API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Mar 19th, 2012
82
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 100.29 KB | None | 0 0
raw download clone embed print report
  1. [03/19/12 14:22:46.429]:Active Directory :Remote Interface Driver: Received.
  2. [03/19/12 14:22:46.439]:Active Directory :
  3. <nds dtdversion="2.2">
  4. <source>
  5. <product version="3.6.10.4747">DirXML</product>
  6. <contact>Novell, Inc.</contact>
  7. </source>
  8. <input>
  9. <status level="success" type="heartbeat"/>
  10. </input>
  11. </nds>
  12. [03/19/12 14:22:46.439]:Active Directory :Remote Interface Driver: Received document for publisher channel
  13. [03/19/12 14:22:46.440]:Active Directory PT:Receiving DOM document from application.
  14. [03/19/12 14:22:46.440]:Active Directory PT:
  15. <nds dtdversion="2.2">
  16. <source>
  17. <product version="3.6.10.4747">DirXML</product>
  18. <contact>Novell, Inc.</contact>
  19. </source>
  20. <input>
  21. <status level="success" type="heartbeat"/>
  22. </input>
  23. </nds>
  24. [03/19/12 14:22:46.441]:Active Directory PT:Applying input transformation policies.
  25. [03/19/12 14:22:46.441]:Active Directory PT:Applying policy: %+C%14Clib-AccountTracking-Publish-itp-V1%-C.
  26. [03/19/12 14:22:46.442]:Active Directory PT: Applying to status #1.
  27. [03/19/12 14:22:46.442]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled or wrong object class'.
  28. [03/19/12 14:22:46.443]:Active Directory PT: Rule selected.
  29. [03/19/12 14:22:46.443]:Active Directory PT: Applying rule 'AccountTracking - disregard if disabled or wrong object class'.
  30. [03/19/12 14:22:46.444]:Active Directory PT: Action: do-if().
  31. [03/19/12 14:22:46.444]:Active Directory PT: Evaluating conditions.
  32. [03/19/12 14:22:46.444]:Active Directory PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  33. [03/19/12 14:22:46.445]:Active Directory PT: Performing else actions.
  34. [03/19/12 14:22:46.445]:Active Directory PT: Action: do-if().
  35. [03/19/12 14:22:46.445]:Active Directory PT: Evaluating conditions.
  36. [03/19/12 14:22:46.446]:Active Directory PT: (if-class-name available) = FALSE.
  37. [03/19/12 14:22:46.446]:Active Directory PT: Performing else actions.
  38. [03/19/12 14:22:46.446]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - on add-association sync the operation-properties to status operations'.
  39. [03/19/12 14:22:46.447]:Active Directory PT: (if-operation equal "add-association") = FALSE.
  40. [03/19/12 14:22:46.447]:Active Directory PT: Rule rejected.
  41. [03/19/12 14:22:46.447]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - Query for destination DN using Association'.
  42. [03/19/12 14:22:46.448]:Active Directory PT: (if-operation match "modify|delete|move|rename") = FALSE.
  43. [03/19/12 14:22:46.448]:Active Directory PT: Rule rejected.
  44. [03/19/12 14:22:46.448]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - add interested properties to current doc for future use.'.
  45. [03/19/12 14:22:46.449]:Active Directory PT: (if-operation match "add|modify|delete|rename|move|status") = TRUE.
  46. [03/19/12 14:22:46.449]:Active Directory PT: Rule selected.
  47. [03/19/12 14:22:46.449]:Active Directory PT: Applying rule 'AccountTracking - add interested properties to current doc for future use.'.
  48. [03/19/12 14:22:46.450]:Active Directory PT: Action: do-for-each(arg-node-set(token-global-variable("drv.acctTrk.identifiers"))).
  49. [03/19/12 14:22:46.450]:Active Directory PT: arg-node-set(token-global-variable("drv.acctTrk.identifiers"))
  50. [03/19/12 14:22:46.451]:Active Directory PT: token-global-variable("drv.acctTrk.identifiers")
  51. [03/19/12 14:22:46.451]:Active Directory PT: Token Value: {"sAMAccountName","userPrincipalName","LDAPDN","association"}.
  52. [03/19/12 14:22:46.452]:Active Directory PT: Arg Value: {"sAMAccountName","userPrincipalName","LDAPDN","association"}.
  53. [03/19/12 14:22:46.452]:Active Directory PT: Performing actions for local-variable(current-node) = "sAMAccountName".
  54. [03/19/12 14:22:46.452]:Active Directory PT: Action: do-if().
  55. [03/19/12 14:22:46.453]:Active Directory PT: Evaluating conditions.
  56. [03/19/12 14:22:46.453]:Active Directory PT: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  57. [03/19/12 14:22:46.454]:Active Directory PT: Performing else actions.
  58. [03/19/12 14:22:46.454]:Active Directory PT: Action: do-if().
  59. [03/19/12 14:22:46.454]:Active Directory PT: Evaluating conditions.
  60. [03/19/12 14:22:46.454]:Active Directory PT: (if-local-variable 'current-node' equal "association") = FALSE.
  61. [03/19/12 14:22:46.455]:Active Directory PT: Performing else actions.
  62. [03/19/12 14:22:46.455]:Active Directory PT: Action: do-if().
  63. [03/19/12 14:22:46.455]:Active Directory PT: Evaluating conditions.
  64. [03/19/12 14:22:46.455]:Active Directory PT: Expanded variable reference '$current-node$' to 'sAMAccountName'.
  65. [03/19/12 14:22:46.456]:Active Directory PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  66. [03/19/12 14:22:46.456]:Active Directory PT: Expanded variable reference '$current-node$' to 'sAMAccountName'.
  67. [03/19/12 14:22:46.457]:Active Directory PT: (if-op-attr '$current-node$' available) = FALSE.
  68. [03/19/12 14:22:46.457]:Active Directory PT: Performing else actions.
  69. [03/19/12 14:22:46.457]:Active Directory PT: Performing actions for local-variable(current-node) = "userPrincipalName".
  70. [03/19/12 14:22:46.458]:Active Directory PT: Action: do-if().
  71. [03/19/12 14:22:46.458]:Active Directory PT: Evaluating conditions.
  72. [03/19/12 14:22:46.458]:Active Directory PT: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  73. [03/19/12 14:22:46.458]:Active Directory PT: Performing else actions.
  74. [03/19/12 14:22:46.459]:Active Directory PT: Action: do-if().
  75. [03/19/12 14:22:46.459]:Active Directory PT: Evaluating conditions.
  76. [03/19/12 14:22:46.459]:Active Directory PT: (if-local-variable 'current-node' equal "association") = FALSE.
  77. [03/19/12 14:22:46.459]:Active Directory PT: Performing else actions.
  78. [03/19/12 14:22:46.460]:Active Directory PT: Action: do-if().
  79. [03/19/12 14:22:46.460]:Active Directory PT: Evaluating conditions.
  80. [03/19/12 14:22:46.460]:Active Directory PT: Expanded variable reference '$current-node$' to 'userPrincipalName'.
  81. [03/19/12 14:22:46.461]:Active Directory PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  82. [03/19/12 14:22:46.461]:Active Directory PT: Expanded variable reference '$current-node$' to 'userPrincipalName'.
  83. [03/19/12 14:22:46.464]:Active Directory PT: (if-op-attr '$current-node$' available) = FALSE.
  84. [03/19/12 14:22:46.464]:Active Directory PT: Performing else actions.
  85. [03/19/12 14:22:46.464]:Active Directory PT: Performing actions for local-variable(current-node) = "LDAPDN".
  86. [03/19/12 14:22:46.465]:Active Directory PT: Action: do-if().
  87. [03/19/12 14:22:46.465]:Active Directory PT: Evaluating conditions.
  88. [03/19/12 14:22:46.465]:Active Directory PT: (if-local-variable 'current-node' equal "LDAPDN") = TRUE.
  89. [03/19/12 14:22:46.465]:Active Directory PT: Expanded variable reference '$current-node$' to 'LDAPDN'.
  90. [03/19/12 14:22:46.466]:Active Directory PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  91. [03/19/12 14:22:46.466]:Active Directory PT: (if-src-dn available) = FALSE.
  92. [03/19/12 14:22:46.466]:Active Directory PT: Performing else actions.
  93. [03/19/12 14:22:46.467]:Active Directory PT: Action: do-if().
  94. [03/19/12 14:22:46.467]:Active Directory PT: Evaluating conditions.
  95. [03/19/12 14:22:46.467]:Active Directory PT: (if-local-variable 'current-node' equal "association") = FALSE.
  96. [03/19/12 14:22:46.467]:Active Directory PT: Performing else actions.
  97. [03/19/12 14:22:46.468]:Active Directory PT: Action: do-if().
  98. [03/19/12 14:22:46.468]:Active Directory PT: Evaluating conditions.
  99. [03/19/12 14:22:46.468]:Active Directory PT: Expanded variable reference '$current-node$' to 'LDAPDN'.
  100. [03/19/12 14:22:46.469]:Active Directory PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  101. [03/19/12 14:22:46.469]:Active Directory PT: Expanded variable reference '$current-node$' to 'LDAPDN'.
  102. [03/19/12 14:22:46.469]:Active Directory PT: (if-op-attr '$current-node$' available) = FALSE.
  103. [03/19/12 14:22:46.470]:Active Directory PT: Performing else actions.
  104. [03/19/12 14:22:46.470]:Active Directory PT: Performing actions for local-variable(current-node) = "association".
  105. [03/19/12 14:22:46.470]:Active Directory PT: Action: do-if().
  106. [03/19/12 14:22:46.471]:Active Directory PT: Evaluating conditions.
  107. [03/19/12 14:22:46.471]:Active Directory PT: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  108. [03/19/12 14:22:46.471]:Active Directory PT: Performing else actions.
  109. [03/19/12 14:22:46.471]:Active Directory PT: Action: do-if().
  110. [03/19/12 14:22:46.472]:Active Directory PT: Evaluating conditions.
  111. [03/19/12 14:22:46.472]:Active Directory PT: (if-local-variable 'current-node' equal "association") = TRUE.
  112. [03/19/12 14:22:46.472]:Active Directory PT: Expanded variable reference '$current-node$' to 'association'.
  113. [03/19/12 14:22:46.472]:Active Directory PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  114. [03/19/12 14:22:46.473]:Active Directory PT: (if-association available) = FALSE.
  115. [03/19/12 14:22:46.479]:Active Directory PT: Performing else actions.
  116. [03/19/12 14:22:46.479]:Active Directory PT: Action: do-if().
  117. [03/19/12 14:22:46.479]:Active Directory PT: Evaluating conditions.
  118. [03/19/12 14:22:46.480]:Active Directory PT: Expanded variable reference '$current-node$' to 'association'.
  119. [03/19/12 14:22:46.480]:Active Directory PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  120. [03/19/12 14:22:46.480]:Active Directory PT: Expanded variable reference '$current-node$' to 'association'.
  121. [03/19/12 14:22:46.480]:Active Directory PT: (if-op-attr '$current-node$' available) = FALSE.
  122. [03/19/12 14:22:46.481]:Active Directory PT: Performing else actions.
  123. [03/19/12 14:22:46.481]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - Initialize status properties on published events'.
  124. [03/19/12 14:22:46.481]:Active Directory PT: (if-operation match "add|modify|delete|rename|move") = FALSE.
  125. [03/19/12 14:22:46.481]:Active Directory PT: Rule rejected.
  126. [03/19/12 14:22:46.482]:Active Directory PT:Policy returned:
  127. [03/19/12 14:22:46.482]:Active Directory PT:
  128. <nds dtdversion="2.2">
  129. <source>
  130. <product version="3.6.10.4747">DirXML</product>
  131. <contact>Novell, Inc.</contact>
  132. </source>
  133. <input>
  134. <status level="success" type="heartbeat"/>
  135. </input>
  136. </nds>
  137. [03/19/12 14:22:46.483]:Active Directory PT:Applying policy: %+C%14Clib-AccountTracking-WriteAccounts-itp-V1%-C.
  138. [03/19/12 14:22:46.483]:Active Directory PT: Applying to status #1.
  139. [03/19/12 14:22:46.483]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled'.
  140. [03/19/12 14:22:46.484]:Active Directory PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  141. [03/19/12 14:22:46.484]:Active Directory PT: Rule rejected.
  142. [03/19/12 14:22:46.484]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - query DirXML-Accounts Attribute'.
  143. [03/19/12 14:22:46.484]:Active Directory PT: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  144. [03/19/12 14:22:46.484]:Active Directory PT: Rule rejected.
  145. [03/19/12 14:22:46.485]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - remove Dirxml-Account values on delete operation'.
  146. [03/19/12 14:22:46.485]:Active Directory PT: (if-operation match "delete|remove-association") = FALSE.
  147. [03/19/12 14:22:46.463]:Active Directory :Remote Interface Driver: Waiting for receive...
  148. [03/19/12 14:22:46.486]:Active Directory PT: (if-operation equal "status") = TRUE.
  149. [03/19/12 14:22:46.486]:Active Directory PT: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  150. [03/19/12 14:22:46.486]:Active Directory PT: Rule rejected.
  151. [03/19/12 14:22:46.486]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - update DirXMLAccounts attribute'.
  152. [03/19/12 14:22:46.487]:Active Directory PT: (if-op-property 'AccountTracking-Operation' not-available) = TRUE.
  153. [03/19/12 14:22:46.487]:Active Directory PT: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  154. [03/19/12 14:22:46.487]:Active Directory PT: (if-operation equal "status") = TRUE.
  155. [03/19/12 14:22:46.487]:Active Directory PT: (if-xpath true "./@level='success'") = TRUE.
  156. [03/19/12 14:22:46.487]:Active Directory PT: (if-op-property 'AccountTracking-Operation' available) = FALSE.
  157. [03/19/12 14:22:46.488]:Active Directory PT: Rule rejected.
  158. [03/19/12 14:22:46.488]:Active Directory PT:Policy returned:
  159. [03/19/12 14:22:46.488]:Active Directory PT:
  160. <nds dtdversion="2.2">
  161. <source>
  162. <product version="3.6.10.4747">DirXML</product>
  163. <contact>Novell, Inc.</contact>
  164. </source>
  165. <input>
  166. <status level="success" type="heartbeat"/>
  167. </input>
  168. </nds>
  169. [03/19/12 14:22:46.489]:Active Directory PT:Applying policy: %+C%14Citp%-C.
  170. [03/19/12 14:22:46.489]:Active Directory PT: Applying to status #1.
  171. [03/19/12 14:22:46.489]:Active Directory PT: Evaluating selection criteria for rule 'streetAddress: Convert CR-LF to LF'.
  172. [03/19/12 14:22:46.489]:Active Directory PT: Rule selected.
  173. [03/19/12 14:22:46.490]:Active Directory PT: Applying rule 'streetAddress: Convert CR-LF to LF'.
  174. [03/19/12 14:22:46.490]:Active Directory PT: Action: do-reformat-op-attr("streetAddress",token-replace-all("\r\n","\r",token-local-variable("current-value"))).
  175. [03/19/12 14:22:46.490]:Active Directory PT: Evaluating selection criteria for rule 'logonHours: Convert to Login Allowed Time Map form'.
  176. [03/19/12 14:22:46.490]:Active Directory PT: Rule selected.
  177. [03/19/12 14:22:46.491]:Active Directory PT: Applying rule 'logonHours: Convert to Login Allowed Time Map form'.
  178. [03/19/12 14:22:46.491]:Active Directory PT: Action: do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2eDir($current-value)")).
  179. [03/19/12 14:22:46.491]:Active Directory PT: Evaluating selection criteria for rule 'accountExpires: Convert to Identity Vault time format'.
  180. [03/19/12 14:22:46.492]:Active Directory PT: Rule selected.
  181. [03/19/12 14:22:46.492]:Active Directory PT: Applying rule 'accountExpires: Convert to Identity Vault time format'.
  182. [03/19/12 14:22:46.492]:Active Directory PT: Action: do-reformat-op-attr("accountExpires",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
  183. [03/19/12 14:22:46.492]:Active Directory PT: Evaluating selection criteria for rule 'lockoutTime: Convert to Identity Vault time format'.
  184. [03/19/12 14:22:46.493]:Active Directory PT: Rule selected.
  185. [03/19/12 14:22:46.493]:Active Directory PT: Applying rule 'lockoutTime: Convert to Identity Vault time format'.
  186. [03/19/12 14:22:46.493]:Active Directory PT: Action: do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
  187. [03/19/12 14:22:46.493]:Active Directory PT:Policy returned:
  188. [03/19/12 14:22:46.494]:Active Directory PT:
  189. <nds dtdversion="2.2">
  190. <source>
  191. <product version="3.6.10.4747">DirXML</product>
  192. <contact>Novell, Inc.</contact>
  193. </source>
  194. <input>
  195. <status level="success" type="heartbeat"/>
  196. </input>
  197. </nds>
  198. [03/19/12 14:22:46.494]:Active Directory PT:Applying policy: %+C%14Citp-EntitlementsImpl%-C.
  199. [03/19/12 14:22:46.494]:Active Directory PT: Applying to status #1.
  200. [03/19/12 14:22:46.495]:Active Directory PT: Evaluating selection criteria for rule 'Check target of add-association for group membership entitlements'.
  201. [03/19/12 14:22:46.495]:Active Directory PT: (if-global-variable 'drv.entitlement.Group' equal "true") = FALSE.
  202. [03/19/12 14:22:46.495]:Active Directory PT: Rule rejected.
  203. [03/19/12 14:22:46.495]:Active Directory PT: Evaluating selection criteria for rule 'Check target of add-association for Exchange mailbox entitlements'.
  204. [03/19/12 14:22:46.496]:Active Directory PT: (if-global-variable 'drv.exchMailboxMethod' equal "entitlement") = FALSE.
  205. [03/19/12 14:22:46.496]:Active Directory PT: Rule rejected.
  206. [03/19/12 14:22:46.496]:Active Directory PT:Policy returned:
  207. [03/19/12 14:22:46.496]:Active Directory PT:
  208. <nds dtdversion="2.2">
  209. <source>
  210. <product version="3.6.10.4747">DirXML</product>
  211. <contact>Novell, Inc.</contact>
  212. </source>
  213. <input>
  214. <status level="success" type="heartbeat"/>
  215. </input>
  216. </nds>
  217. [03/19/12 14:22:46.497]:Active Directory PT:Applying policy: %+C%14CPassword(Pub)-Sub Email Notifications%-C.
  218. [03/19/12 14:22:46.497]:Active Directory PT: Applying to status #1.
  219. [03/19/12 14:22:46.497]:Active Directory PT: Evaluating selection criteria for rule 'Send e-mail on a failure when subscribing to passwords'.
  220. [03/19/12 14:22:46.498]:Active Directory PT: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  221. [03/19/12 14:22:46.498]:Active Directory PT: (if-operation equal "status") = TRUE.
  222. [03/19/12 14:22:46.498]:Active Directory PT: (if-xpath true "self::status[@level != 'success'][text() != '']/operation-data/password-subscribe-status/association[text() != '']") = FALSE.
  223. [03/19/12 14:22:46.498]:Active Directory PT: Rule rejected.
  224. [03/19/12 14:22:46.499]:Active Directory PT: Evaluating selection criteria for rule 'Send e-mail on failure to reset connected system password using the Identity Manager data store password'.
  225. [03/19/12 14:22:46.499]:Active Directory PT: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  226. [03/19/12 14:22:46.499]:Active Directory PT: (if-operation equal "status") = TRUE.
  227. [03/19/12 14:22:46.500]:Active Directory PT: (if-xpath true "self::status[@level != 'success']/operation-data/password-reset-status") = FALSE.
  228. [03/19/12 14:22:46.500]:Active Directory PT: Rule rejected.
  229. [03/19/12 14:22:46.500]:Active Directory PT:Policy returned:
  230. [03/19/12 14:22:46.500]:Active Directory PT:
  231. <nds dtdversion="2.2">
  232. <source>
  233. <product version="3.6.10.4747">DirXML</product>
  234. <contact>Novell, Inc.</contact>
  235. </source>
  236. <input>
  237. <status level="success" type="heartbeat"/>
  238. </input>
  239. </nds>
  240. [03/19/12 14:22:46.501]:Active Directory PT:Applying policy: %+C%14Clib-Audit-SendEntitlementsEvents-itp-V1%-C.
  241. [03/19/12 14:22:46.501]:Active Directory PT: Applying to status #1.
  242. [03/19/12 14:22:46.501]:Active Directory PT: Evaluating selection criteria for rule '00031200 - Account Create By Entitlement Grant'.
  243. [03/19/12 14:22:46.501]:Active Directory PT: (if-operation equal "status") = TRUE.
  244. [03/19/12 14:22:46.502]:Active Directory PT: (if-op-property 'accountAction' equal "accountCreateByEntitlementGrant") = FALSE.
  245. [03/19/12 14:22:46.502]:Active Directory PT: Rule rejected.
  246. [03/19/12 14:22:46.502]:Active Directory PT: Evaluating selection criteria for rule '00031201 - Account Delete By Entitlement Revoke'.
  247. [03/19/12 14:22:46.502]:Active Directory PT: (if-operation equal "status") = TRUE.
  248. [03/19/12 14:22:46.503]:Active Directory PT: (if-xpath true "./operation-data/entitlement-impl/@state = '0'") = FALSE.
  249. [03/19/12 14:22:46.503]:Active Directory PT: (if-operation equal "status") = TRUE.
  250. [03/19/12 14:22:46.503]:Active Directory PT: (if-op-property 'accountAction' equal "accountDeleteByEntitlementRevoke") = FALSE.
  251. [03/19/12 14:22:46.503]:Active Directory PT: Rule rejected.
  252. [03/19/12 14:22:46.504]:Active Directory PT: Evaluating selection criteria for rule '00031202 - Account Disable By Entitlement Revoke'.
  253. [03/19/12 14:22:46.504]:Active Directory PT: (if-operation equal "status") = TRUE.
  254. [03/19/12 14:22:46.504]:Active Directory PT: (if-op-property 'accountAction' equal "accountDisableByEntitlementRevoke") = FALSE.
  255. [03/19/12 14:22:46.504]:Active Directory PT: Rule rejected.
  256. [03/19/12 14:22:46.505]:Active Directory PT: Evaluating selection criteria for rule '00031203 - Account Enable By Entitlement Grant'.
  257. [03/19/12 14:22:46.505]:Active Directory PT: (if-operation equal "status") = TRUE.
  258. [03/19/12 14:22:46.505]:Active Directory PT: (if-op-property 'accountAction' equal "accountEnableByEntitlementGrant") = FALSE.
  259. [03/19/12 14:22:46.505]:Active Directory PT: Rule rejected.
  260. [03/19/12 14:22:46.505]:Active Directory PT: Evaluating selection criteria for rule 'Generate Audit Event'.
  261. [03/19/12 14:22:46.506]:Active Directory PT: (if-operation equal "status") = TRUE.
  262. [03/19/12 14:22:46.506]:Active Directory PT: (if-local-variable 'auditEventID' available) = FALSE.
  263. [03/19/12 14:22:46.506]:Active Directory PT: Rule rejected.
  264. [03/19/12 14:22:46.506]:Active Directory PT:Policy returned:
  265. [03/19/12 14:22:46.506]:Active Directory PT:
  266. <nds dtdversion="2.2">
  267. <source>
  268. <product version="3.6.10.4747">DirXML</product>
  269. <contact>Novell, Inc.</contact>
  270. </source>
  271. <input>
  272. <status level="success" type="heartbeat"/>
  273. </input>
  274. </nds>
  275. [03/19/12 14:22:46.507]:Active Directory PT:Applying schema mapping policies to input.
  276. [03/19/12 14:22:46.507]:Active Directory PT:Applying policy: %+C%14Csmp%-C.
  277. [03/19/12 14:22:46.507]:Active Directory PT:Resolving association references.
  278. [03/19/12 14:22:46.508]:Active Directory PT:Applying event transformation policies.
  279. [03/19/12 14:22:46.508]:Active Directory PT:Applying policy: %+C%14Cpub-etp-EntitlementsImpl%-C.
  280. [03/19/12 14:22:46.508]:Active Directory PT: Applying to status #1.
  281. [03/19/12 14:22:46.508]:Active Directory PT: Evaluating selection criteria for rule 'Disallow user account delete when using entitlements'.
  282. [03/19/12 14:22:46.509]:Active Directory PT: (if-operation equal "delete") = FALSE.
  283. [03/19/12 14:22:46.509]:Active Directory PT: Rule rejected.
  284. [03/19/12 14:22:46.509]:Active Directory PT: Evaluating selection criteria for rule 'Strip Login Disabled from operation (Disable Option)'.
  285. [03/19/12 14:22:46.510]:Active Directory PT: (if-global-variable 'drv.entitlement.UserAccount' equal "true") = TRUE.
  286. [03/19/12 14:22:46.510]:Active Directory PT: (if-global-variable 'drv.entitlement.remove' equal "disable") = TRUE.
  287. [03/19/12 14:22:46.510]:Active Directory PT: (if-class-name equal "User") = FALSE.
  288. [03/19/12 14:22:46.510]:Active Directory PT: Rule rejected.
  289. [03/19/12 14:22:46.510]:Active Directory PT:Policy returned:
  290. [03/19/12 14:22:46.511]:Active Directory PT:
  291. <nds dtdversion="2.2">
  292. <source>
  293. <product version="3.6.10.4747">DirXML</product>
  294. <contact>Novell, Inc.</contact>
  295. </source>
  296. <input>
  297. <status level="success" type="heartbeat"/>
  298. </input>
  299. </nds>
  300. [03/19/12 14:22:46.511]:Active Directory PT:Applying policy: %+C%14Cpub-etp-HandleMovesAndRenames%-C.
  301. [03/19/12 14:22:46.511]:Active Directory PT: Applying to status #1.
  302. [03/19/12 14:22:46.511]:Active Directory PT: Evaluating selection criteria for rule 'break if not a move or rename'.
  303. [03/19/12 14:22:46.512]:Active Directory PT: (if-operation not-match "move|rename") = TRUE.
  304. [03/19/12 14:22:46.512]:Active Directory PT: Rule selected.
  305. [03/19/12 14:22:46.512]:Active Directory PT: Applying rule 'break if not a move or rename'.
  306. [03/19/12 14:22:46.512]:Active Directory PT: Action: do-break().
  307. [03/19/12 14:22:46.513]:Active Directory PT:Policy returned:
  308. [03/19/12 14:22:46.513]:Active Directory PT:
  309. <nds dtdversion="2.2">
  310. <source>
  311. <product version="3.6.10.4747">DirXML</product>
  312. <contact>Novell, Inc.</contact>
  313. </source>
  314. <input>
  315. <status level="success" type="heartbeat"/>
  316. </input>
  317. </nds>
  318. [03/19/12 14:22:46.514]:Active Directory PT:Applying publisher filter.
  319. [03/19/12 14:22:46.514]:Active Directory PT:Publisher processing status for .
  320. [03/19/12 14:22:46.514]:Active Directory PT:Applying command transformation policies.
  321. [03/19/12 14:22:46.514]:Active Directory PT:Applying policy: %+C%14Cpub-ctp-UserNameMap%-C.
  322. [03/19/12 14:22:46.514]:Active Directory PT: Applying to status #1.
  323. [03/19/12 14:22:46.515]:Active Directory PT: Evaluating selection criteria for rule 'consider user objects when name mapping is enabled'.
  324. [03/19/12 14:22:46.515]:Active Directory PT: (if-class-name not-equal "User") = TRUE.
  325. [03/19/12 14:22:46.515]:Active Directory PT: Rule selected.
  326. [03/19/12 14:22:46.515]:Active Directory PT: Applying rule 'consider user objects when name mapping is enabled'.
  327. [03/19/12 14:22:46.516]:Active Directory PT: Action: do-break().
  328. [03/19/12 14:22:46.516]:Active Directory PT:Policy returned:
  329. [03/19/12 14:22:46.516]:Active Directory PT:
  330. <nds dtdversion="2.2">
  331. <source>
  332. <product version="3.6.10.4747">DirXML</product>
  333. <contact>Novell, Inc.</contact>
  334. </source>
  335. <input>
  336. <status level="success" type="heartbeat"/>
  337. </input>
  338. </nds>
  339. [03/19/12 14:22:46.516]:Active Directory PT:Applying policy: %+C%14Cpub-ctp%-C.
  340. [03/19/12 14:22:46.517]:Active Directory PT: Applying to status #1.
  341. [03/19/12 14:22:46.517]:Active Directory PT: Evaluating selection criteria for rule 'set cached context value on merge'.
  342. [03/19/12 14:22:46.517]:Active Directory PT: (if-operation equal "modify") = FALSE.
  343. [03/19/12 14:22:46.517]:Active Directory PT: Rule rejected.
  344. [03/19/12 14:22:46.518]:Active Directory PT: Evaluating selection criteria for rule 'Set Equivalent To Me when adding object to a group'.
  345. [03/19/12 14:22:46.518]:Active Directory PT: (if-class-name equal "Group") = FALSE.
  346. [03/19/12 14:22:46.518]:Active Directory PT: Rule rejected.
  347. [03/19/12 14:22:46.518]:Active Directory PT: Evaluating selection criteria for rule 'Remove Equivalent To Me when removing object from a group'.
  348. [03/19/12 14:22:46.518]:Active Directory PT: (if-class-name equal "Group") = FALSE.
  349. [03/19/12 14:22:46.519]:Active Directory PT: Rule rejected.
  350. [03/19/12 14:22:46.519]:Active Directory PT: Evaluating selection criteria for rule 'remove managed attributes when object disassociated'.
  351. [03/19/12 14:22:46.519]:Active Directory PT: (if-operation equal "remove-association") = FALSE.
  352. [03/19/12 14:22:46.519]:Active Directory PT: Rule rejected.
  353. [03/19/12 14:22:46.520]:Active Directory PT: Evaluating selection criteria for rule 'Prevent unassociated users from being removed from groups'.
  354. [03/19/12 14:22:46.520]:Active Directory PT: (if-operation equal "modify") = FALSE.
  355. [03/19/12 14:22:46.520]:Active Directory PT: Rule rejected.
  356. [03/19/12 14:22:46.520]:Active Directory PT:Policy returned:
  357. [03/19/12 14:22:46.520]:Active Directory PT:
  358. <nds dtdversion="2.2">
  359. <source>
  360. <product version="3.6.10.4747">DirXML</product>
  361. <contact>Novell, Inc.</contact>
  362. </source>
  363. <input>
  364. <status level="success" type="heartbeat"/>
  365. </input>
  366. </nds>
  367. [03/19/12 14:22:46.521]:Active Directory PT:Applying XSLT policy: %+C%14Cpub-cts%-C.
  368. [03/19/12 14:22:46.522]:Active Directory PT:Policy returned:
  369. [03/19/12 14:22:46.522]:Active Directory PT:
  370. <nds dtdversion="2.2">
  371. <source>
  372. <product version="3.6.10.4747">DirXML</product>
  373. <contact>Novell, Inc.</contact>
  374. </source>
  375. <input>
  376. <status level="success" type="heartbeat"/>
  377. </input>
  378. </nds>
  379. [03/19/12 14:22:46.522]:Active Directory PT:Applying policy: %+C%14CPassword(Pub)-Default Password Policy%-C.
  380. [03/19/12 14:22:46.523]:Active Directory PT: Applying to status #1.
  381. [03/19/12 14:22:46.523]:Active Directory PT: Evaluating selection criteria for rule 'On User add, provide default password of @Dirxml1 if no password exists'.
  382. [03/19/12 14:22:46.523]:Active Directory PT: (if-operation equal "add") = FALSE.
  383. [03/19/12 14:22:46.523]:Active Directory PT: Rule rejected.
  384. [03/19/12 14:22:46.523]:Active Directory PT:Policy returned:
  385. [03/19/12 14:22:46.524]:Active Directory PT:
  386. <nds dtdversion="2.2">
  387. <source>
  388. <product version="3.6.10.4747">DirXML</product>
  389. <contact>Novell, Inc.</contact>
  390. </source>
  391. <input>
  392. <status level="success" type="heartbeat"/>
  393. </input>
  394. </nds>
  395. [03/19/12 14:22:46.524]:Active Directory PT:Applying policy: %+C%14CPassword(Pub)-Check Password GCV%-C.
  396. [03/19/12 14:22:46.524]:Active Directory PT: Applying to status #1.
  397. [03/19/12 14:22:46.525]:Active Directory PT: Evaluating selection criteria for rule 'Block publishing passwords to Identity Manager data store when adding a object'.
  398. [03/19/12 14:22:46.525]:Active Directory PT: (if-global-variable 'enable-password-publish' equal "false") = FALSE.
  399. [03/19/12 14:22:46.525]:Active Directory PT: Rule rejected.
  400. [03/19/12 14:22:46.525]:Active Directory PT: Evaluating selection criteria for rule 'Block sending modify-password changes to the Identity Manager data store'.
  401. [03/19/12 14:22:46.526]:Active Directory PT: (if-global-variable 'enable-password-publish' equal "false") = FALSE.
  402. [03/19/12 14:22:46.526]:Active Directory PT: Rule rejected.
  403. [03/19/12 14:22:46.526]:Active Directory PT:Policy returned:
  404. [03/19/12 14:22:46.526]:Active Directory PT:
  405. <nds dtdversion="2.2">
  406. <source>
  407. <product version="3.6.10.4747">DirXML</product>
  408. <contact>Novell, Inc.</contact>
  409. </source>
  410. <input>
  411. <status level="success" type="heartbeat"/>
  412. </input>
  413. </nds>
  414. [03/19/12 14:22:46.527]:Active Directory PT:Applying policy: %+C%14CPassword(Pub)-Publish Distribution Password%-C.
  415. [03/19/12 14:22:46.527]:Active Directory PT: Applying to status #1.
  416. [03/19/12 14:22:46.527]:Active Directory PT: Evaluating selection criteria for rule 'Add nspmDistributionAttribute attribute to add operation'.
  417. [03/19/12 14:22:46.528]:Active Directory PT: (if-global-variable 'publish-password-to-dp' equal "true") = FALSE.
  418. [03/19/12 14:22:46.528]:Active Directory PT: Rule rejected.
  419. [03/19/12 14:22:46.528]:Active Directory PT: Evaluating selection criteria for rule 'Change modify-password operations to a modify'.
  420. [03/19/12 14:22:46.528]:Active Directory PT: (if-global-variable 'publish-password-to-dp' equal "true") = FALSE.
  421. [03/19/12 14:22:46.529]:Active Directory PT: Rule rejected.
  422. [03/19/12 14:22:46.529]:Active Directory PT:Policy returned:
  423. [03/19/12 14:22:46.529]:Active Directory PT:
  424. <nds dtdversion="2.2">
  425. <source>
  426. <product version="3.6.10.4747">DirXML</product>
  427. <contact>Novell, Inc.</contact>
  428. </source>
  429. <input>
  430. <status level="success" type="heartbeat"/>
  431. </input>
  432. </nds>
  433. [03/19/12 14:22:46.529]:Active Directory PT:Applying policy: %+C%14CPassword(Pub)-Publish NDS Password%-C.
  434. [03/19/12 14:22:46.530]:Active Directory PT: Applying to status #1.
  435. [03/19/12 14:22:46.530]:Active Directory PT: Evaluating selection criteria for rule 'Block publishing passwords to NDS password'.
  436. [03/19/12 14:22:46.530]:Active Directory PT: (if-global-variable 'publish-password-to-nds' equal "false") = FALSE.
  437. [03/19/12 14:22:46.530]:Active Directory PT: Rule rejected.
  438. [03/19/12 14:22:46.531]:Active Directory PT: Evaluating selection criteria for rule 'Block sending modify-password changes to the NDS password'.
  439. [03/19/12 14:22:46.531]:Active Directory PT: (if-global-variable 'publish-password-to-nds' equal "false") = FALSE.
  440. [03/19/12 14:22:46.531]:Active Directory PT: Rule rejected.
  441. [03/19/12 14:22:46.531]:Active Directory PT:Policy returned:
  442. [03/19/12 14:22:46.531]:Active Directory PT:
  443. <nds dtdversion="2.2">
  444. <source>
  445. <product version="3.6.10.4747">DirXML</product>
  446. <contact>Novell, Inc.</contact>
  447. </source>
  448. <input>
  449. <status level="success" type="heartbeat"/>
  450. </input>
  451. </nds>
  452. [03/19/12 14:22:46.532]:Active Directory PT:Applying policy: %+C%14CPassword(Pub)-Add Password Payload%-C.
  453. [03/19/12 14:22:46.532]:Active Directory PT: Applying to status #1.
  454. [03/19/12 14:22:46.532]:Active Directory PT: Evaluating selection criteria for rule 'Add operation-data element to password operations'.
  455. [03/19/12 14:22:46.533]:Active Directory PT: (if-operation equal "add") = FALSE.
  456. [03/19/12 14:22:46.533]:Active Directory PT: (if-operation equal "add") = FALSE.
  457. [03/19/12 14:22:46.533]:Active Directory PT: (if-operation equal "modify-password") = FALSE.
  458. [03/19/12 14:22:46.536]:Active Directory PT: (if-operation equal "modify") = FALSE.
  459. [03/19/12 14:22:46.537]:Active Directory PT: Rule rejected.
  460. [03/19/12 14:22:46.537]:Active Directory PT: Evaluating selection criteria for rule 'Add payload data to password operations'.
  461. [03/19/12 14:22:46.537]:Active Directory PT: (if-operation equal "addPayloadToPassword") = FALSE.
  462. [03/19/12 14:22:46.538]:Active Directory PT: (if-operation equal "add") = FALSE.
  463. [03/19/12 14:22:46.538]:Active Directory PT: (if-operation equal "modify-password") = FALSE.
  464. [03/19/12 14:22:46.538]:Active Directory PT: (if-operation equal "modify") = FALSE.
  465. [03/19/12 14:22:46.538]:Active Directory PT: Rule rejected.
  466. [03/19/12 14:22:46.538]:Active Directory PT:Policy returned:
  467. [03/19/12 14:22:46.539]:Active Directory PT:
  468. <nds dtdversion="2.2">
  469. <source>
  470. <product version="3.6.10.4747">DirXML</product>
  471. <contact>Novell, Inc.</contact>
  472. </source>
  473. <input>
  474. <status level="success" type="heartbeat"/>
  475. </input>
  476. </nds>
  477. [03/19/12 14:22:46.539]:Active Directory PT:Applying policy: %+C%14Clib-AccountTracking-WriteAccountsOnAdds-pub-ctp-V1%-C.
  478. [03/19/12 14:22:46.539]:Active Directory PT: Applying to status #1.
  479. [03/19/12 14:22:46.540]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - disregard policy if disabled'.
  480. [03/19/12 14:22:46.540]:Active Directory PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  481. [03/19/12 14:22:46.540]:Active Directory PT: Rule rejected.
  482. [03/19/12 14:22:46.540]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - on add operation add Dirxml-Accounts'.
  483. [03/19/12 14:22:46.541]:Active Directory PT: (if-operation equal "add") = FALSE.
  484. [03/19/12 14:22:46.541]:Active Directory PT: Rule rejected.
  485. [03/19/12 14:22:46.541]:Active Directory PT:Policy returned:
  486. [03/19/12 14:22:46.541]:Active Directory PT:
  487. <nds dtdversion="2.2">
  488. <source>
  489. <product version="3.6.10.4747">DirXML</product>
  490. <contact>Novell, Inc.</contact>
  491. </source>
  492. <input>
  493. <status level="success" type="heartbeat"/>
  494. </input>
  495. </nds>
  496. [03/19/12 14:22:46.542]:Active Directory PT:Filtering out notification-only attributes.
  497. [03/19/12 14:22:46.542]:Active Directory PT:Pumping XDS to eDirectory.
  498. [03/19/12 14:22:46.542]:Active Directory PT:Performing operation status for .
  499. [03/19/12 14:22:46.542]:Active Directory PT:
  500. DirXML Log Event -------------------
  501. Driver: \EDIR2ADLAB\fdny\AD-TEST\Active Directory
  502. Channel: Publisher
  503. Status: Success
  504. [03/19/12 14:22:46.543]:Active Directory PT:Fixing up association references.
  505. [03/19/12 14:22:46.543]:Active Directory PT:Applying schema mapping policies to output.
  506. [03/19/12 14:22:46.543]:Active Directory PT:Applying policy: %+C%14Csmp%-C.
  507. [03/19/12 14:22:46.544]:Active Directory PT:Applying output transformation policies.
  508. [03/19/12 14:22:46.544]:Active Directory PT:Applying policy: %+C%14Cotp%-C.
  509. [03/19/12 14:22:46.544]:Active Directory PT: Applying to status #1.
  510. [03/19/12 14:22:46.544]:Active Directory PT: Evaluating selection criteria for rule 'Street Address: Convert LF to CR-LF'.
  511. [03/19/12 14:22:46.544]:Active Directory PT: Rule selected.
  512. [03/19/12 14:22:46.545]:Active Directory PT: Applying rule 'Street Address: Convert LF to CR-LF'.
  513. [03/19/12 14:22:46.545]:Active Directory PT: Action: do-reformat-op-attr("streetAddress",token-replace-all("[^\r]\n","\r\n",token-local-variable("current-value"))).
  514. [03/19/12 14:22:46.545]:Active Directory PT: Evaluating selection criteria for rule 'logonHours: Convert to Active Directory form'.
  515. [03/19/12 14:22:46.546]:Active Directory PT: Rule selected.
  516. [03/19/12 14:22:46.546]:Active Directory PT: Applying rule 'logonHours: Convert to Active Directory form'.
  517. [03/19/12 14:22:46.546]:Active Directory PT: Action: do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2ADLenient($current-value)")).
  518. [03/19/12 14:22:46.546]:Active Directory PT: Evaluating selection criteria for rule 'accountExpires: Convert to Active Directory form'.
  519. [03/19/12 14:22:46.547]:Active Directory PT: (if-op-attr 'accountExpires' changing) = FALSE.
  520. [03/19/12 14:22:46.547]:Active Directory PT: Rule rejected.
  521. [03/19/12 14:22:46.547]:Active Directory PT: Evaluating selection criteria for rule 'lockoutTime: Convert to Active Directory form'.
  522. [03/19/12 14:22:46.547]:Active Directory PT: Rule selected.
  523. [03/19/12 14:22:46.547]:Active Directory PT: Applying rule 'lockoutTime: Convert to Active Directory form'.
  524. [03/19/12 14:22:46.548]:Active Directory PT: Action: do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateEpoch2FileTime($current-value)")).
  525. [03/19/12 14:22:46.548]:Active Directory PT: Evaluating selection criteria for rule 'Add: User - convert multi-valued Telephone to single value'.
  526. [03/19/12 14:22:46.548]:Active Directory PT: (if-operation equal "add") = FALSE.
  527. [03/19/12 14:22:46.549]:Active Directory PT: Rule rejected.
  528. [03/19/12 14:22:46.549]:Active Directory PT: Evaluating selection criteria for rule 'update Active Directory logon name'.
  529. [03/19/12 14:22:46.549]:Active Directory PT: (if-xpath true "self::status[@level = 'success']/operation-data/windows-2000-logon-name") = FALSE.
  530. [03/19/12 14:22:46.549]:Active Directory PT: Rule rejected.
  531. [03/19/12 14:22:46.550]:Active Directory PT: Evaluating selection criteria for rule 'Exchange: Remove HomeMDB when disabled'.
  532. [03/19/12 14:22:46.550]:Active Directory PT: (if-global-variable 'drv.exchMailboxMethod' equal "disabled") = TRUE.
  533. [03/19/12 14:22:46.550]:Active Directory PT: Rule selected.
  534. [03/19/12 14:22:46.550]:Active Directory PT: Applying rule 'Exchange: Remove HomeMDB when disabled'.
  535. [03/19/12 14:22:46.551]:Active Directory PT: Action: do-strip-op-attr("homeMDB").
  536. [03/19/12 14:22:46.551]:Active Directory PT:Policy returned:
  537. [03/19/12 14:22:46.551]:Active Directory PT:
  538. <nds dtdversion="3.5" ndsversion="8.x">
  539. <source>
  540. <product version="3.6.10.4747">DirXML</product>
  541. <contact>Novell, Inc.</contact>
  542. </source>
  543. <output>
  544. <status event-id="0" level="success"></status>
  545. </output>
  546. </nds>
  547. [03/19/12 14:22:46.551]:Active Directory PT:Applying policy: %+C%14CPassword(Sub)-Pub Email Notifications%-C.
  548. [03/19/12 14:22:46.552]:Active Directory PT: Applying to status #1.
  549. [03/19/12 14:22:46.552]:Active Directory PT: Evaluating selection criteria for rule 'Send e-mail for a failed publish password operation'.
  550. [03/19/12 14:22:46.552]:Active Directory PT: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  551. [03/19/12 14:22:46.552]:Active Directory PT: (if-operation equal "status") = TRUE.
  552. [03/19/12 14:22:46.553]:Active Directory PT: (if-xpath true "self::status[@level != 'success']/operation-data/password-publish-status") = FALSE.
  553. [03/19/12 14:22:46.553]:Active Directory PT: Rule rejected.
  554. [03/19/12 14:22:46.553]:Active Directory PT:Policy returned:
  555. [03/19/12 14:22:46.553]:Active Directory PT:
  556. <nds dtdversion="3.5" ndsversion="8.x">
  557. <source>
  558. <product version="3.6.10.4747">DirXML</product>
  559. <contact>Novell, Inc.</contact>
  560. </source>
  561. <output>
  562. <status event-id="0" level="success"></status>
  563. </output>
  564. </nds>
  565. [03/19/12 14:22:46.554]:Active Directory PT:Applying policy: %+C%14Clib-CredProv-ConvertPayload-otp-V1%-C.
  566. [03/19/12 14:22:46.554]:Active Directory PT: Applying to status #1.
  567. [03/19/12 14:22:46.554]:Active Directory PT: Evaluating selection criteria for rule 'Is credential provisioning enabled? Are there any custom payloads?'.
  568. [03/19/12 14:22:46.555]:Active Directory PT: Rule selected.
  569. [03/19/12 14:22:46.555]:Active Directory PT: Applying rule 'Is credential provisioning enabled? Are there any custom payloads?'.
  570. [03/19/12 14:22:46.555]:Active Directory PT: Action: do-if().
  571. [03/19/12 14:22:46.555]:Active Directory PT: Evaluating conditions.
  572. [03/19/12 14:22:46.555]:Active Directory PT: (if-global-variable 'credprov.enable' not-equal "true") = TRUE.
  573. [03/19/12 14:22:46.556]:Active Directory PT: Performing if actions.
  574. [03/19/12 14:22:46.556]:Active Directory PT: Action: do-break().
  575. [03/19/12 14:22:46.556]:Active Directory PT:Policy returned:
  576. [03/19/12 14:22:46.556]:Active Directory PT:
  577. <nds dtdversion="3.5" ndsversion="8.x">
  578. <source>
  579. <product version="3.6.10.4747">DirXML</product>
  580. <contact>Novell, Inc.</contact>
  581. </source>
  582. <output>
  583. <status event-id="0" level="success"></status>
  584. </output>
  585. </nds>
  586. [03/19/12 14:22:46.557]:Active Directory PT:Applying policy: %+C%14Clib-AccountTracking-Subscribe-otp-V1%-C.
  587. [03/19/12 14:22:46.557]:Active Directory PT: Applying to status #1.
  588. [03/19/12 14:22:46.557]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled or wrong object class'.
  589. [03/19/12 14:22:46.558]:Active Directory PT: Rule selected.
  590. [03/19/12 14:22:46.586]:Active Directory PT: Applying rule 'AccountTracking - disregard if disabled or wrong object class'.
  591. [03/19/12 14:22:46.586]:Active Directory PT: Action: do-if().
  592. [03/19/12 14:22:46.586]:Active Directory PT: Evaluating conditions.
  593. [03/19/12 14:22:46.586]:Active Directory PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  594. [03/19/12 14:22:46.587]:Active Directory PT: Performing else actions.
  595. [03/19/12 14:22:46.587]:Active Directory PT: Action: do-for-each(arg-node-set(token-global-variable("drv.acctTrk.objectClass"))).
  596. [03/19/12 14:22:46.587]:Active Directory PT: arg-node-set(token-global-variable("drv.acctTrk.objectClass"))
  597. [03/19/12 14:22:46.587]:Active Directory PT: token-global-variable("drv.acctTrk.objectClass")
  598. [03/19/12 14:22:46.588]:Active Directory PT: Token Value: {"user"}.
  599. [03/19/12 14:22:46.588]:Active Directory PT: Arg Value: {"user"}.
  600. [03/19/12 14:22:46.588]:Active Directory PT: Performing actions for local-variable(current-node) = "user".
  601. [03/19/12 14:22:46.588]:Active Directory PT: Action: do-if().
  602. [03/19/12 14:22:46.588]:Active Directory PT: Evaluating conditions.
  603. [03/19/12 14:22:46.589]:Active Directory PT: (if-class-name equal "$current-node$") = FALSE.
  604. [03/19/12 14:22:46.589]:Active Directory PT: Performing else actions.
  605. [03/19/12 14:22:46.589]:Active Directory PT: Action: do-if().
  606. [03/19/12 14:22:46.589]:Active Directory PT: Evaluating conditions.
  607. [03/19/12 14:22:46.590]:Active Directory PT: (if-local-variable 'pass' not-available) = TRUE.
  608. [03/19/12 14:22:46.590]:Active Directory PT: Performing if actions.
  609. [03/19/12 14:22:46.590]:Active Directory PT: Action: do-break().
  610. [03/19/12 14:22:46.590]:Active Directory PT:Policy returned:
  611. [03/19/12 14:22:46.590]:Active Directory PT:
  612. <nds dtdversion="3.5" ndsversion="8.x">
  613. <source>
  614. <product version="3.6.10.4747">DirXML</product>
  615. <contact>Novell, Inc.</contact>
  616. </source>
  617. <output>
  618. <status event-id="0" level="success"></status>
  619. </output>
  620. </nds>
  621. [03/19/12 14:22:46.591]:Active Directory PT:
  622. <nds dtdversion="3.5" ndsversion="8.x">
  623. <source>
  624. <product version="3.6.10.4747">DirXML</product>
  625. <contact>Novell, Inc.</contact>
  626. </source>
  627. <output>
  628. <status event-id="0" level="success"></status>
  629. </output>
  630. </nds>
  631. [03/19/12 14:22:46.591]:Active Directory PT:Remote Interface Driver: Sending...
  632. [03/19/12 14:22:46.592]:Active Directory PT:
  633. <nds dtdversion="3.5" ndsversion="8.x">
  634. <source>
  635. <product version="3.6.10.4747">DirXML</product>
  636. <contact>Novell, Inc.</contact>
  637. </source>
  638. <output>
  639. <status event-id="0" level="success"></status>
  640. </output>
  641. </nds>
  642. [03/19/12 14:22:46.592]:Active Directory PT:Remote Interface Driver: Document sent.
  643. [03/19/12 14:22:57.696]:Active Directory ST:Start transaction.
  644. [03/19/12 14:22:57.697]:Active Directory ST:Processing events for transaction.
  645. [03/19/12 14:22:57.698]:Active Directory ST:
  646. <nds dtdversion="3.5" ndsversion="8.x">
  647. <source>
  648. <product version="3.6.10.4747">DirXML</product>
  649. <contact>Novell, Inc.</contact>
  650. </source>
  651. <input>
  652. <sync cached-time="20120319182257.612Z" class-name="User" event-id="edir2adlab-idm361#20120319182257#1#1" qualified-src-dn="O=fdny\OU=Support\OU=BTDS\OU=LAN\CN=goldwap" src-dn="\EDIR2ADLAB\fdny\Support\BTDS\LAN\goldwap" src-entry-id="32938" timestamp="0#0">
  653. <association state="manual"></association>
  654. </sync>
  655. </input>
  656. </nds>
  657. [03/19/12 14:22:57.699]:Active Directory ST:No event transformation policies.
  658. [03/19/12 14:22:57.699]:Active Directory ST:Subscriber processing sync for \EDIR2ADLAB\fdny\Support\BTDS\LAN\goldwap.
  659. [03/19/12 14:22:57.699]:Active Directory ST:Reading relevant attributes from \EDIR2ADLAB\fdny\Support\BTDS\LAN\goldwap.
  660. [03/19/12 14:22:57.700]:Active Directory ST:
  661. <nds dtdversion="3.5" ndsversion="8.x">
  662. <source>
  663. <product version="3.6.10.4747">DirXML</product>
  664. <contact>Novell, Inc.</contact>
  665. </source>
  666. <input>
  667. <query class-name="User" dest-dn="\EDIR2ADLAB\fdny\Support\BTDS\LAN\goldwap" dest-entry-id="32938" scope="entry">
  668. <read-attr attr-name="Description"/>
  669. <read-attr attr-name="DirXML-EntitlementRef"/>
  670. <read-attr attr-name="Facsimile Telephone Number"/>
  671. <read-attr attr-name="Full Name"/>
  672. <read-attr attr-name="Given Name"/>
  673. <read-attr attr-name="Initials"/>
  674. <read-attr attr-name="Internet EMail Address"/>
  675. <read-attr attr-name="L"/>
  676. <read-attr attr-name="Login Allowed Time Map"/>
  677. <read-attr attr-name="Login Disabled"/>
  678. <read-attr attr-name="Login Expiration Time"/>
  679. <read-attr attr-name="nspmDistributionPassword"/>
  680. <read-attr attr-name="Physical Delivery Office Name"/>
  681. <read-attr attr-name="Postal Code"/>
  682. <read-attr attr-name="Postal Office Box"/>
  683. <read-attr attr-name="S"/>
  684. <read-attr attr-name="SA"/>
  685. <read-attr attr-name="Surname"/>
  686. <read-attr attr-name="Telephone Number"/>
  687. <read-attr attr-name="Title"/>
  688. </query>
  689. </input>
  690. </nds>
  691. [03/19/12 14:22:57.702]:Active Directory ST:Pumping XDS to eDirectory.
  692. [03/19/12 14:22:57.702]:Active Directory ST:Performing operation query for \EDIR2ADLAB\fdny\Support\BTDS\LAN\goldwap.
  693. [03/19/12 14:22:57.703]:Active Directory ST:Driver object has insufficient rights to read \EDIR2ADLAB\fdny\Support\BTDS\LAN\goldwap#Full Name.
  694. [03/19/12 14:22:57.704]:Active Directory ST:Read result:
  695. [03/19/12 14:22:57.704]:Active Directory ST:
  696. <nds dtdversion="3.5" ndsversion="8.x">
  697. <source>
  698. <product version="3.6.10.4747">DirXML</product>
  699. <contact>Novell, Inc.</contact>
  700. </source>
  701. <output>
  702. <instance class-name="User" qualified-src-dn="O=fdny\OU=Support\OU=BTDS\OU=LAN\CN=goldwap" src-dn="\EDIR2ADLAB\fdny\Support\BTDS\LAN\goldwap" src-entry-id="32938">
  703. <association state="manual"></association>
  704. <attr attr-name="Given Name">
  705. <value timestamp="1332166853#1" type="string">Philip</value>
  706. </attr>
  707. <attr attr-name="Surname">
  708. <value timestamp="1332164807#3" type="string">Goldwasser</value>
  709. </attr>
  710. </instance>
  711. <status level="success"></status>
  712. </output>
  713. </nds>
  714. [03/19/12 14:22:57.705]:Active Directory ST:Synthetic add:
  715. [03/19/12 14:22:57.706]:Active Directory ST:
  716. <nds dtdversion="3.5" ndsversion="8.x">
  717. <source>
  718. <product version="3.6.10.4747">DirXML</product>
  719. <contact>Novell, Inc.</contact>
  720. </source>
  721. <output>
  722. <add class-name="User" event-id="edir2adlab-idm361#20120319182257#1#1" qualified-src-dn="O=fdny\OU=Support\OU=BTDS\OU=LAN\CN=goldwap" src-dn="\EDIR2ADLAB\fdny\Support\BTDS\LAN\goldwap" src-entry-id="32938">
  723. <association state="manual"></association>
  724. <add-attr attr-name="Given Name">
  725. <value timestamp="1332166853#1" type="string">Philip</value>
  726. </add-attr>
  727. <add-attr attr-name="Surname">
  728. <value timestamp="1332164807#3" type="string">Goldwasser</value>
  729. </add-attr>
  730. </add>
  731. <status level="success"></status>
  732. </output>
  733. </nds>
  734. [03/19/12 14:22:57.707]:Active Directory ST:Applying object matching policies.
  735. [03/19/12 14:22:57.707]:Active Directory ST:Applying policy: %+C%14Csub-mp-Scoping%-C.
  736. [03/19/12 14:22:57.712]:Active Directory ST: Applying to add #1.
  737. [03/19/12 14:22:57.712]:Active Directory ST: Evaluating selection criteria for rule 'remember relative position in hierarchy'.
  738. [03/19/12 14:22:57.713]:Active Directory ST: (if-src-dn in-subtree "fdny") = TRUE.
  739. [03/19/12 14:22:57.713]:Active Directory ST: Rule selected.
  740. [03/19/12 14:22:57.713]:Active Directory ST: Applying rule 'remember relative position in hierarchy'.
  741. [03/19/12 14:22:57.713]:Active Directory ST: Action: do-set-op-property("unmatched-src-dn",token-unmatched-src-dn(convert="true")).
  742. [03/19/12 14:22:57.714]:Active Directory ST: arg-string(token-unmatched-src-dn(convert="true"))
  743. [03/19/12 14:22:57.714]:Active Directory ST: token-unmatched-src-dn(convert="true")
  744. [03/19/12 14:22:57.714]:Active Directory ST: Token Value: "CN=goldwap,OU=LAN,OU=BTDS,OU=Support".
  745. [03/19/12 14:22:57.715]:Active Directory ST: Arg Value: "CN=goldwap,OU=LAN,OU=BTDS,OU=Support".
  746. [03/19/12 14:22:57.715]:Active Directory ST: Action: do-set-op-property("attempt-to-match","true").
  747. [03/19/12 14:22:57.715]:Active Directory ST: arg-string("true")
  748. [03/19/12 14:22:57.715]:Active Directory ST: token-text("true")
  749. [03/19/12 14:22:57.716]:Active Directory ST: Arg Value: "true".
  750. [03/19/12 14:22:57.716]:Active Directory ST:Policy returned:
  751. [03/19/12 14:22:57.716]:Active Directory ST:
  752. <nds dtdversion="3.5" ndsversion="8.x">
  753. <source>
  754. <product version="3.6.10.4747">DirXML</product>
  755. <contact>Novell, Inc.</contact>
  756. </source>
  757. <input>
  758. <add class-name="User" event-id="edir2adlab-idm361#20120319182257#1#1" qualified-src-dn="O=fdny\OU=Support\OU=BTDS\OU=LAN\CN=goldwap" src-dn="\EDIR2ADLAB\fdny\Support\BTDS\LAN\goldwap" src-entry-id="32938">
  759. <add-attr attr-name="Given Name">
  760. <value timestamp="1332166853#1" type="string">Philip</value>
  761. </add-attr>
  762. <add-attr attr-name="Surname">
  763. <value timestamp="1332164807#3" type="string">Goldwasser</value>
  764. </add-attr>
  765. <operation-data attempt-to-match="true" unmatched-src-dn="CN=goldwap,OU=LAN,OU=BTDS,OU=Support"/>
  766. </add>
  767. </input>
  768. </nds>
  769. [03/19/12 14:22:57.717]:Active Directory ST:Applying policy: %+C%14Csub-mp-EntitlementsImpl%-C.
  770. [03/19/12 14:22:57.718]:Active Directory ST: Applying to add #1.
  771. [03/19/12 14:22:57.718]:Active Directory ST: Evaluating selection criteria for rule 'UserAccount entitlement: do not match existing accounts'.
  772. [03/19/12 14:22:57.718]:Active Directory ST: (if-class-name equal "User") = TRUE.
  773. [03/19/12 14:22:57.718]:Active Directory ST: (if-global-variable 'drv.entitlement.UserAccount' equal "true") = TRUE.
  774. [03/19/12 14:22:57.719]:Active Directory ST: Query from policy
  775. [03/19/12 14:22:57.719]:Active Directory ST:
  776. <nds dtdversion="3.5" ndsversion="8.x">
  777. <source>
  778. <product version="3.6.10.4747">DirXML</product>
  779. <contact>Novell, Inc.</contact>
  780. </source>
  781. <input>
  782. <query class-name="User" dest-dn="\EDIR2ADLAB\fdny\Support\BTDS\LAN\goldwap" dest-entry-id="32938" scope="entry">
  783. <read-attr attr-name="DirXML-EntitlementRef"/>
  784. </query>
  785. </input>
  786. </nds>
  787. [03/19/12 14:22:57.720]:Active Directory ST: Pumping XDS to eDirectory.
  788. [03/19/12 14:22:57.720]:Active Directory ST: Performing operation query for \EDIR2ADLAB\fdny\Support\BTDS\LAN\goldwap.
  789. [03/19/12 14:22:57.721]:Active Directory ST: Query from policy result
  790. [03/19/12 14:22:57.721]:Active Directory ST:
  791. <nds dtdversion="3.5" ndsversion="8.x">
  792. <source>
  793. <product version="3.6.10.4747">DirXML</product>
  794. <contact>Novell, Inc.</contact>
  795. </source>
  796. <output>
  797. <instance class-name="User" qualified-src-dn="O=fdny\OU=Support\OU=BTDS\OU=LAN\CN=goldwap" src-dn="\EDIR2ADLAB\fdny\Support\BTDS\LAN\goldwap" src-entry-id="32938">
  798. <association state="manual"></association>
  799. </instance>
  800. <status level="success"></status>
  801. </output>
  802. </nds>
  803. [03/19/12 14:22:57.722]:Active Directory ST: (if-entitlement 'UserAccount' not-available) = TRUE.
  804. [03/19/12 14:22:57.722]:Active Directory ST: Rule selected.
  805. [03/19/12 14:22:57.723]:Active Directory ST: Applying rule 'UserAccount entitlement: do not match existing accounts'.
  806. [03/19/12 14:22:57.723]:Active Directory ST: Action: do-set-op-property("attempt-to-match","false").
  807. [03/19/12 14:22:57.723]:Active Directory ST: arg-string("false")
  808. [03/19/12 14:22:57.723]:Active Directory ST: token-text("false")
  809. [03/19/12 14:22:57.723]:Active Directory ST: Arg Value: "false".
  810. [03/19/12 14:22:57.724]:Active Directory ST:Policy returned:
  811. [03/19/12 14:22:57.724]:Active Directory ST:
  812. <nds dtdversion="3.5" ndsversion="8.x">
  813. <source>
  814. <product version="3.6.10.4747">DirXML</product>
  815. <contact>Novell, Inc.</contact>
  816. </source>
  817. <input>
  818. <add class-name="User" event-id="edir2adlab-idm361#20120319182257#1#1" qualified-src-dn="O=fdny\OU=Support\OU=BTDS\OU=LAN\CN=goldwap" src-dn="\EDIR2ADLAB\fdny\Support\BTDS\LAN\goldwap" src-entry-id="32938">
  819. <add-attr attr-name="Given Name">
  820. <value timestamp="1332166853#1" type="string">Philip</value>
  821. </add-attr>
  822. <add-attr attr-name="Surname">
  823. <value timestamp="1332164807#3" type="string">Goldwasser</value>
  824. </add-attr>
  825. <operation-data attempt-to-match="false" unmatched-src-dn="CN=goldwap,OU=LAN,OU=BTDS,OU=Support"/>
  826. </add>
  827. </input>
  828. </nds>
  829. [03/19/12 14:22:57.725]:Active Directory ST:Applying policy: %+C%14Csub-mp%-C.
  830. [03/19/12 14:22:57.726]:Active Directory ST: Applying to add #1.
  831. [03/19/12 14:22:57.726]:Active Directory ST: Evaluating selection criteria for rule 'veto out-of-scope events'.
  832. [03/19/12 14:22:57.726]:Active Directory ST: (if-op-property 'attempt-to-match' not-available) = FALSE.
  833. [03/19/12 14:22:57.726]:Active Directory ST: (if-op-property 'attempt-to-match' equal "false") = TRUE.
  834. [03/19/12 14:22:57.727]:Active Directory ST: Rule selected.
  835. [03/19/12 14:22:57.727]:Active Directory ST: Applying rule 'veto out-of-scope events'.
  836. [03/19/12 14:22:57.727]:Active Directory ST: Action: do-veto().
  837. [03/19/12 14:22:57.727]:Active Directory ST:Policy returned:
  838. [03/19/12 14:22:57.727]:Active Directory ST:
  839. <nds dtdversion="3.5" ndsversion="8.x">
  840. <source>
  841. <product version="3.6.10.4747">DirXML</product>
  842. <contact>Novell, Inc.</contact>
  843. </source>
  844. <input/>
  845. </nds>
  846. [03/19/12 14:22:57.728]:Active Directory ST:Processing returned document.
  847. [03/19/12 14:22:57.728]:Active Directory ST:Processing operation <status> for .
  848. [03/19/12 14:22:57.728]:Active Directory ST:
  849. DirXML Log Event -------------------
  850. Driver: \EDIR2ADLAB\fdny\AD-TEST\Active Directory
  851. Channel: Subscriber
  852. Object: \EDIR2ADLAB\fdny\Support\BTDS\LAN\goldwap
  853. Status: Warning
  854. Message: Code(-8016) Operation vetoed by object matching policy.
  855. [03/19/12 14:22:57.729]:Active Directory ST:End transaction.
  856. [03/19/12 14:23:46.428]:Active Directory :Remote Interface Driver: Received.
  857. [03/19/12 14:23:46.429]:Active Directory :
  858. <nds dtdversion="2.2">
  859. <source>
  860. <product version="3.6.10.4747">DirXML</product>
  861. <contact>Novell, Inc.</contact>
  862. </source>
  863. <input>
  864. <status level="success" type="heartbeat"/>
  865. </input>
  866. </nds>
  867. [03/19/12 14:23:46.429]:Active Directory :Remote Interface Driver: Received document for publisher channel
  868. [03/19/12 14:23:46.429]:Active Directory :Remote Interface Driver: Waiting for receive...
  869. [03/19/12 14:23:46.429]:Active Directory PT:Receiving DOM document from application.
  870. [03/19/12 14:23:46.430]:Active Directory PT:
  871. <nds dtdversion="2.2">
  872. <source>
  873. <product version="3.6.10.4747">DirXML</product>
  874. <contact>Novell, Inc.</contact>
  875. </source>
  876. <input>
  877. <status level="success" type="heartbeat"/>
  878. </input>
  879. </nds>
  880. [03/19/12 14:23:46.430]:Active Directory PT:Applying input transformation policies.
  881. [03/19/12 14:23:46.431]:Active Directory PT:Applying policy: %+C%14Clib-AccountTracking-Publish-itp-V1%-C.
  882. [03/19/12 14:23:46.431]:Active Directory PT: Applying to status #1.
  883. [03/19/12 14:23:46.431]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled or wrong object class'.
  884. [03/19/12 14:23:46.431]:Active Directory PT: Rule selected.
  885. [03/19/12 14:23:46.432]:Active Directory PT: Applying rule 'AccountTracking - disregard if disabled or wrong object class'.
  886. [03/19/12 14:23:46.432]:Active Directory PT: Action: do-if().
  887. [03/19/12 14:23:46.432]:Active Directory PT: Evaluating conditions.
  888. [03/19/12 14:23:46.432]:Active Directory PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  889. [03/19/12 14:23:46.432]:Active Directory PT: Performing else actions.
  890. [03/19/12 14:23:46.433]:Active Directory PT: Action: do-if().
  891. [03/19/12 14:23:46.433]:Active Directory PT: Evaluating conditions.
  892. [03/19/12 14:23:46.433]:Active Directory PT: (if-class-name available) = FALSE.
  893. [03/19/12 14:23:46.433]:Active Directory PT: Performing else actions.
  894. [03/19/12 14:23:46.433]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - on add-association sync the operation-properties to status operations'.
  895. [03/19/12 14:23:46.434]:Active Directory PT: (if-operation equal "add-association") = FALSE.
  896. [03/19/12 14:23:46.434]:Active Directory PT: Rule rejected.
  897. [03/19/12 14:23:46.434]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - Query for destination DN using Association'.
  898. [03/19/12 14:23:46.435]:Active Directory PT: (if-operation match "modify|delete|move|rename") = FALSE.
  899. [03/19/12 14:23:46.435]:Active Directory PT: Rule rejected.
  900. [03/19/12 14:23:46.435]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - add interested properties to current doc for future use.'.
  901. [03/19/12 14:23:46.435]:Active Directory PT: (if-operation match "add|modify|delete|rename|move|status") = TRUE.
  902. [03/19/12 14:23:46.436]:Active Directory PT: Rule selected.
  903. [03/19/12 14:23:46.436]:Active Directory PT: Applying rule 'AccountTracking - add interested properties to current doc for future use.'.
  904. [03/19/12 14:23:46.436]:Active Directory PT: Action: do-for-each(arg-node-set(token-global-variable("drv.acctTrk.identifiers"))).
  905. [03/19/12 14:23:46.436]:Active Directory PT: arg-node-set(token-global-variable("drv.acctTrk.identifiers"))
  906. [03/19/12 14:23:46.436]:Active Directory PT: token-global-variable("drv.acctTrk.identifiers")
  907. [03/19/12 14:23:46.437]:Active Directory PT: Token Value: {"sAMAccountName","userPrincipalName","LDAPDN","association"}.
  908. [03/19/12 14:23:46.437]:Active Directory PT: Arg Value: {"sAMAccountName","userPrincipalName","LDAPDN","association"}.
  909. [03/19/12 14:23:46.437]:Active Directory PT: Performing actions for local-variable(current-node) = "sAMAccountName".
  910. [03/19/12 14:23:46.438]:Active Directory PT: Action: do-if().
  911. [03/19/12 14:23:46.438]:Active Directory PT: Evaluating conditions.
  912. [03/19/12 14:23:46.438]:Active Directory PT: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  913. [03/19/12 14:23:46.438]:Active Directory PT: Performing else actions.
  914. [03/19/12 14:23:46.438]:Active Directory PT: Action: do-if().
  915. [03/19/12 14:23:46.439]:Active Directory PT: Evaluating conditions.
  916. [03/19/12 14:23:46.439]:Active Directory PT: (if-local-variable 'current-node' equal "association") = FALSE.
  917. [03/19/12 14:23:46.439]:Active Directory PT: Performing else actions.
  918. [03/19/12 14:23:46.439]:Active Directory PT: Action: do-if().
  919. [03/19/12 14:23:46.439]:Active Directory PT: Evaluating conditions.
  920. [03/19/12 14:23:46.440]:Active Directory PT: Expanded variable reference '$current-node$' to 'sAMAccountName'.
  921. [03/19/12 14:23:46.440]:Active Directory PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  922. [03/19/12 14:23:46.440]:Active Directory PT: Expanded variable reference '$current-node$' to 'sAMAccountName'.
  923. [03/19/12 14:23:46.440]:Active Directory PT: (if-op-attr '$current-node$' available) = FALSE.
  924. [03/19/12 14:23:46.441]:Active Directory PT: Performing else actions.
  925. [03/19/12 14:23:46.441]:Active Directory PT: Performing actions for local-variable(current-node) = "userPrincipalName".
  926. [03/19/12 14:23:46.441]:Active Directory PT: Action: do-if().
  927. [03/19/12 14:23:46.441]:Active Directory PT: Evaluating conditions.
  928. [03/19/12 14:23:46.442]:Active Directory PT: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  929. [03/19/12 14:23:46.442]:Active Directory PT: Performing else actions.
  930. [03/19/12 14:23:46.442]:Active Directory PT: Action: do-if().
  931. [03/19/12 14:23:46.442]:Active Directory PT: Evaluating conditions.
  932. [03/19/12 14:23:46.443]:Active Directory PT: (if-local-variable 'current-node' equal "association") = FALSE.
  933. [03/19/12 14:23:46.443]:Active Directory PT: Performing else actions.
  934. [03/19/12 14:23:46.443]:Active Directory PT: Action: do-if().
  935. [03/19/12 14:23:46.443]:Active Directory PT: Evaluating conditions.
  936. [03/19/12 14:23:46.443]:Active Directory PT: Expanded variable reference '$current-node$' to 'userPrincipalName'.
  937. [03/19/12 14:23:46.444]:Active Directory PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  938. [03/19/12 14:23:46.444]:Active Directory PT: Expanded variable reference '$current-node$' to 'userPrincipalName'.
  939. [03/19/12 14:23:46.444]:Active Directory PT: (if-op-attr '$current-node$' available) = FALSE.
  940. [03/19/12 14:23:46.444]:Active Directory PT: Performing else actions.
  941. [03/19/12 14:23:46.445]:Active Directory PT: Performing actions for local-variable(current-node) = "LDAPDN".
  942. [03/19/12 14:23:46.445]:Active Directory PT: Action: do-if().
  943. [03/19/12 14:23:46.445]:Active Directory PT: Evaluating conditions.
  944. [03/19/12 14:23:46.445]:Active Directory PT: (if-local-variable 'current-node' equal "LDAPDN") = TRUE.
  945. [03/19/12 14:23:46.445]:Active Directory PT: Expanded variable reference '$current-node$' to 'LDAPDN'.
  946. [03/19/12 14:23:46.446]:Active Directory PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  947. [03/19/12 14:23:46.447]:Active Directory PT: (if-src-dn available) = FALSE.
  948. [03/19/12 14:23:46.447]:Active Directory PT: Performing else actions.
  949. [03/19/12 14:23:46.447]:Active Directory PT: Action: do-if().
  950. [03/19/12 14:23:46.448]:Active Directory PT: Evaluating conditions.
  951. [03/19/12 14:23:46.448]:Active Directory PT: (if-local-variable 'current-node' equal "association") = FALSE.
  952. [03/19/12 14:23:46.448]:Active Directory PT: Performing else actions.
  953. [03/19/12 14:23:46.448]:Active Directory PT: Action: do-if().
  954. [03/19/12 14:23:46.448]:Active Directory PT: Evaluating conditions.
  955. [03/19/12 14:23:46.449]:Active Directory PT: Expanded variable reference '$current-node$' to 'LDAPDN'.
  956. [03/19/12 14:23:46.449]:Active Directory PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  957. [03/19/12 14:23:46.449]:Active Directory PT: Expanded variable reference '$current-node$' to 'LDAPDN'.
  958. [03/19/12 14:23:46.449]:Active Directory PT: (if-op-attr '$current-node$' available) = FALSE.
  959. [03/19/12 14:23:46.450]:Active Directory PT: Performing else actions.
  960. [03/19/12 14:23:46.450]:Active Directory PT: Performing actions for local-variable(current-node) = "association".
  961. [03/19/12 14:23:46.450]:Active Directory PT: Action: do-if().
  962. [03/19/12 14:23:46.450]:Active Directory PT: Evaluating conditions.
  963. [03/19/12 14:23:46.451]:Active Directory PT: (if-local-variable 'current-node' equal "LDAPDN") = FALSE.
  964. [03/19/12 14:23:46.451]:Active Directory PT: Performing else actions.
  965. [03/19/12 14:23:46.451]:Active Directory PT: Action: do-if().
  966. [03/19/12 14:23:46.451]:Active Directory PT: Evaluating conditions.
  967. [03/19/12 14:23:46.451]:Active Directory PT: (if-local-variable 'current-node' equal "association") = TRUE.
  968. [03/19/12 14:23:46.452]:Active Directory PT: Expanded variable reference '$current-node$' to 'association'.
  969. [03/19/12 14:23:46.452]:Active Directory PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  970. [03/19/12 14:23:46.452]:Active Directory PT: (if-association available) = FALSE.
  971. [03/19/12 14:23:46.452]:Active Directory PT: Performing else actions.
  972. [03/19/12 14:23:46.453]:Active Directory PT: Action: do-if().
  973. [03/19/12 14:23:46.453]:Active Directory PT: Evaluating conditions.
  974. [03/19/12 14:23:46.453]:Active Directory PT: Expanded variable reference '$current-node$' to 'association'.
  975. [03/19/12 14:23:46.453]:Active Directory PT: (if-op-property 'AccountTracking-$current-node$' not-available) = TRUE.
  976. [03/19/12 14:23:46.454]:Active Directory PT: Expanded variable reference '$current-node$' to 'association'.
  977. [03/19/12 14:23:46.454]:Active Directory PT: (if-op-attr '$current-node$' available) = FALSE.
  978. [03/19/12 14:23:46.454]:Active Directory PT: Performing else actions.
  979. [03/19/12 14:23:46.454]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - Initialize status properties on published events'.
  980. [03/19/12 14:23:46.455]:Active Directory PT: (if-operation match "add|modify|delete|rename|move") = FALSE.
  981. [03/19/12 14:23:46.455]:Active Directory PT: Rule rejected.
  982. [03/19/12 14:23:46.455]:Active Directory PT:Policy returned:
  983. [03/19/12 14:23:46.455]:Active Directory PT:
  984. <nds dtdversion="2.2">
  985. <source>
  986. <product version="3.6.10.4747">DirXML</product>
  987. <contact>Novell, Inc.</contact>
  988. </source>
  989. <input>
  990. <status level="success" type="heartbeat"/>
  991. </input>
  992. </nds>
  993. [03/19/12 14:23:46.456]:Active Directory PT:Applying policy: %+C%14Clib-AccountTracking-WriteAccounts-itp-V1%-C.
  994. [03/19/12 14:23:46.456]:Active Directory PT: Applying to status #1.
  995. [03/19/12 14:23:46.456]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled'.
  996. [03/19/12 14:23:46.456]:Active Directory PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  997. [03/19/12 14:23:46.457]:Active Directory PT: Rule rejected.
  998. [03/19/12 14:23:46.457]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - query DirXML-Accounts Attribute'.
  999. [03/19/12 14:23:46.457]:Active Directory PT: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  1000. [03/19/12 14:23:46.457]:Active Directory PT: Rule rejected.
  1001. [03/19/12 14:23:46.457]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - remove Dirxml-Account values on delete operation'.
  1002. [03/19/12 14:23:46.458]:Active Directory PT: (if-operation match "delete|remove-association") = FALSE.
  1003. [03/19/12 14:23:46.458]:Active Directory PT: (if-operation equal "status") = TRUE.
  1004. [03/19/12 14:23:46.458]:Active Directory PT: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  1005. [03/19/12 14:23:46.458]:Active Directory PT: Rule rejected.
  1006. [03/19/12 14:23:46.459]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - update DirXMLAccounts attribute'.
  1007. [03/19/12 14:23:46.459]:Active Directory PT: (if-op-property 'AccountTracking-Operation' not-available) = TRUE.
  1008. [03/19/12 14:23:46.459]:Active Directory PT: (if-op-property 'AccountTracking-ObjectDN' available) = FALSE.
  1009. [03/19/12 14:23:46.459]:Active Directory PT: (if-operation equal "status") = TRUE.
  1010. [03/19/12 14:23:46.460]:Active Directory PT: (if-xpath true "./@level='success'") = TRUE.
  1011. [03/19/12 14:23:46.460]:Active Directory PT: (if-op-property 'AccountTracking-Operation' available) = FALSE.
  1012. [03/19/12 14:23:46.460]:Active Directory PT: Rule rejected.
  1013. [03/19/12 14:23:46.460]:Active Directory PT:Policy returned:
  1014. [03/19/12 14:23:46.460]:Active Directory PT:
  1015. <nds dtdversion="2.2">
  1016. <source>
  1017. <product version="3.6.10.4747">DirXML</product>
  1018. <contact>Novell, Inc.</contact>
  1019. </source>
  1020. <input>
  1021. <status level="success" type="heartbeat"/>
  1022. </input>
  1023. </nds>
  1024. [03/19/12 14:23:46.461]:Active Directory PT:Applying policy: %+C%14Citp%-C.
  1025. [03/19/12 14:23:46.461]:Active Directory PT: Applying to status #1.
  1026. [03/19/12 14:23:46.461]:Active Directory PT: Evaluating selection criteria for rule 'streetAddress: Convert CR-LF to LF'.
  1027. [03/19/12 14:23:46.462]:Active Directory PT: Rule selected.
  1028. [03/19/12 14:23:46.462]:Active Directory PT: Applying rule 'streetAddress: Convert CR-LF to LF'.
  1029. [03/19/12 14:23:46.466]:Active Directory PT: Action: do-reformat-op-attr("streetAddress",token-replace-all("\r\n","\r",token-local-variable("current-value"))).
  1030. [03/19/12 14:23:46.466]:Active Directory PT: Evaluating selection criteria for rule 'logonHours: Convert to Login Allowed Time Map form'.
  1031. [03/19/12 14:23:46.467]:Active Directory PT: Rule selected.
  1032. [03/19/12 14:23:46.467]:Active Directory PT: Applying rule 'logonHours: Convert to Login Allowed Time Map form'.
  1033. [03/19/12 14:23:46.467]:Active Directory PT: Action: do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2eDir($current-value)")).
  1034. [03/19/12 14:23:46.467]:Active Directory PT: Evaluating selection criteria for rule 'accountExpires: Convert to Identity Vault time format'.
  1035. [03/19/12 14:23:46.468]:Active Directory PT: Rule selected.
  1036. [03/19/12 14:23:46.468]:Active Directory PT: Applying rule 'accountExpires: Convert to Identity Vault time format'.
  1037. [03/19/12 14:23:46.468]:Active Directory PT: Action: do-reformat-op-attr("accountExpires",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
  1038. [03/19/12 14:23:46.468]:Active Directory PT: Evaluating selection criteria for rule 'lockoutTime: Convert to Identity Vault time format'.
  1039. [03/19/12 14:23:46.469]:Active Directory PT: Rule selected.
  1040. [03/19/12 14:23:46.469]:Active Directory PT: Applying rule 'lockoutTime: Convert to Identity Vault time format'.
  1041. [03/19/12 14:23:46.469]:Active Directory PT: Action: do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
  1042. [03/19/12 14:23:46.469]:Active Directory PT:Policy returned:
  1043. [03/19/12 14:23:46.470]:Active Directory PT:
  1044. <nds dtdversion="2.2">
  1045. <source>
  1046. <product version="3.6.10.4747">DirXML</product>
  1047. <contact>Novell, Inc.</contact>
  1048. </source>
  1049. <input>
  1050. <status level="success" type="heartbeat"/>
  1051. </input>
  1052. </nds>
  1053. [03/19/12 14:23:46.473]:Active Directory PT:Applying policy: %+C%14Citp-EntitlementsImpl%-C.
  1054. [03/19/12 14:23:46.473]:Active Directory PT: Applying to status #1.
  1055. [03/19/12 14:23:46.473]:Active Directory PT: Evaluating selection criteria for rule 'Check target of add-association for group membership entitlements'.
  1056. [03/19/12 14:23:46.473]:Active Directory PT: (if-global-variable 'drv.entitlement.Group' equal "true") = FALSE.
  1057. [03/19/12 14:23:46.474]:Active Directory PT: Rule rejected.
  1058. [03/19/12 14:23:46.474]:Active Directory PT: Evaluating selection criteria for rule 'Check target of add-association for Exchange mailbox entitlements'.
  1059. [03/19/12 14:23:46.474]:Active Directory PT: (if-global-variable 'drv.exchMailboxMethod' equal "entitlement") = FALSE.
  1060. [03/19/12 14:23:46.474]:Active Directory PT: Rule rejected.
  1061. [03/19/12 14:23:46.475]:Active Directory PT:Policy returned:
  1062. [03/19/12 14:23:46.475]:Active Directory PT:
  1063. <nds dtdversion="2.2">
  1064. <source>
  1065. <product version="3.6.10.4747">DirXML</product>
  1066. <contact>Novell, Inc.</contact>
  1067. </source>
  1068. <input>
  1069. <status level="success" type="heartbeat"/>
  1070. </input>
  1071. </nds>
  1072. [03/19/12 14:23:46.475]:Active Directory PT:Applying policy: %+C%14CPassword(Pub)-Sub Email Notifications%-C.
  1073. [03/19/12 14:23:46.475]:Active Directory PT: Applying to status #1.
  1074. [03/19/12 14:23:46.476]:Active Directory PT: Evaluating selection criteria for rule 'Send e-mail on a failure when subscribing to passwords'.
  1075. [03/19/12 14:23:46.476]:Active Directory PT: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  1076. [03/19/12 14:23:46.476]:Active Directory PT: (if-operation equal "status") = TRUE.
  1077. [03/19/12 14:23:46.477]:Active Directory PT: (if-xpath true "self::status[@level != 'success'][text() != '']/operation-data/password-subscribe-status/association[text() != '']") = FALSE.
  1078. [03/19/12 14:23:46.477]:Active Directory PT: Rule rejected.
  1079. [03/19/12 14:23:46.477]:Active Directory PT: Evaluating selection criteria for rule 'Send e-mail on failure to reset connected system password using the Identity Manager data store password'.
  1080. [03/19/12 14:23:46.478]:Active Directory PT: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  1081. [03/19/12 14:23:46.478]:Active Directory PT: (if-operation equal "status") = TRUE.
  1082. [03/19/12 14:23:46.478]:Active Directory PT: (if-xpath true "self::status[@level != 'success']/operation-data/password-reset-status") = FALSE.
  1083. [03/19/12 14:23:46.478]:Active Directory PT: Rule rejected.
  1084. [03/19/12 14:23:46.479]:Active Directory PT:Policy returned:
  1085. [03/19/12 14:23:46.479]:Active Directory PT:
  1086. <nds dtdversion="2.2">
  1087. <source>
  1088. <product version="3.6.10.4747">DirXML</product>
  1089. <contact>Novell, Inc.</contact>
  1090. </source>
  1091. <input>
  1092. <status level="success" type="heartbeat"/>
  1093. </input>
  1094. </nds>
  1095. [03/19/12 14:23:46.479]:Active Directory PT:Applying policy: %+C%14Clib-Audit-SendEntitlementsEvents-itp-V1%-C.
  1096. [03/19/12 14:23:46.479]:Active Directory PT: Applying to status #1.
  1097. [03/19/12 14:23:46.480]:Active Directory PT: Evaluating selection criteria for rule '00031200 - Account Create By Entitlement Grant'.
  1098. [03/19/12 14:23:46.480]:Active Directory PT: (if-operation equal "status") = TRUE.
  1099. [03/19/12 14:23:46.480]:Active Directory PT: (if-op-property 'accountAction' equal "accountCreateByEntitlementGrant") = FALSE.
  1100. [03/19/12 14:23:46.480]:Active Directory PT: Rule rejected.
  1101. [03/19/12 14:23:46.480]:Active Directory PT: Evaluating selection criteria for rule '00031201 - Account Delete By Entitlement Revoke'.
  1102. [03/19/12 14:23:46.481]:Active Directory PT: (if-operation equal "status") = TRUE.
  1103. [03/19/12 14:23:46.481]:Active Directory PT: (if-xpath true "./operation-data/entitlement-impl/@state = '0'") = FALSE.
  1104. [03/19/12 14:23:46.481]:Active Directory PT: (if-operation equal "status") = TRUE.
  1105. [03/19/12 14:23:46.481]:Active Directory PT: (if-op-property 'accountAction' equal "accountDeleteByEntitlementRevoke") = FALSE.
  1106. [03/19/12 14:23:46.482]:Active Directory PT: Rule rejected.
  1107. [03/19/12 14:23:46.482]:Active Directory PT: Evaluating selection criteria for rule '00031202 - Account Disable By Entitlement Revoke'.
  1108. [03/19/12 14:23:46.482]:Active Directory PT: (if-operation equal "status") = TRUE.
  1109. [03/19/12 14:23:46.482]:Active Directory PT: (if-op-property 'accountAction' equal "accountDisableByEntitlementRevoke") = FALSE.
  1110. [03/19/12 14:23:46.483]:Active Directory PT: Rule rejected.
  1111. [03/19/12 14:23:46.483]:Active Directory PT: Evaluating selection criteria for rule '00031203 - Account Enable By Entitlement Grant'.
  1112. [03/19/12 14:23:46.483]:Active Directory PT: (if-operation equal "status") = TRUE.
  1113. [03/19/12 14:23:46.483]:Active Directory PT: (if-op-property 'accountAction' equal "accountEnableByEntitlementGrant") = FALSE.
  1114. [03/19/12 14:23:46.484]:Active Directory PT: Rule rejected.
  1115. [03/19/12 14:23:46.484]:Active Directory PT: Evaluating selection criteria for rule 'Generate Audit Event'.
  1116. [03/19/12 14:23:46.484]:Active Directory PT: (if-operation equal "status") = TRUE.
  1117. [03/19/12 14:23:46.484]:Active Directory PT: (if-local-variable 'auditEventID' available) = FALSE.
  1118. [03/19/12 14:23:46.484]:Active Directory PT: Rule rejected.
  1119. [03/19/12 14:23:46.485]:Active Directory PT:Policy returned:
  1120. [03/19/12 14:23:46.485]:Active Directory PT:
  1121. <nds dtdversion="2.2">
  1122. <source>
  1123. <product version="3.6.10.4747">DirXML</product>
  1124. <contact>Novell, Inc.</contact>
  1125. </source>
  1126. <input>
  1127. <status level="success" type="heartbeat"/>
  1128. </input>
  1129. </nds>
  1130. [03/19/12 14:23:46.485]:Active Directory PT:Applying schema mapping policies to input.
  1131. [03/19/12 14:23:46.485]:Active Directory PT:Applying policy: %+C%14Csmp%-C.
  1132. [03/19/12 14:23:46.486]:Active Directory PT:Resolving association references.
  1133. [03/19/12 14:23:46.486]:Active Directory PT:Applying event transformation policies.
  1134. [03/19/12 14:23:46.486]:Active Directory PT:Applying policy: %+C%14Cpub-etp-EntitlementsImpl%-C.
  1135. [03/19/12 14:23:46.487]:Active Directory PT: Applying to status #1.
  1136. [03/19/12 14:23:46.487]:Active Directory PT: Evaluating selection criteria for rule 'Disallow user account delete when using entitlements'.
  1137. [03/19/12 14:23:46.488]:Active Directory PT: (if-operation equal "delete") = FALSE.
  1138. [03/19/12 14:23:46.488]:Active Directory PT: Rule rejected.
  1139. [03/19/12 14:23:46.488]:Active Directory PT: Evaluating selection criteria for rule 'Strip Login Disabled from operation (Disable Option)'.
  1140. [03/19/12 14:23:46.488]:Active Directory PT: (if-global-variable 'drv.entitlement.UserAccount' equal "true") = TRUE.
  1141. [03/19/12 14:23:46.489]:Active Directory PT: (if-global-variable 'drv.entitlement.remove' equal "disable") = TRUE.
  1142. [03/19/12 14:23:46.489]:Active Directory PT: (if-class-name equal "User") = FALSE.
  1143. [03/19/12 14:23:46.489]:Active Directory PT: Rule rejected.
  1144. [03/19/12 14:23:46.489]:Active Directory PT:Policy returned:
  1145. [03/19/12 14:23:46.489]:Active Directory PT:
  1146. <nds dtdversion="2.2">
  1147. <source>
  1148. <product version="3.6.10.4747">DirXML</product>
  1149. <contact>Novell, Inc.</contact>
  1150. </source>
  1151. <input>
  1152. <status level="success" type="heartbeat"/>
  1153. </input>
  1154. </nds>
  1155. [03/19/12 14:23:46.490]:Active Directory PT:Applying policy: %+C%14Cpub-etp-HandleMovesAndRenames%-C.
  1156. [03/19/12 14:23:46.490]:Active Directory PT: Applying to status #1.
  1157. [03/19/12 14:23:46.490]:Active Directory PT: Evaluating selection criteria for rule 'break if not a move or rename'.
  1158. [03/19/12 14:23:46.491]:Active Directory PT: (if-operation not-match "move|rename") = TRUE.
  1159. [03/19/12 14:23:46.491]:Active Directory PT: Rule selected.
  1160. [03/19/12 14:23:46.491]:Active Directory PT: Applying rule 'break if not a move or rename'.
  1161. [03/19/12 14:23:46.491]:Active Directory PT: Action: do-break().
  1162. [03/19/12 14:23:46.491]:Active Directory PT:Policy returned:
  1163. [03/19/12 14:23:46.492]:Active Directory PT:
  1164. <nds dtdversion="2.2">
  1165. <source>
  1166. <product version="3.6.10.4747">DirXML</product>
  1167. <contact>Novell, Inc.</contact>
  1168. </source>
  1169. <input>
  1170. <status level="success" type="heartbeat"/>
  1171. </input>
  1172. </nds>
  1173. [03/19/12 14:23:46.492]:Active Directory PT:Applying publisher filter.
  1174. [03/19/12 14:23:46.492]:Active Directory PT:Publisher processing status for .
  1175. [03/19/12 14:23:46.493]:Active Directory PT:Applying command transformation policies.
  1176. [03/19/12 14:23:46.493]:Active Directory PT:Applying policy: %+C%14Cpub-ctp-UserNameMap%-C.
  1177. [03/19/12 14:23:46.493]:Active Directory PT: Applying to status #1.
  1178. [03/19/12 14:23:46.493]:Active Directory PT: Evaluating selection criteria for rule 'consider user objects when name mapping is enabled'.
  1179. [03/19/12 14:23:46.493]:Active Directory PT: (if-class-name not-equal "User") = TRUE.
  1180. [03/19/12 14:23:46.494]:Active Directory PT: Rule selected.
  1181. [03/19/12 14:23:46.494]:Active Directory PT: Applying rule 'consider user objects when name mapping is enabled'.
  1182. [03/19/12 14:23:46.494]:Active Directory PT: Action: do-break().
  1183. [03/19/12 14:23:46.494]:Active Directory PT:Policy returned:
  1184. [03/19/12 14:23:46.494]:Active Directory PT:
  1185. <nds dtdversion="2.2">
  1186. <source>
  1187. <product version="3.6.10.4747">DirXML</product>
  1188. <contact>Novell, Inc.</contact>
  1189. </source>
  1190. <input>
  1191. <status level="success" type="heartbeat"/>
  1192. </input>
  1193. </nds>
  1194. [03/19/12 14:23:46.495]:Active Directory PT:Applying policy: %+C%14Cpub-ctp%-C.
  1195. [03/19/12 14:23:46.495]:Active Directory PT: Applying to status #1.
  1196. [03/19/12 14:23:46.495]:Active Directory PT: Evaluating selection criteria for rule 'set cached context value on merge'.
  1197. [03/19/12 14:23:46.495]:Active Directory PT: (if-operation equal "modify") = FALSE.
  1198. [03/19/12 14:23:46.496]:Active Directory PT: Rule rejected.
  1199. [03/19/12 14:23:46.496]:Active Directory PT: Evaluating selection criteria for rule 'Set Equivalent To Me when adding object to a group'.
  1200. [03/19/12 14:23:46.496]:Active Directory PT: (if-class-name equal "Group") = FALSE.
  1201. [03/19/12 14:23:46.496]:Active Directory PT: Rule rejected.
  1202. [03/19/12 14:23:46.496]:Active Directory PT: Evaluating selection criteria for rule 'Remove Equivalent To Me when removing object from a group'.
  1203. [03/19/12 14:23:46.497]:Active Directory PT: (if-class-name equal "Group") = FALSE.
  1204. [03/19/12 14:23:46.497]:Active Directory PT: Rule rejected.
  1205. [03/19/12 14:23:46.497]:Active Directory PT: Evaluating selection criteria for rule 'remove managed attributes when object disassociated'.
  1206. [03/19/12 14:23:46.497]:Active Directory PT: (if-operation equal "remove-association") = FALSE.
  1207. [03/19/12 14:23:46.498]:Active Directory PT: Rule rejected.
  1208. [03/19/12 14:23:46.498]:Active Directory PT: Evaluating selection criteria for rule 'Prevent unassociated users from being removed from groups'.
  1209. [03/19/12 14:23:46.510]:Active Directory PT: (if-operation equal "modify") = FALSE.
  1210. [03/19/12 14:23:46.510]:Active Directory PT: Rule rejected.
  1211. [03/19/12 14:23:46.510]:Active Directory PT:Policy returned:
  1212. [03/19/12 14:23:46.510]:Active Directory PT:
  1213. <nds dtdversion="2.2">
  1214. <source>
  1215. <product version="3.6.10.4747">DirXML</product>
  1216. <contact>Novell, Inc.</contact>
  1217. </source>
  1218. <input>
  1219. <status level="success" type="heartbeat"/>
  1220. </input>
  1221. </nds>
  1222. [03/19/12 14:23:46.511]:Active Directory PT:Applying XSLT policy: %+C%14Cpub-cts%-C.
  1223. [03/19/12 14:23:46.512]:Active Directory PT:Policy returned:
  1224. [03/19/12 14:23:46.512]:Active Directory PT:
  1225. <nds dtdversion="2.2">
  1226. <source>
  1227. <product version="3.6.10.4747">DirXML</product>
  1228. <contact>Novell, Inc.</contact>
  1229. </source>
  1230. <input>
  1231. <status level="success" type="heartbeat"/>
  1232. </input>
  1233. </nds>
  1234. [03/19/12 14:23:46.512]:Active Directory PT:Applying policy: %+C%14CPassword(Pub)-Default Password Policy%-C.
  1235. [03/19/12 14:23:46.513]:Active Directory PT: Applying to status #1.
  1236. [03/19/12 14:23:46.513]:Active Directory PT: Evaluating selection criteria for rule 'On User add, provide default password of @Dirxml1 if no password exists'.
  1237. [03/19/12 14:23:46.513]:Active Directory PT: (if-operation equal "add") = FALSE.
  1238. [03/19/12 14:23:46.513]:Active Directory PT: Rule rejected.
  1239. [03/19/12 14:23:46.513]:Active Directory PT:Policy returned:
  1240. [03/19/12 14:23:46.514]:Active Directory PT:
  1241. <nds dtdversion="2.2">
  1242. <source>
  1243. <product version="3.6.10.4747">DirXML</product>
  1244. <contact>Novell, Inc.</contact>
  1245. </source>
  1246. <input>
  1247. <status level="success" type="heartbeat"/>
  1248. </input>
  1249. </nds>
  1250. [03/19/12 14:23:46.514]:Active Directory PT:Applying policy: %+C%14CPassword(Pub)-Check Password GCV%-C.
  1251. [03/19/12 14:23:46.514]:Active Directory PT: Applying to status #1.
  1252. [03/19/12 14:23:46.515]:Active Directory PT: Evaluating selection criteria for rule 'Block publishing passwords to Identity Manager data store when adding a object'.
  1253. [03/19/12 14:23:46.515]:Active Directory PT: (if-global-variable 'enable-password-publish' equal "false") = FALSE.
  1254. [03/19/12 14:23:46.515]:Active Directory PT: Rule rejected.
  1255. [03/19/12 14:23:46.515]:Active Directory PT: Evaluating selection criteria for rule 'Block sending modify-password changes to the Identity Manager data store'.
  1256. [03/19/12 14:23:46.516]:Active Directory PT: (if-global-variable 'enable-password-publish' equal "false") = FALSE.
  1257. [03/19/12 14:23:46.516]:Active Directory PT: Rule rejected.
  1258. [03/19/12 14:23:46.516]:Active Directory PT:Policy returned:
  1259. [03/19/12 14:23:46.516]:Active Directory PT:
  1260. <nds dtdversion="2.2">
  1261. <source>
  1262. <product version="3.6.10.4747">DirXML</product>
  1263. <contact>Novell, Inc.</contact>
  1264. </source>
  1265. <input>
  1266. <status level="success" type="heartbeat"/>
  1267. </input>
  1268. </nds>
  1269. [03/19/12 14:23:46.517]:Active Directory PT:Applying policy: %+C%14CPassword(Pub)-Publish Distribution Password%-C.
  1270. [03/19/12 14:23:46.517]:Active Directory PT: Applying to status #1.
  1271. [03/19/12 14:23:46.517]:Active Directory PT: Evaluating selection criteria for rule 'Add nspmDistributionAttribute attribute to add operation'.
  1272. [03/19/12 14:23:46.517]:Active Directory PT: (if-global-variable 'publish-password-to-dp' equal "true") = FALSE.
  1273. [03/19/12 14:23:46.518]:Active Directory PT: Rule rejected.
  1274. [03/19/12 14:23:46.518]:Active Directory PT: Evaluating selection criteria for rule 'Change modify-password operations to a modify'.
  1275. [03/19/12 14:23:46.518]:Active Directory PT: (if-global-variable 'publish-password-to-dp' equal "true") = FALSE.
  1276. [03/19/12 14:23:46.518]:Active Directory PT: Rule rejected.
  1277. [03/19/12 14:23:46.518]:Active Directory PT:Policy returned:
  1278. [03/19/12 14:23:46.519]:Active Directory PT:
  1279. <nds dtdversion="2.2">
  1280. <source>
  1281. <product version="3.6.10.4747">DirXML</product>
  1282. <contact>Novell, Inc.</contact>
  1283. </source>
  1284. <input>
  1285. <status level="success" type="heartbeat"/>
  1286. </input>
  1287. </nds>
  1288. [03/19/12 14:23:46.519]:Active Directory PT:Applying policy: %+C%14CPassword(Pub)-Publish NDS Password%-C.
  1289. [03/19/12 14:23:46.599]:Active Directory PT: Applying to status #1.
  1290. [03/19/12 14:23:46.599]:Active Directory PT: Evaluating selection criteria for rule 'Block publishing passwords to NDS password'.
  1291. [03/19/12 14:23:46.600]:Active Directory PT: (if-global-variable 'publish-password-to-nds' equal "false") = FALSE.
  1292. [03/19/12 14:23:46.600]:Active Directory PT: Rule rejected.
  1293. [03/19/12 14:23:46.600]:Active Directory PT: Evaluating selection criteria for rule 'Block sending modify-password changes to the NDS password'.
  1294. [03/19/12 14:23:46.600]:Active Directory PT: (if-global-variable 'publish-password-to-nds' equal "false") = FALSE.
  1295. [03/19/12 14:23:46.601]:Active Directory PT: Rule rejected.
  1296. [03/19/12 14:23:46.601]:Active Directory PT:Policy returned:
  1297. [03/19/12 14:23:46.601]:Active Directory PT:
  1298. <nds dtdversion="2.2">
  1299. <source>
  1300. <product version="3.6.10.4747">DirXML</product>
  1301. <contact>Novell, Inc.</contact>
  1302. </source>
  1303. <input>
  1304. <status level="success" type="heartbeat"/>
  1305. </input>
  1306. </nds>
  1307. [03/19/12 14:23:46.601]:Active Directory PT:Applying policy: %+C%14CPassword(Pub)-Add Password Payload%-C.
  1308. [03/19/12 14:23:46.602]:Active Directory PT: Applying to status #1.
  1309. [03/19/12 14:23:46.602]:Active Directory PT: Evaluating selection criteria for rule 'Add operation-data element to password operations'.
  1310. [03/19/12 14:23:46.602]:Active Directory PT: (if-operation equal "add") = FALSE.
  1311. [03/19/12 14:23:46.602]:Active Directory PT: (if-operation equal "add") = FALSE.
  1312. [03/19/12 14:23:46.603]:Active Directory PT: (if-operation equal "modify-password") = FALSE.
  1313. [03/19/12 14:23:46.603]:Active Directory PT: (if-operation equal "modify") = FALSE.
  1314. [03/19/12 14:23:46.603]:Active Directory PT: Rule rejected.
  1315. [03/19/12 14:23:46.603]:Active Directory PT: Evaluating selection criteria for rule 'Add payload data to password operations'.
  1316. [03/19/12 14:23:46.603]:Active Directory PT: (if-operation equal "addPayloadToPassword") = FALSE.
  1317. [03/19/12 14:23:46.604]:Active Directory PT: (if-operation equal "add") = FALSE.
  1318. [03/19/12 14:23:46.604]:Active Directory PT: (if-operation equal "modify-password") = FALSE.
  1319. [03/19/12 14:23:46.604]:Active Directory PT: (if-operation equal "modify") = FALSE.
  1320. [03/19/12 14:23:46.604]:Active Directory PT: Rule rejected.
  1321. [03/19/12 14:23:46.604]:Active Directory PT:Policy returned:
  1322. [03/19/12 14:23:46.604]:Active Directory PT:
  1323. <nds dtdversion="2.2">
  1324. <source>
  1325. <product version="3.6.10.4747">DirXML</product>
  1326. <contact>Novell, Inc.</contact>
  1327. </source>
  1328. <input>
  1329. <status level="success" type="heartbeat"/>
  1330. </input>
  1331. </nds>
  1332. [03/19/12 14:23:46.605]:Active Directory PT:Applying policy: %+C%14Clib-AccountTracking-WriteAccountsOnAdds-pub-ctp-V1%-C.
  1333. [03/19/12 14:23:46.605]:Active Directory PT: Applying to status #1.
  1334. [03/19/12 14:23:46.605]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - disregard policy if disabled'.
  1335. [03/19/12 14:23:46.606]:Active Directory PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  1336. [03/19/12 14:23:46.606]:Active Directory PT: Rule rejected.
  1337. [03/19/12 14:23:46.606]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - on add operation add Dirxml-Accounts'.
  1338. [03/19/12 14:23:46.606]:Active Directory PT: (if-operation equal "add") = FALSE.
  1339. [03/19/12 14:23:46.607]:Active Directory PT: Rule rejected.
  1340. [03/19/12 14:23:46.607]:Active Directory PT:Policy returned:
  1341. [03/19/12 14:23:46.607]:Active Directory PT:
  1342. <nds dtdversion="2.2">
  1343. <source>
  1344. <product version="3.6.10.4747">DirXML</product>
  1345. <contact>Novell, Inc.</contact>
  1346. </source>
  1347. <input>
  1348. <status level="success" type="heartbeat"/>
  1349. </input>
  1350. </nds>
  1351. [03/19/12 14:23:46.607]:Active Directory PT:Filtering out notification-only attributes.
  1352. [03/19/12 14:23:46.608]:Active Directory PT:Pumping XDS to eDirectory.
  1353. [03/19/12 14:23:46.608]:Active Directory PT:Performing operation status for .
  1354. [03/19/12 14:23:46.608]:Active Directory PT:
  1355. DirXML Log Event -------------------
  1356. Driver: \EDIR2ADