18/2014 14:20:46.688] ConnecteurAD ST: Token Value: "OU=Utilisateurs_Actifs,OU=MYDOMAIN,DC=nim2012,DC=intra".
- [12/18/2014 14:20:46.688] ConnecteurAD ST: Arg Value: "CN=User Test (2981),OU=Utilisateurs_Actifs,OU=MYDOMAIN,DC=nim2012,DC=intra".
- [12/18/2014 14:20:46.688] ConnecteurAD ST: Query from policy
- [12/18/2014 14:20:46.688] ConnecteurAD ST:
- <nds dtdversion="4.0" ndsversion="8.x">
- <source>
- <product edition="Standard" version="4.0.1.0">DirXML</product>
- <contact>Novell, Inc.</contact>
- </source>
- <input>
- <query class-name="User" dest-dn="CN=User Test (2981),OU=Utilisateurs_Actifs,OU=MYDOMAIN,DC=nim2012,DC=intra" scope="entry">
- <search-class class-name="User"/>
- <read-attr/>
- </query>
- </input>
- </nds>
- [12/18/2014 14:20:46.688] ConnecteurAD ST: Fixing up association references.
- [12/18/2014 14:20:46.688] ConnecteurAD ST: Applying schema mapping policies to output.
- [12/18/2014 14:20:46.688] ConnecteurAD ST: Applying policy: NOVLDATACOLL-smp-SkipSchemaMapping.
- [12/18/2014 14:20:46.688] ConnecteurAD ST: Applying to query #1.
- [12/18/2014 14:20:46.688] ConnecteurAD ST: Evaluating selection criteria for rule 'skip'.
- [12/18/2014 14:20:46.688] ConnecteurAD ST: (if-operation equal "instance") = FALSE.
- [12/18/2014 14:20:46.688] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.688] ConnecteurAD ST: Evaluating selection criteria for rule 'restore'.
- [12/18/2014 14:20:46.688] ConnecteurAD ST: (if-op-property 'restore-attr-names' equal "true") = FALSE.
- [12/18/2014 14:20:46.688] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.688] ConnecteurAD ST: Policy returned:
- [12/18/2014 14:20:46.688] ConnecteurAD ST:
- <nds dtdversion="4.0" ndsversion="8.x">
- <source>
- <product edition="Standard" version="4.0.1.0">DirXML</product>
- <contact>Novell, Inc.</contact>
- </source>
- <input>
- <query class-name="User" dest-dn="CN=User Test (2981),OU=Utilisateurs_Actifs,OU=MYDOMAIN,DC=nim2012,DC=intra" event-id="0" scope="entry">
- <search-class class-name="User"/>
- <read-attr/>
- </query>
- </input>
- </nds>
- [12/18/2014 14:20:46.688] ConnecteurAD ST: Applying policy: NOVLADDCFG-smp.
- [12/18/2014 14:20:46.688] ConnecteurAD ST: Mapping class-name 'User' to 'user'.
- [12/18/2014 14:20:46.688] ConnecteurAD ST: Mapping class-name 'User' to 'user'.
- [12/18/2014 14:20:46.688] ConnecteurAD ST: Applying policy: NOVLDATACOLL-smp-SkipSchemaMapping.
- [12/18/2014 14:20:46.688] ConnecteurAD ST: Applying to query #1.
- [12/18/2014 14:20:46.688] ConnecteurAD ST: Evaluating selection criteria for rule 'skip'.
- [12/18/2014 14:20:46.688] ConnecteurAD ST: (if-operation equal "instance") = FALSE.
- [12/18/2014 14:20:46.688] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.688] ConnecteurAD ST: Evaluating selection criteria for rule 'restore'.
- [12/18/2014 14:20:46.688] ConnecteurAD ST: (if-op-property 'restore-attr-names' equal "true") = FALSE.
- [12/18/2014 14:20:46.688] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.688] ConnecteurAD ST: Policy returned:
- [12/18/2014 14:20:46.688] ConnecteurAD ST:
- <nds dtdversion="4.0" ndsversion="8.x">
- <source>
- <product edition="Standard" version="4.0.1.0">DirXML</product>
- <contact>Novell, Inc.</contact>
- </source>
- <input>
- <query class-name="user" dest-dn="CN=User Test (2981),OU=Utilisateurs_Actifs,OU=MYDOMAIN,DC=nim2012,DC=intra" event-id="0" scope="entry">
- <search-class class-name="user"/>
- <read-attr/>
- </query>
- </input>
- </nds>
- [12/18/2014 14:20:46.688] ConnecteurAD ST: Applying output transformation policies.
- [12/18/2014 14:20:46.689] ConnecteurAD ST: Applying policy: NOVLADDCFG-otp-FormatConversions.
- [12/18/2014 14:20:46.689] ConnecteurAD ST: Applying to query #1.
- [12/18/2014 14:20:46.689] ConnecteurAD ST: Evaluating selection criteria for rule 'Street Address: Convert LF to CR-LF'.
- [12/18/2014 14:20:46.689] ConnecteurAD ST: Rule selected.
- [12/18/2014 14:20:46.689] ConnecteurAD ST: Applying rule 'Street Address: Convert LF to CR-LF'.
- [12/18/2014 14:20:46.689] ConnecteurAD ST: Action: do-reformat-op-attr("streetAddress",token-replace-all("[^\r]\n","\r\n",token-local-variable("current-value"))).
- [12/18/2014 14:20:46.689] ConnecteurAD ST: Evaluating selection criteria for rule 'logonHours: Convert to Active Directory form'.
- [12/18/2014 14:20:46.689] ConnecteurAD ST: Rule selected.
- [12/18/2014 14:20:46.689] ConnecteurAD ST: Applying rule 'logonHours: Convert to Active Directory form'.
- [12/18/2014 14:20:46.689] ConnecteurAD ST: Action: do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2ADLenient($current-value)")).
- [12/18/2014 14:20:46.689] ConnecteurAD ST: Evaluating selection criteria for rule 'accountExpires: Convert to Active Directory form'.
- [12/18/2014 14:20:46.689] ConnecteurAD ST: (if-op-attr 'accountExpires' changing) = FALSE.
- [12/18/2014 14:20:46.689] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.689] ConnecteurAD ST: Evaluating selection criteria for rule 'lockoutTime: Convert to Active Directory form'.
- [12/18/2014 14:20:46.689] ConnecteurAD ST: (if-op-attr 'lockoutTime' available) = FALSE.
- [12/18/2014 14:20:46.689] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.689] ConnecteurAD ST: Evaluating selection criteria for rule 'Add: User - convert multi-valued Telephone to single value'.
- [12/18/2014 14:20:46.689] ConnecteurAD ST: (if-operation equal "add") = FALSE.
- [12/18/2014 14:20:46.689] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.689] ConnecteurAD ST: Evaluating selection criteria for rule 'update Active Directory logon name'.
- [12/18/2014 14:20:46.689] ConnecteurAD ST: (if-xpath true "self::status[@level = 'success']/operation-data/windows-2000-logon-name") = FALSE.
- [12/18/2014 14:20:46.689] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.689] ConnecteurAD ST: Policy returned:
- [12/18/2014 14:20:46.689] ConnecteurAD ST:
- <nds dtdversion="4.0" ndsversion="8.x">
- <source>
- <product edition="Standard" version="4.0.1.0">DirXML</product>
- <contact>Novell, Inc.</contact>
- </source>
- <input>
- <query class-name="user" dest-dn="CN=User Test (2981),OU=Utilisateurs_Actifs,OU=MYDOMAIN,DC=nim2012,DC=intra" event-id="0" scope="entry">
- <search-class class-name="user"/>
- <read-attr/>
- </query>
- </input>
- </nds>
- [12/18/2014 14:20:46.689] ConnecteurAD ST: Applying policy: NOVLADDCFG-otp-ExchangeEntitlementQuery.
- [12/18/2014 14:20:46.689] ConnecteurAD ST: Applying to query #1.
- [12/18/2014 14:20:46.689] ConnecteurAD ST: Evaluating selection criteria for rule 'Add dest-dn to the Exchange Entitlement Query'.
- [12/18/2014 14:20:46.689] ConnecteurAD ST: (if-operation equal "query") = TRUE.
- [12/18/2014 14:20:46.689] ConnecteurAD ST: (if-class-name equal "msExchPrivateMDB") = FALSE.
- [12/18/2014 14:20:46.689] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.689] ConnecteurAD ST: Policy returned:
- [12/18/2014 14:20:46.689] ConnecteurAD ST:
- <nds dtdversion="4.0" ndsversion="8.x">
- <source>
- <product edition="Standard" version="4.0.1.0">DirXML</product>
- <contact>Novell, Inc.</contact>
- </source>
- <input>
- <query class-name="user" dest-dn="CN=User Test (2981),OU=Utilisateurs_Actifs,OU=MYDOMAIN,DC=nim2012,DC=intra" event-id="0" scope="entry">
- <search-class class-name="user"/>
- <read-attr/>
- </query>
- </input>
- </nds>
- [12/18/2014 14:20:46.689] ConnecteurAD ST: Applying policy: NOVLPWDSYNC-otp-EmailOnFailedPwdPub.
- [12/18/2014 14:20:46.689] ConnecteurAD ST: Applying to query #1.
- [12/18/2014 14:20:46.689] ConnecteurAD ST: Evaluating selection criteria for rule 'Send e-mail for a failed publish password operation'.
- [12/18/2014 14:20:46.689] ConnecteurAD ST: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = FALSE.
- [12/18/2014 14:20:46.689] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.689] ConnecteurAD ST: Policy returned:
- [12/18/2014 14:20:46.689] ConnecteurAD ST:
- <nds dtdversion="4.0" ndsversion="8.x">
- <source>
- <product edition="Standard" version="4.0.1.0">DirXML</product>
- <contact>Novell, Inc.</contact>
- </source>
- <input>
- <query class-name="user" dest-dn="CN=User Test (2981),OU=Utilisateurs_Actifs,OU=MYDOMAIN,DC=nim2012,DC=intra" event-id="0" scope="entry">
- <search-class class-name="user"/>
- <read-attr/>
- </query>
- </input>
- </nds>
- [12/18/2014 14:20:46.689] ConnecteurAD ST: Applying policy: NOVLADATRK-otp-Subscribe.
- [12/18/2014 14:20:46.689] ConnecteurAD ST: Applying to query #1.
- [12/18/2014 14:20:46.689] ConnecteurAD ST: Evaluating selection criteria for rule 'Do not process Account Tracking policies if modify with no source-dn '.
- [12/18/2014 14:20:46.689] ConnecteurAD ST: (if-operation equal "modify") = FALSE.
- [12/18/2014 14:20:46.689] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.689] ConnecteurAD ST: Evaluating selection criteria for rule 'AccountTracking - Initialize Realm Mapping'.
- [12/18/2014 14:20:46.689] ConnecteurAD ST: (if-global-variable 'drv.acctTrk.enable' equal "true") = TRUE.
- [12/18/2014 14:20:46.689] ConnecteurAD ST: (if-global-variable 'drv.acctTrk.mode' equal "fanout") = FALSE.
- [12/18/2014 14:20:46.689] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.689] ConnecteurAD ST: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled or wrong object class'.
- [12/18/2014 14:20:46.689] ConnecteurAD ST: Rule selected.
- [12/18/2014 14:20:46.689] ConnecteurAD ST: Applying rule 'AccountTracking - disregard if disabled or wrong object class'.
- [12/18/2014 14:20:46.689] ConnecteurAD ST: Action: do-if().
- [12/18/2014 14:20:46.689] ConnecteurAD ST: Evaluating conditions.
- [12/18/2014 14:20:46.689] ConnecteurAD ST: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
- [12/18/2014 14:20:46.689] ConnecteurAD ST: Performing else actions.
- [12/18/2014 14:20:46.689] ConnecteurAD ST: Action: do-for-each(arg-node-set(token-global-variable("drv.acctTrk.objectClass"))).
- [12/18/2014 14:20:46.689] ConnecteurAD ST: arg-node-set(token-global-variable("drv.acctTrk.objectClass"))
- [12/18/2014 14:20:46.689] ConnecteurAD ST: token-global-variable("drv.acctTrk.objectClass")
- [12/18/2014 14:20:46.690] ConnecteurAD ST: Token Value: {"user"}.
- [12/18/2014 14:20:46.690] ConnecteurAD ST: Arg Value: {"user"}.
- [12/18/2014 14:20:46.690] ConnecteurAD ST: Performing actions for local-variable(current-node) = "user".
- [12/18/2014 14:20:46.690] ConnecteurAD ST: Action: do-if().
- [12/18/2014 14:20:46.690] ConnecteurAD ST: Evaluating conditions.
- [12/18/2014 14:20:46.690] ConnecteurAD ST: Expanded variable reference '$current-node$' to 'user'.
- [12/18/2014 14:20:46.690] ConnecteurAD ST: (if-class-name equal "$current-node$") = TRUE.
- [12/18/2014 14:20:46.690] ConnecteurAD ST: Performing if actions.
- [12/18/2014 14:20:46.690] ConnecteurAD ST: Action: do-set-local-variable("pass",scope="policy","true").
- [12/18/2014 14:20:46.690] ConnecteurAD ST: arg-string("true")
- [12/18/2014 14:20:46.690] ConnecteurAD ST: token-text("true")
- [12/18/2014 14:20:46.690] ConnecteurAD ST: Arg Value: "true".
- [12/18/2014 14:20:46.690] ConnecteurAD ST: Action: do-if().
- [12/18/2014 14:20:46.690] ConnecteurAD ST: Evaluating conditions.
- [12/18/2014 14:20:46.690] ConnecteurAD ST: (if-local-variable 'pass' not-available) = FALSE.
- [12/18/2014 14:20:46.690] ConnecteurAD ST: Performing else actions.
- [12/18/2014 14:20:46.690] ConnecteurAD ST: Evaluating selection criteria for rule 'AccountTracking - add operation-data for regular operations'.
- [12/18/2014 14:20:46.690] ConnecteurAD ST: (if-operation match "add|modify|delete|rename|move") = FALSE.
- [12/18/2014 14:20:46.690] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.690] ConnecteurAD ST: Evaluating selection criteria for rule 'AccountTracking - add operation-data for mapped operations'.
- [12/18/2014 14:20:46.690] ConnecteurAD ST: (if-global-variable 'drv.acctTrk.mode' equal "fanout") = FALSE.
- [12/18/2014 14:20:46.690] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.690] ConnecteurAD ST: Evaluating selection criteria for rule 'AccountTracking - strip AccountTrackingAccountStatus attribute'.
- [12/18/2014 14:20:46.690] ConnecteurAD ST: (if-op-attr 'AccountTrackingAccountStatus' available) = FALSE.
- [12/18/2014 14:20:46.690] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.690] ConnecteurAD ST: Policy returned:
- [12/18/2014 14:20:46.690] ConnecteurAD ST:
- <nds dtdversion="4.0" ndsversion="8.x">
- <source>
- <product edition="Standard" version="4.0.1.0">DirXML</product>
- <contact>Novell, Inc.</contact>
- </source>
- <input>
- <query class-name="user" dest-dn="CN=User Test (2981),OU=Utilisateurs_Actifs,OU=MYDOMAIN,DC=nim2012,DC=intra" event-id="0" scope="entry">
- <search-class class-name="user"/>
- <read-attr/>
- </query>
- </input>
- </nds>
- [12/18/2014 14:20:46.690] ConnecteurAD ST: Submitting document to subscriber shim:
- [12/18/2014 14:20:46.690] ConnecteurAD ST:
- <nds dtdversion="4.0" ndsversion="8.x">
- <source>
- <product edition="Standard" version="4.0.1.0">DirXML</product>
- <contact>Novell, Inc.</contact>
- </source>
- <input>
- <query class-name="user" dest-dn="CN=User Test (2981),OU=Utilisateurs_Actifs,OU=MYDOMAIN,DC=nim2012,DC=intra" event-id="0" scope="entry">
- <search-class class-name="user"/>
- <read-attr/>
- </query>
- </input>
- </nds>
- [12/18/2014 14:20:46.690] ConnecteurAD ST: Remote Interface Driver: Sending...
- [12/18/2014 14:20:46.690] ConnecteurAD ST:
- <nds dtdversion="4.0" ndsversion="8.x">
- <source>
- <product edition="Standard" version="4.0.1.0">DirXML</product>
- <contact>Novell, Inc.</contact>
- </source>
- <input>
- <query class-name="user" dest-dn="CN=User Test (2981),OU=Utilisateurs_Actifs,OU=MYDOMAIN,DC=nim2012,DC=intra" event-id="0" scope="entry">
- <search-class class-name="user"/>
- <read-attr/>
- </query>
- </input>
- </nds>
- [12/18/2014 14:20:46.690] ConnecteurAD ST: Remote Interface Driver: Document sent.
- [12/18/2014 14:20:46.726] ConnecteurAD :Remote Interface Driver: Received.
- [12/18/2014 14:20:46.726] ConnecteurAD :
- <nds dtdversion="1.1" ndsversion="8.7">
- <source>
- <product asn1id="" build="20120330_120000" instance="\IDV\system\DriverSet\ConnecteurAD" version="4.0.0.0">AD</product>
- <contact>Novell, Inc.</contact>
- </source>
- <output>
- <instance class-name="user" event-id="0" src-dn="CN=user Test (2981),OU=Utilisateurs_Actifs,OU=MYDOMAIN,DC=nim2012,DC=intra">
- <association>4bbd396e31166841a908b7970c82ae97</association>
- </instance>
- <status event-id="0" level="success"/>
- </output>
- </nds>
- [12/18/2014 14:20:46.726] ConnecteurAD :Remote Interface Driver: Received document for subscriber channel
- [12/18/2014 14:20:46.726] ConnecteurAD :Remote Interface Driver: Waiting for receive...
- [12/18/2014 14:20:46.726] ConnecteurAD ST: SubscriptionShim.execute() returned:
- [12/18/2014 14:20:46.726] ConnecteurAD ST:
- <nds dtdversion="1.1" ndsversion="8.7">
- <source>
- <product asn1id="" build="20120330_120000" instance="\IDV\system\DriverSet\ConnecteurAD" version="4.0.0.0">AD</product>
- <contact>Novell, Inc.</contact>
- </source>
- <output>
- <instance class-name="user" event-id="0" src-dn="CN=user Test (2981),OU=Utilisateurs_Actifs,OU=MYDOMAIN,DC=nim2012,DC=intra">
- <association>4bbd396e31166841a908b7970c82ae97</association>
- </instance>
- <status event-id="0" level="success"/>
- </output>
- </nds>
- [12/18/2014 14:20:46.726] ConnecteurAD ST: Applying input transformation policies.
- [12/18/2014 14:20:46.727] ConnecteurAD ST: Applying policy: NOVLADMSINFO-itp-InitManagedSystemInfo.
- [12/18/2014 14:20:46.727] ConnecteurAD ST: Applying to instance #1.
- [12/18/2014 14:20:46.727] ConnecteurAD ST: Evaluating selection criteria for rule 'Make sure we only run once and when we're ready'.
- [12/18/2014 14:20:46.727] ConnecteurAD ST: (if-local-variable 'objectClass' match ".+") = TRUE.
- [12/18/2014 14:20:46.727] ConnecteurAD ST: (if-local-variable 'mSysInfoInitialized' equal "true") = TRUE.
- [12/18/2014 14:20:46.727] ConnecteurAD ST: Rule selected.
- [12/18/2014 14:20:46.727] ConnecteurAD ST: Applying rule 'Make sure we only run once and when we're ready'.
- [12/18/2014 14:20:46.727] ConnecteurAD ST: Action: do-break().
- [12/18/2014 14:20:46.727] ConnecteurAD ST: Applying to status #2.
- [12/18/2014 14:20:46.727] ConnecteurAD ST: Evaluating selection criteria for rule 'Make sure we only run once and when we're ready'.
- [12/18/2014 14:20:46.727] ConnecteurAD ST: (if-local-variable 'objectClass' match ".+") = TRUE.
- [12/18/2014 14:20:46.727] ConnecteurAD ST: (if-local-variable 'mSysInfoInitialized' equal "true") = TRUE.
- [12/18/2014 14:20:46.727] ConnecteurAD ST: Rule selected.
- [12/18/2014 14:20:46.727] ConnecteurAD ST: Applying rule 'Make sure we only run once and when we're ready'.
- [12/18/2014 14:20:46.727] ConnecteurAD ST: Action: do-break().
- [12/18/2014 14:20:46.727] ConnecteurAD ST: Policy returned:
- [12/18/2014 14:20:46.727] ConnecteurAD ST:
- <nds dtdversion="1.1" ndsversion="8.7">
- <source>
- <product asn1id="" build="20120330_120000" instance="\IDV\system\DriverSet\ConnecteurAD" version="4.0.0.0">AD</product>
- <contact>Novell, Inc.</contact>
- </source>
- <output>
- <instance class-name="user" event-id="0" src-dn="CN=user Test (2981),OU=Utilisateurs_Actifs,OU=MYDOMAIN,DC=nim2012,DC=intra">
- <association>4bbd396e31166841a908b7970c82ae97</association>
- </instance>
- <status event-id="0" level="success"/>
- </output>
- </nds>
- [12/18/2014 14:20:46.727] ConnecteurAD ST: Applying policy: NOVLADATRK-itp-Publish.
- [12/18/2014 14:20:46.727] ConnecteurAD ST: Applying to instance #1.
- [12/18/2014 14:20:46.727] ConnecteurAD ST: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled or wrong object class'.
- [12/18/2014 14:20:46.727] ConnecteurAD ST: Rule selected.
- [12/18/2014 14:20:46.727] ConnecteurAD ST: Applying rule 'AccountTracking - disregard if disabled or wrong object class'.
- [12/18/2014 14:20:46.727] ConnecteurAD ST: Action: do-if().
- [12/18/2014 14:20:46.727] ConnecteurAD ST: Evaluating conditions.
- [12/18/2014 14:20:46.727] ConnecteurAD ST: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
- [12/18/2014 14:20:46.727] ConnecteurAD ST: Performing else actions.
- [12/18/2014 14:20:46.727] ConnecteurAD ST: Action: do-if().
- [12/18/2014 14:20:46.727] ConnecteurAD ST: Evaluating conditions.
- [12/18/2014 14:20:46.727] ConnecteurAD ST: (if-class-name available) = TRUE.
- [12/18/2014 14:20:46.727] ConnecteurAD ST: Performing if actions.
- [12/18/2014 14:20:46.727] ConnecteurAD ST: Action: do-for-each(arg-node-set(token-global-variable("drv.acctTrk.objectClass"))).
- [12/18/2014 14:20:46.727] ConnecteurAD ST: arg-node-set(token-global-variable("drv.acctTrk.objectClass"))
- [12/18/2014 14:20:46.727] ConnecteurAD ST: token-global-variable("drv.acctTrk.objectClass")
- [12/18/2014 14:20:46.727] ConnecteurAD ST: Token Value: {"user"}.
- [12/18/2014 14:20:46.727] ConnecteurAD ST: Arg Value: {"user"}.
- [12/18/2014 14:20:46.727] ConnecteurAD ST: Performing actions for local-variable(current-node) = "user".
- [12/18/2014 14:20:46.727] ConnecteurAD ST: Action: do-if().
- [12/18/2014 14:20:46.727] ConnecteurAD ST: Evaluating conditions.
- [12/18/2014 14:20:46.727] ConnecteurAD ST: Expanded variable reference '$current-node$' to 'user'.
- [12/18/2014 14:20:46.727] ConnecteurAD ST: (if-class-name equal "$current-node$") = TRUE.
- [12/18/2014 14:20:46.727] ConnecteurAD ST: Performing if actions.
- [12/18/2014 14:20:46.727] ConnecteurAD ST: Action: do-set-local-variable("pass",scope="policy","true").
- [12/18/2014 14:20:46.727] ConnecteurAD ST: arg-string("true")
- [12/18/2014 14:20:46.727] ConnecteurAD ST: token-text("true")
- [12/18/2014 14:20:46.727] ConnecteurAD ST: Arg Value: "true".
- [12/18/2014 14:20:46.727] ConnecteurAD ST: Action: do-if().
- [12/18/2014 14:20:46.727] ConnecteurAD ST: Evaluating conditions.
- [12/18/2014 14:20:46.727] ConnecteurAD ST: (if-local-variable 'pass' not-available) = FALSE.
- [12/18/2014 14:20:46.727] ConnecteurAD ST: Performing else actions.
- [12/18/2014 14:20:46.727] ConnecteurAD ST: Evaluating selection criteria for rule 'AccountTracking - on add-association sync the operation-properties to status operations'.
- [12/18/2014 14:20:46.727] ConnecteurAD ST: (if-operation equal "add-association") = FALSE.
- [12/18/2014 14:20:46.727] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.727] ConnecteurAD ST: Evaluating selection criteria for rule 'AccountTracking - Query for destination DN using Association'.
- [12/18/2014 14:20:46.727] ConnecteurAD ST: (if-operation match "modify|delete|move|rename") = FALSE.
- [12/18/2014 14:20:46.727] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.727] ConnecteurAD ST: Evaluating selection criteria for rule 'AccountTracking - add interested properties to current doc for future use.'.
- [12/18/2014 14:20:46.727] ConnecteurAD ST: (if-operation match "add|modify|delete|rename|move|status") = FALSE.
- [12/18/2014 14:20:46.728] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.728] ConnecteurAD ST: Evaluating selection criteria for rule 'AccountTracking - Initialize status properties on published events'.
- [12/18/2014 14:20:46.728] ConnecteurAD ST: (if-operation match "add|modify|delete|rename|move") = FALSE.
- [12/18/2014 14:20:46.728] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.728] ConnecteurAD ST: Applying to status #2.
- [12/18/2014 14:20:46.728] ConnecteurAD ST: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled or wrong object class'.
- [12/18/2014 14:20:46.728] ConnecteurAD ST: Rule selected.
- [12/18/2014 14:20:46.728] ConnecteurAD ST: Applying rule 'AccountTracking - disregard if disabled or wrong object class'.
- [12/18/2014 14:20:46.728] ConnecteurAD ST: Action: do-if().
- [12/18/2014 14:20:46.728] ConnecteurAD ST: Evaluating conditions.
- [12/18/2014 14:20:46.728] ConnecteurAD ST: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
- [12/18/2014 14:20:46.728] ConnecteurAD ST: Performing else actions.
- [12/18/2014 14:20:46.728] ConnecteurAD ST: Action: do-if().
- [12/18/2014 14:20:46.728] ConnecteurAD ST: Evaluating conditions.
- [12/18/2014 14:20:46.728] ConnecteurAD ST: (if-class-name available) = FALSE.
- [12/18/2014 14:20:46.728] ConnecteurAD ST: Performing else actions.
- [12/18/2014 14:20:46.728] ConnecteurAD ST: Evaluating selection criteria for rule 'AccountTracking - on add-association sync the operation-properties to status operations'.
- [12/18/2014 14:20:46.728] ConnecteurAD ST: (if-operation equal "add-association") = FALSE.
- [12/18/2014 14:20:46.728] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.728] ConnecteurAD ST: Evaluating selection criteria for rule 'AccountTracking - Query for destination DN using Association'.
- [12/18/2014 14:20:46.728] ConnecteurAD ST: (if-operation match "modify|delete|move|rename") = FALSE.
- [12/18/2014 14:20:46.728] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.728] ConnecteurAD ST: Evaluating selection criteria for rule 'AccountTracking - add interested properties to current doc for future use.'.
- [12/18/2014 14:20:46.728] ConnecteurAD ST: (if-operation match "add|modify|delete|rename|move|status") = TRUE.
- [12/18/2014 14:20:46.728] ConnecteurAD ST: Rule selected.
- [12/18/2014 14:20:46.728] ConnecteurAD ST: Applying rule 'AccountTracking - add interested properties to current doc for future use.'.
- [12/18/2014 14:20:46.728] ConnecteurAD ST: Action: do-for-each(arg-node-set(token-global-variable("drv.acctTrk.identifiers"))).
- [12/18/2014 14:20:46.728] ConnecteurAD ST: arg-node-set(token-global-variable("drv.acctTrk.identifiers"))
- [12/18/2014 14:20:46.728] ConnecteurAD ST: token-global-variable("drv.acctTrk.identifiers")
- [12/18/2014 14:20:46.728] ConnecteurAD ST: Token Value: {"sAMAccountName","userPrincipalName","LDAPDN","association"}.
- [12/18/2014 14:20:46.728] ConnecteurAD ST: Arg Value: {"sAMAccountName","userPrincipalName","LDAPDN","association"}.
- [12/18/2014 14:20:46.728] ConnecteurAD ST: Performing actions for local-variable(current-node) = "sAMAccountName".
- [12/18/2014 14:20:46.728] ConnecteurAD ST: Action: do-if().
- [12/18/2014 14:20:46.728] ConnecteurAD ST: Evaluating conditions.
- [12/18/2014 14:20:46.728] ConnecteurAD ST: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
- [12/18/2014 14:20:46.728] ConnecteurAD ST: Performing else actions.
- [12/18/2014 14:20:46.728] ConnecteurAD ST: Action: do-if().
- [12/18/2014 14:20:46.728] ConnecteurAD ST: Evaluating conditions.
- [12/18/2014 14:20:46.728] ConnecteurAD ST: (if-local-variable 'current-node' equal "association") = FALSE.
- [12/18/2014 14:20:46.728] ConnecteurAD ST: Performing else actions.
- [12/18/2014 14:20:46.728] ConnecteurAD ST: Action: do-if().
- [12/18/2014 14:20:46.728] ConnecteurAD ST: Evaluating conditions.
- [12/18/2014 14:20:46.728] ConnecteurAD ST: Expanded variable reference '$current-node$' to 'sAMAccountName'.
- [12/18/2014 14:20:46.728] ConnecteurAD ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
- [12/18/2014 14:20:46.728] ConnecteurAD ST: Expanded variable reference '$current-node$' to 'sAMAccountName'.
- [12/18/2014 14:20:46.728] ConnecteurAD ST: (if-op-attr '$current-node$' available) = FALSE.
- [12/18/2014 14:20:46.728] ConnecteurAD ST: Performing else actions.
- [12/18/2014 14:20:46.728] ConnecteurAD ST: Performing actions for local-variable(current-node) = "userPrincipalName".
- [12/18/2014 14:20:46.728] ConnecteurAD ST: Action: do-if().
- [12/18/2014 14:20:46.728] ConnecteurAD ST: Evaluating conditions.
- [12/18/2014 14:20:46.728] ConnecteurAD ST: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
- [12/18/2014 14:20:46.728] ConnecteurAD ST: Performing else actions.
- [12/18/2014 14:20:46.728] ConnecteurAD ST: Action: do-if().
- [12/18/2014 14:20:46.728] ConnecteurAD ST: Evaluating conditions.
- [12/18/2014 14:20:46.728] ConnecteurAD ST: (if-local-variable 'current-node' equal "association") = FALSE.
- [12/18/2014 14:20:46.728] ConnecteurAD ST: Performing else actions.
- [12/18/2014 14:20:46.728] ConnecteurAD ST: Action: do-if().
- [12/18/2014 14:20:46.728] ConnecteurAD ST: Evaluating conditions.
- [12/18/2014 14:20:46.728] ConnecteurAD ST: Expanded variable reference '$current-node$' to 'userPrincipalName'.
- [12/18/2014 14:20:46.728] ConnecteurAD ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
- [12/18/2014 14:20:46.728] ConnecteurAD ST: Expanded variable reference '$current-node$' to 'userPrincipalName'.
- [12/18/2014 14:20:46.728] ConnecteurAD ST: (if-op-attr '$current-node$' available) = FALSE.
- [12/18/2014 14:20:46.729] ConnecteurAD ST: Performing else actions.
- [12/18/2014 14:20:46.729] ConnecteurAD ST: Performing actions for local-variable(current-node) = "LDAPDN".
- [12/18/2014 14:20:46.729] ConnecteurAD ST: Action: do-if().
- [12/18/2014 14:20:46.729] ConnecteurAD ST: Evaluating conditions.
- [12/18/2014 14:20:46.729] ConnecteurAD ST: (if-local-variable 'current-node' equal "LDAPDN") = TRUE.
- [12/18/2014 14:20:46.729] ConnecteurAD ST: Expanded variable reference '$current-node$' to 'LDAPDN'.
- [12/18/2014 14:20:46.729] ConnecteurAD ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
- [12/18/2014 14:20:46.729] ConnecteurAD ST: (if-src-dn available) = FALSE.
- [12/18/2014 14:20:46.729] ConnecteurAD ST: Performing else actions.
- [12/18/2014 14:20:46.729] ConnecteurAD ST: Action: do-if().
- [12/18/2014 14:20:46.729] ConnecteurAD ST: Evaluating conditions.
- [12/18/2014 14:20:46.729] ConnecteurAD ST: (if-local-variable 'current-node' equal "association") = FALSE.
- [12/18/2014 14:20:46.729] ConnecteurAD ST: Performing else actions.
- [12/18/2014 14:20:46.729] ConnecteurAD ST: Action: do-if().
- [12/18/2014 14:20:46.729] ConnecteurAD ST: Evaluating conditions.
- [12/18/2014 14:20:46.729] ConnecteurAD ST: Expanded variable reference '$current-node$' to 'LDAPDN'.
- [12/18/2014 14:20:46.729] ConnecteurAD ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
- [12/18/2014 14:20:46.729] ConnecteurAD ST: Expanded variable reference '$current-node$' to 'LDAPDN'.
- [12/18/2014 14:20:46.729] ConnecteurAD ST: (if-op-attr '$current-node$' available) = FALSE.
- [12/18/2014 14:20:46.729] ConnecteurAD ST: Performing else actions.
- [12/18/2014 14:20:46.729] ConnecteurAD ST: Performing actions for local-variable(current-node) = "association".
- [12/18/2014 14:20:46.729] ConnecteurAD ST: Action: do-if().
- [12/18/2014 14:20:46.729] ConnecteurAD ST: Evaluating conditions.
- [12/18/2014 14:20:46.729] ConnecteurAD ST: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
- [12/18/2014 14:20:46.729] ConnecteurAD ST: Performing else actions.
- [12/18/2014 14:20:46.729] ConnecteurAD ST: Action: do-if().
- [12/18/2014 14:20:46.729] ConnecteurAD ST: Evaluating conditions.
- [12/18/2014 14:20:46.729] ConnecteurAD ST: (if-local-variable 'current-node' equal "association") = TRUE.
- [12/18/2014 14:20:46.729] ConnecteurAD ST: Expanded variable reference '$current-node$' to 'association'.
- [12/18/2014 14:20:46.729] ConnecteurAD ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
- [12/18/2014 14:20:46.729] ConnecteurAD ST: (if-association available) = FALSE.
- [12/18/2014 14:20:46.729] ConnecteurAD ST: Performing else actions.
- [12/18/2014 14:20:46.729] ConnecteurAD ST: Action: do-if().
- [12/18/2014 14:20:46.729] ConnecteurAD ST: Evaluating conditions.
- [12/18/2014 14:20:46.729] ConnecteurAD ST: Expanded variable reference '$current-node$' to 'association'.
- [12/18/2014 14:20:46.729] ConnecteurAD ST: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
- [12/18/2014 14:20:46.729] ConnecteurAD ST: Expanded variable reference '$current-node$' to 'association'.
- [12/18/2014 14:20:46.729] ConnecteurAD ST: (if-op-attr '$current-node$' available) = FALSE.
- [12/18/2014 14:20:46.729] ConnecteurAD ST: Performing else actions.
- [12/18/2014 14:20:46.729] ConnecteurAD ST: Evaluating selection criteria for rule 'AccountTracking - Initialize status properties on published events'.
- [12/18/2014 14:20:46.729] ConnecteurAD ST: (if-operation match "add|modify|delete|rename|move") = FALSE.
- [12/18/2014 14:20:46.729] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.729] ConnecteurAD ST: Policy returned:
- [12/18/2014 14:20:46.729] ConnecteurAD ST:
- <nds dtdversion="1.1" ndsversion="8.7">
- <source>
- <product asn1id="" build="20120330_120000" instance="\IDV\system\DriverSet\ConnecteurAD" version="4.0.0.0">AD</product>
- <contact>Novell, Inc.</contact>
- </source>
- <output>
- <instance class-name="user" event-id="0" src-dn="CN=user Test (2981),OU=Utilisateurs_Actifs,OU=MYDOMAIN,DC=nim2012,DC=intra">
- <association>4bbd396e31166841a908b7970c82ae97</association>
- </instance>
- <status event-id="0" level="success"/>
- </output>
- </nds>
- [12/18/2014 14:20:46.729] ConnecteurAD ST: Applying policy: NOVLADATRK-itp-WriteAccounts.
- [12/18/2014 14:20:46.729] ConnecteurAD ST: Applying to instance #1.
- [12/18/2014 14:20:46.729] ConnecteurAD ST: Evaluating selection criteria for rule 'AccountTracking - Initialize Realm Mapping'.
- [12/18/2014 14:20:46.729] ConnecteurAD ST: (if-global-variable 'drv.acctTrk.enable' equal "true") = TRUE.
- [12/18/2014 14:20:46.729] ConnecteurAD ST: (if-global-variable 'drv.acctTrk.mode' equal "fanout") = FALSE.
- [12/18/2014 14:20:46.729] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.729] ConnecteurAD ST: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled'.
- [12/18/2014 14:20:46.729] ConnecteurAD ST: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
- [12/18/2014 14:20:46.729] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.729] ConnecteurAD ST: Evaluating selection criteria for rule 'AccountTracking - query DirXML-Accounts Attribute'.
- [12/18/2014 14:20:46.729] ConnecteurAD ST: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
- [12/18/2014 14:20:46.729] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.729] ConnecteurAD ST: Evaluating selection criteria for rule 'AccountTracking - remove Dirxml-Account values on regular delete operation or revoke'.
- [12/18/2014 14:20:46.729] ConnecteurAD ST: (if-operation match "delete|remove-association") = FALSE.
- [12/18/2014 14:20:46.729] ConnecteurAD ST: (if-operation equal "status") = FALSE.
- [12/18/2014 14:20:46.729] ConnecteurAD ST: (if-operation equal "status") = FALSE.
- [12/18/2014 14:20:46.729] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.729] ConnecteurAD ST: Evaluating selection criteria for rule 'AccountTracking - update DirXMLAccounts attribute on regular operations'.
- [12/18/2014 14:20:46.729] ConnecteurAD ST: (if-op-property 'AccountTracking-Operation' not-available) = TRUE.
- [12/18/2014 14:20:46.729] ConnecteurAD ST: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
- [12/18/2014 14:20:46.729] ConnecteurAD ST: (if-operation equal "status") = FALSE.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Evaluating selection criteria for rule 'AccountTracking - update DirXMLAccounts attribute on mapped operations'.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: (if-xpath true "operation-data/account-tracking-operation") = FALSE.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: (if-xpath true "operation-data/account-tracking-operation") = FALSE.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Applying to status #2.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Evaluating selection criteria for rule 'AccountTracking - Initialize Realm Mapping'.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: (if-global-variable 'drv.acctTrk.enable' equal "true") = TRUE.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: (if-global-variable 'drv.acctTrk.mode' equal "fanout") = FALSE.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled'.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Evaluating selection criteria for rule 'AccountTracking - query DirXML-Accounts Attribute'.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Evaluating selection criteria for rule 'AccountTracking - remove Dirxml-Account values on regular delete operation or revoke'.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: (if-operation match "delete|remove-association") = FALSE.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: (if-operation equal "status") = TRUE.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: (if-operation equal "status") = TRUE.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Evaluating selection criteria for rule 'AccountTracking - update DirXMLAccounts attribute on regular operations'.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: (if-op-property 'AccountTracking-Operation' not-available) = TRUE.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: (if-operation equal "status") = TRUE.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: (if-xpath true "./@level='success' or ./@level='warning'") = TRUE.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: (if-op-property 'AccountTracking-Operation' available) = FALSE.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Evaluating selection criteria for rule 'AccountTracking - update DirXMLAccounts attribute on mapped operations'.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: (if-xpath true "operation-data/account-tracking-operation") = FALSE.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: (if-xpath true "operation-data/account-tracking-operation") = FALSE.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Policy returned:
- [12/18/2014 14:20:46.730] ConnecteurAD ST:
- <nds dtdversion="1.1" ndsversion="8.7">
- <source>
- <product asn1id="" build="20120330_120000" instance="\IDV\system\DriverSet\ConnecteurAD" version="4.0.0.0">AD</product>
- <contact>Novell, Inc.</contact>
- </source>
- <output>
- <instance class-name="user" event-id="0" src-dn="CN=user Test (2981),OU=Utilisateurs_Actifs,OU=MYDOMAIN,DC=nim2012,DC=intra">
- <association>4bbd396e31166841a908b7970c82ae97</association>
- </instance>
- <status event-id="0" level="success"/>
- </output>
- </nds>
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Applying policy: NOVLADDCFG-itp-SubscriberUserAdd.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Applying to instance #1.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Evaluating selection criteria for rule 'Populate DirXML-ADContext on initial user add'.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: (if-operation equal "add-association") = FALSE.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Applying to status #2.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Evaluating selection criteria for rule 'Populate DirXML-ADContext on initial user add'.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: (if-operation equal "add-association") = FALSE.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Policy returned:
- [12/18/2014 14:20:46.730] ConnecteurAD ST:
- <nds dtdversion="1.1" ndsversion="8.7">
- <source>
- <product asn1id="" build="20120330_120000" instance="\IDV\system\DriverSet\ConnecteurAD" version="4.0.0.0">AD</product>
- <contact>Novell, Inc.</contact>
- </source>
- <output>
- <instance class-name="user" event-id="0" src-dn="CN=user Test (2981),OU=Utilisateurs_Actifs,OU=MYDOMAIN,DC=nim2012,DC=intra">
- <association>4bbd396e31166841a908b7970c82ae97</association>
- </instance>
- <status event-id="0" level="success"/>
- </output>
- </nds>
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Applying policy: NOVLADDCFG-itp-FormatConversions.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Applying to instance #1.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Evaluating selection criteria for rule 'streetAddress: Convert CR-LF to LF'.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Rule selected.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Applying rule 'streetAddress: Convert CR-LF to LF'.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Action: do-reformat-op-attr("streetAddress",token-replace-all("\r\n","\r",token-local-variable("current-value"))).
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Evaluating selection criteria for rule 'logonHours: Convert to Login Allowed Time Map form'.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Rule selected.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Applying rule 'logonHours: Convert to Login Allowed Time Map form'.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Action: do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2eDir($current-value)")).
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Evaluating selection criteria for rule 'accountExpires: Convert to Identity Vault time format'.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Rule selected.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Applying rule 'accountExpires: Convert to Identity Vault time format'.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Action: do-reformat-op-attr("accountExpires",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Evaluating selection criteria for rule 'lockedByIntruder: Enable Locked By Intruder'.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: (if-operation equal "modify") = FALSE.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Evaluating selection criteria for rule 'lockedByIntruder: Disable Locked By Intruder'.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: (if-operation equal "modify") = FALSE.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Evaluating selection criteria for rule 'lockoutTime: Convert to Identity Vault time format'.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Rule selected.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Applying rule 'lockoutTime: Convert to Identity Vault time format'.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Action: do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Applying to status #2.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Evaluating selection criteria for rule 'streetAddress: Convert CR-LF to LF'.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Rule selected.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Applying rule 'streetAddress: Convert CR-LF to LF'.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Action: do-reformat-op-attr("streetAddress",token-replace-all("\r\n","\r",token-local-variable("current-value"))).
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Evaluating selection criteria for rule 'logonHours: Convert to Login Allowed Time Map form'.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Rule selected.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Applying rule 'logonHours: Convert to Login Allowed Time Map form'.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Action: do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2eDir($current-value)")).
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Evaluating selection criteria for rule 'accountExpires: Convert to Identity Vault time format'.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Rule selected.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Applying rule 'accountExpires: Convert to Identity Vault time format'.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Action: do-reformat-op-attr("accountExpires",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Evaluating selection criteria for rule 'lockedByIntruder: Enable Locked By Intruder'.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: (if-operation equal "modify") = FALSE.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: Evaluating selection criteria for rule 'lockedByIntruder: Disable Locked By Intruder'.
- [12/18/2014 14:20:46.730] ConnecteurAD ST: (if-operation equal "modify") = FALSE.
- [12/18/2014 14:20:46.731] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.731] ConnecteurAD ST: Evaluating selection criteria for rule 'lockoutTime: Convert to Identity Vault time format'.
- [12/18/2014 14:20:46.731] ConnecteurAD ST: Rule selected.
- [12/18/2014 14:20:46.731] ConnecteurAD ST: Applying rule 'lockoutTime: Convert to Identity Vault time format'.
- [12/18/2014 14:20:46.731] ConnecteurAD ST: Action: do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
- [12/18/2014 14:20:46.731] ConnecteurAD ST: Policy returned:
- [12/18/2014 14:20:46.731] ConnecteurAD ST:
- <nds dtdversion="1.1" ndsversion="8.7">
- <source>
- <product asn1id="" build="20120330_120000" instance="\IDV\system\DriverSet\ConnecteurAD" version="4.0.0.0">AD</product>
- <contact>Novell, Inc.</contact>
- </source>
- <output>
- <instance class-name="user" event-id="0" src-dn="CN=user Test (2981),OU=Utilisateurs_Actifs,OU=MYDOMAIN,DC=nim2012,DC=intra">
- <association>4bbd396e31166841a908b7970c82ae97</association>
- </instance>
- <status event-id="0" level="success"/>
- </output>
- </nds>
- [12/18/2014 14:20:46.731] ConnecteurAD ST: Applying policy: NOVLDATACOLL-itp-DataCollectionQuerySupport.
- [12/18/2014 14:20:46.731] ConnecteurAD ST: Applying to instance #1.
- [12/18/2014 14:20:46.731] ConnecteurAD ST: Evaluating selection criteria for rule 'Rename @association-ref to @association and change @type from "dn" to "{dn}"'.
- [12/18/2014 14:20:46.731] ConnecteurAD ST: (if-operation equal "instance") = TRUE.
- [12/18/2014 14:20:46.731] ConnecteurAD ST: (if-op-property 'data-collection-query' equal "true") = FALSE.
- [12/18/2014 14:20:46.731] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.731] ConnecteurAD ST: Applying to status #2.
- [12/18/2014 14:20:46.731] ConnecteurAD ST: Evaluating selection criteria for rule 'Rename @association-ref to @association and change @type from "dn" to "{dn}"'.
- [12/18/2014 14:20:46.731] ConnecteurAD ST: (if-operation equal "instance") = FALSE.
- [12/18/2014 14:20:46.731] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.731] ConnecteurAD ST: Policy returned:
- [12/18/2014 14:20:46.731] ConnecteurAD ST:
- <nds dtdversion="1.1" ndsversion="8.7">
- <source>
- <product asn1id="" build="20120330_120000" instance="\IDV\system\DriverSet\ConnecteurAD" version="4.0.0.0">AD</product>
- <contact>Novell, Inc.</contact>
- </source>
- <output>
- <instance class-name="user" event-id="0" src-dn="CN=user Test (2981),OU=Utilisateurs_Actifs,OU=MYDOMAIN,DC=nim2012,DC=intra">
- <association>4bbd396e31166841a908b7970c82ae97</association>
- </instance>
- <status event-id="0" level="success"/>
- </output>
- </nds>
- [12/18/2014 14:20:46.731] ConnecteurAD ST: Applying policy: NOVLPWDSYNC-itp-EmailOnFailedPwdSub.
- [12/18/2014 14:20:46.731] ConnecteurAD ST: Applying to instance #1.
- [12/18/2014 14:20:46.731] ConnecteurAD ST: Evaluating selection criteria for rule 'Send e-mail on a failure when subscribing to passwords'.
- [12/18/2014 14:20:46.731] ConnecteurAD ST: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = FALSE.
- [12/18/2014 14:20:46.731] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.731] ConnecteurAD ST: Evaluating selection criteria for rule 'Send e-mail on failure to reset connected system password using the Identity Vault password'.
- [12/18/2014 14:20:46.731] ConnecteurAD ST: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = FALSE.
- [12/18/2014 14:20:46.731] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.731] ConnecteurAD ST: Applying to status #2.
- [12/18/2014 14:20:46.731] ConnecteurAD ST: Evaluating selection criteria for rule 'Send e-mail on a failure when subscribing to passwords'.
- [12/18/2014 14:20:46.731] ConnecteurAD ST: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = FALSE.
- [12/18/2014 14:20:46.731] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.731] ConnecteurAD ST: Evaluating selection criteria for rule 'Send e-mail on failure to reset connected system password using the Identity Vault password'.
- [12/18/2014 14:20:46.731] ConnecteurAD ST: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = FALSE.
- [12/18/2014 14:20:46.731] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.731] ConnecteurAD ST: Policy returned:
- [12/18/2014 14:20:46.731] ConnecteurAD ST:
- <nds dtdversion="1.1" ndsversion="8.7">
- <source>
- <product asn1id="" build="20120330_120000" instance="\IDV\system\DriverSet\ConnecteurAD" version="4.0.0.0">AD</product>
- <contact>Novell, Inc.</contact>
- </source>
- <output>
- <instance class-name="user" event-id="0" src-dn="CN=user Test (2981),OU=Utilisateurs_Actifs,OU=MYDOMAIN,DC=nim2012,DC=intra">
- <association>4bbd396e31166841a908b7970c82ae97</association>
- </instance>
- <status event-id="0" level="success"/>
- </output>
- </nds>
- [12/18/2014 14:20:46.731] ConnecteurAD ST: Applying policy: ADMigration-pub-flagControl.
- [12/18/2014 14:20:46.731] ConnecteurAD ST: Applying to instance #1.
- [12/18/2014 14:20:46.731] ConnecteurAD ST: Evaluating selection criteria for rule 'users AD flag veto'.
- [12/18/2014 14:20:46.731] ConnecteurAD ST: (if-class-name equal "User") = TRUE.
- [12/18/2014 14:20:46.731] ConnecteurAD ST: Query from policy
- [12/18/2014 14:20:46.731] ConnecteurAD ST:
- <nds dtdversion="4.0" ndsversion="8.x">
- <source>
- <product edition="Standard" version="4.0.1.0">DirXML</product>
- <contact>Novell, Inc.</contact>
- </source>
- <input>
- <query class-name="user" dest-dn="CN=user Test (2981),OU=Utilisateurs_Actifs,OU=MYDOMAIN,DC=nim2012,DC=intra" scope="entry">
- <association>4bbd396e31166841a908b7970c82ae97</association>
- <read-attr attr-name="adminDescription"/>
- </query>
- </input>
- </nds>
- [12/18/2014 14:20:46.731] ConnecteurAD ST: Submitting document to subscriber shim:
- [12/18/2014 14:20:46.731] ConnecteurAD ST:
- <nds dtdversion="4.0" ndsversion="8.x">
- <source>
- <product edition="Standard" version="4.0.1.0">DirXML</product>
- <contact>Novell, Inc.</contact>
- </source>
- <input>
- <query class-name="user" dest-dn="CN=user Test (2981),OU=Utilisateurs_Actifs,OU=MYDOMAIN,DC=nim2012,DC=intra" event-id="0" scope="entry">
- <association>4bbd396e31166841a908b7970c82ae97</association>
- <read-attr attr-name="adminDescription"/>
- </query>
- </input>
- </nds>
- [12/18/2014 14:20:46.731] ConnecteurAD ST: Remote Interface Driver: Sending...
- [12/18/2014 14:20:46.731] ConnecteurAD ST:
- <nds dtdversion="4.0" ndsversion="8.x">
- <source>
- <product edition="Standard" version="4.0.1.0">DirXML</product>
- <contact>Novell, Inc.</contact>
- </source>
- <input>
- <query class-name="user" dest-dn="CN=user Test (2981),OU=Utilisateurs_Actifs,OU=MYDOMAIN,DC=nim2012,DC=intra" event-id="0" scope="entry">
- <association>4bbd396e31166841a908b7970c82ae97</association>
- <read-attr attr-name="adminDescription"/>
- </query>
- </input>
- </nds>
- [12/18/2014 14:20:46.732] ConnecteurAD ST: Remote Interface Driver: Document sent.
- [12/18/2014 14:20:46.764] ConnecteurAD :Remote Interface Driver: Received.
- [12/18/2014 14:20:46.764] ConnecteurAD :
- <nds dtdversion="1.1" ndsversion="8.7">
- <source>
- <product asn1id="" build="20120330_120000" instance="\IDV\system\DriverSet\ConnecteurAD" version="4.0.0.0">AD</product>
- <contact>Novell, Inc.</contact>
- </source>
- <output>
- <instance class-name="user" event-id="0" src-dn="CN=user Test (2981),OU=Utilisateurs_Actifs,OU=MYDOMAIN,DC=nim2012,DC=intra">
- <association>4bbd396e31166841a908b7970c82ae97</association>
- <attr attr-name="adminDescription">
- <value naming="true" type="string">nonmigrated</value>
- </attr>
- </instance>
- <status event-id="0" level="success"/>
- </output>
- </nds>
- [12/18/2014 14:20:46.764] ConnecteurAD :Remote Interface Driver: Received document for subscriber channel
- [12/18/2014 14:20:46.764] ConnecteurAD :Remote Interface Driver: Waiting for receive...
- [12/18/2014 14:20:46.765] ConnecteurAD ST: SubscriptionShim.execute() returned:
- [12/18/2014 14:20:46.765] ConnecteurAD ST:
- <nds dtdversion="1.1" ndsversion="8.7">
- <source>
- <product asn1id="" build="20120330_120000" instance="\IDV\system\DriverSet\ConnecteurAD" version="4.0.0.0">AD</product>
- <contact>Novell, Inc.</contact>
- </source>
- <output>
- <instance class-name="user" event-id="0" src-dn="CN=user Test (2981),OU=Utilisateurs_Actifs,OU=MYDOMAIN,DC=nim2012,DC=intra">
- <association>4bbd396e31166841a908b7970c82ae97</association>
- <attr attr-name="adminDescription">
- <value naming="true" type="string">nonmigrated</value>
- </attr>
- </instance>
- <status event-id="0" level="success"/>
- </output>
- </nds>
- [12/18/2014 14:20:46.765] ConnecteurAD ST: Query from policy result
- [12/18/2014 14:20:46.765] ConnecteurAD ST:
- <nds dtdversion="1.1" ndsversion="8.7">
- <source>
- <product asn1id="" build="20120330_120000" instance="\IDV\system\DriverSet\ConnecteurAD" version="4.0.0.0">AD</product>
- <contact>Novell, Inc.</contact>
- </source>
- <output>
- <instance class-name="user" event-id="0" src-dn="CN=user Test (2981),OU=Utilisateurs_Actifs,OU=MYDOMAIN,DC=nim2012,DC=intra">
- <association>4bbd396e31166841a908b7970c82ae97</association>
- <attr attr-name="adminDescription">
- <value naming="true" type="string">nonmigrated</value>
- </attr>
- </instance>
- <status event-id="0" level="success"/>
- </output>
- </nds>
- [12/18/2014 14:20:46.765] ConnecteurAD ST: (if-attr 'adminDescription' equal "nonmigrated") = TRUE.
- [12/18/2014 14:20:46.765] ConnecteurAD ST: Rule selected.
- [12/18/2014 14:20:46.765] ConnecteurAD ST: Applying rule 'users AD flag veto'.
- [12/18/2014 14:20:46.765] ConnecteurAD ST: Action: do-veto().
- [12/18/2014 14:20:46.765] ConnecteurAD ST: Applying to status #2.
- [12/18/2014 14:20:46.765] ConnecteurAD ST: Evaluating selection criteria for rule 'users AD flag veto'.
- [12/18/2014 14:20:46.765] ConnecteurAD ST: (if-class-name equal "User") = FALSE.
- [12/18/2014 14:20:46.765] ConnecteurAD ST: (if-class-name equal "user") = FALSE.
- [12/18/2014 14:20:46.765] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.765] ConnecteurAD ST: Policy returned:
- [12/18/2014 14:20:46.765] ConnecteurAD ST:
- <nds dtdversion="1.1" ndsversion="8.7">
- <source>
- <product asn1id="" build="20120330_120000" instance="\IDV\system\DriverSet\ConnecteurAD" version="4.0.0.0">AD</product>
- <contact>Novell, Inc.</contact>
- </source>
- <output>
- <status event-id="0" level="success"/>
- </output>
- </nds>
- [12/18/2014 14:20:46.765] ConnecteurAD ST: Applying schema mapping policies to input.
- [12/18/2014 14:20:46.765] ConnecteurAD ST: Applying policy: NOVLDATACOLL-smp-SkipSchemaMapping.
- [12/18/2014 14:20:46.765] ConnecteurAD ST: Applying to status #1.
- [12/18/2014 14:20:46.766] ConnecteurAD ST: Evaluating selection criteria for rule 'skip'.
- [12/18/2014 14:20:46.766] ConnecteurAD ST: (if-operation equal "instance") = FALSE.
- [12/18/2014 14:20:46.766] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.766] ConnecteurAD ST: Evaluating selection criteria for rule 'restore'.
- [12/18/2014 14:20:46.766] ConnecteurAD ST: (if-op-property 'restore-attr-names' equal "true") = FALSE.
- [12/18/2014 14:20:46.766] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.766] ConnecteurAD ST: Policy returned:
- [12/18/2014 14:20:46.766] ConnecteurAD ST:
- <nds dtdversion="1.1" ndsversion="8.7">
- <source>
- <product asn1id="" build="20120330_120000" instance="\IDV\system\DriverSet\ConnecteurAD" version="4.0.0.0">AD</product>
- <contact>Novell, Inc.</contact>
- </source>
- <output>
- <status event-id="0" level="success"/>
- </output>
- </nds>
- [12/18/2014 14:20:46.766] ConnecteurAD ST: Applying policy: NOVLADDCFG-smp.
- [12/18/2014 14:20:46.766] ConnecteurAD ST: Applying policy: NOVLDATACOLL-smp-SkipSchemaMapping.
- [12/18/2014 14:20:46.766] ConnecteurAD ST: Applying to status #1.
- [12/18/2014 14:20:46.766] ConnecteurAD ST: Evaluating selection criteria for rule 'skip'.
- [12/18/2014 14:20:46.766] ConnecteurAD ST: (if-operation equal "instance") = FALSE.
- [12/18/2014 14:20:46.766] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.766] ConnecteurAD ST: Evaluating selection criteria for rule 'restore'.
- [12/18/2014 14:20:46.766] ConnecteurAD ST: (if-op-property 'restore-attr-names' equal "true") = FALSE.
- [12/18/2014 14:20:46.766] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.766] ConnecteurAD ST: Policy returned:
- [12/18/2014 14:20:46.766] ConnecteurAD ST:
- <nds dtdversion="1.1" ndsversion="8.7">
- <source>
- <product asn1id="" build="20120330_120000" instance="\IDV\system\DriverSet\ConnecteurAD" version="4.0.0.0">AD</product>
- <contact>Novell, Inc.</contact>
- </source>
- <output>
- <status event-id="0" level="success"/>
- </output>
- </nds>
- [12/18/2014 14:20:46.766] ConnecteurAD ST: Resolving association references.
- [12/18/2014 14:20:46.766] ConnecteurAD ST: Query from policy result
- [12/18/2014 14:20:46.766] ConnecteurAD ST:
- <nds dtdversion="1.1" ndsversion="8.7">
- <source>
- <product asn1id="" build="20120330_120000" instance="\IDV\system\DriverSet\ConnecteurAD" version="4.0.0.0">AD</product>
- <contact>Novell, Inc.</contact>
- </source>
- <output>
- <status event-id="0" level="success"/>
- </output>
- </nds>
- [12/18/2014 14:20:46.766] ConnecteurAD ST: No matches found.
- [12/18/2014 14:20:46.766] ConnecteurAD ST:Policy returned:
- [12/18/2014 14:20:46.766] ConnecteurAD ST:
- <nds dtdversion="4.0" ndsversion="8.x">
- <source>
- <product edition="Standard" version="4.0.1.0">DirXML</product>
- <contact>Novell, Inc.</contact>
- </source>
- <input>
- <add cached-time="20141218132046.243Z" class-name="User" event-id="iam-edir-test#20141218132046#1#1:534f2446-3dd2-42be-4489-46244f53d23d" qualified-src-dn="O=data\OU=personnes\CN=User Test (2981)" src-dn="\IDV\data\personnes\User Test (2981)" src-entry-id="92367" timestamp="1418908846#2">
- <add-attr attr-name="businessCategory">
- <value timestamp="1418908846#2" type="string">tomigrate</value>
- </add-attr>
- <add-attr attr-name="departmentNumber">
- <value timestamp="1346222496#12" type="string">SAAAA</value>
- </add-attr>
- <add-attr attr-name="employeeType">
- <value timestamp="1346162954#64" type="string">Siege</value>
- </add-attr>
- <add-attr attr-name="Internet EMail Address">
- <value timestamp="1357655979#6" type="string">user.test@mail.fr</value>
- <value timestamp="1357655979#7" type="string">test@mail.fr</value>
- <value timestamp="1357655979#8" type="string">user.test@mail.fr</value>
- </add-attr>
- <add-attr attr-name="Title">
- <value timestamp="1346163828#92" type="string">Chef de projet</value>
- </add-attr>
- <operation-data attempt-to-match="true" unmatched-src-dn="CN=User Test (2981)"/>
- </add>
- </input>
- </nds>
- [12/18/2014 14:20:46.766] ConnecteurAD ST:No match found.
- [12/18/2014 14:20:46.766] ConnecteurAD ST:Applying object creation policies.
- [12/18/2014 14:20:46.766] ConnecteurAD ST:Applying policy: NOVLADDCFG-sub-cp-Users.
- [12/18/2014 14:20:46.766] ConnecteurAD ST: Applying to add #1.
- [12/18/2014 14:20:46.766] ConnecteurAD ST: Evaluating selection criteria for rule 'Break if not a User'.
- [12/18/2014 14:20:46.766] ConnecteurAD ST: (if-class-name not-equal "User") = FALSE.
- [12/18/2014 14:20:46.766] ConnecteurAD ST: Rule rejected.
- [12/18/2014 14:20:46.766] ConnecteurAD ST: Evaluating selection criteria for rule 'Veto if nspmDistributionPassword is not available'.
- [12/18/2014 14:20:46.766] ConnecteurAD ST: Rule selected.
- [12/18/2014 14:20:46.766] ConnecteurAD ST: Applying rule 'Veto if nspmDistributionPassword is not available'.
- [12/18/2014 14:20:46.766] ConnecteurAD ST: Action: do-veto-if-op-attr-not-available("nspmDistributionPassword").
- [12/18/2014 14:20:46.766] ConnecteurAD ST:Policy returned:
- [12/18/2014 14:20:46.766] ConnecteurAD ST:
- <nds dtdversion="4.0" ndsversion="8.x">
- <source>
- <product edition="Standard" version="4.0.1.0">DirXML</product>
- <contact>Novell, Inc.</contact>
- </source>
- <input/>
- </nds>
- [12/18/2014 14:20:46.766] ConnecteurAD ST:Applying policy: NOVLADDCFG-sub-cp-Groups.
- [12/18/2014 14:20:46.766] ConnecteurAD ST:Policy returned:
- [12/18/2014 14:20:46.766] ConnecteurAD ST:
- <nds dtdversion="4.0" ndsversion="8.x">
- <source>
- <product edition="Standard" version="4.0.1.0">DirXML</product>
- <contact>Novell, Inc.</contact>
- </source>
- <input/>
- </nds>
- [12/18/2014 14:20:46.767] ConnecteurAD ST:Processing returned document.
- [12/18/2014 14:20:46.767] ConnecteurAD ST:Processing operation <status> for .
- [12/18/2014 14:20:46.767] ConnecteurAD ST:
- DirXML Log Event -------------------
- Driver: \IDV\system\DriverSet\ConnecteurAD
- Channel: Subscriber
- Object: \IDV\data\personnes\User Test (2981)
- Status: Warning
- Message: Code(-8017) Operation vetoed by object creation policy.
- [12/18/2014 14:20:46.767] ConnecteurAD ST:End transaction.
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement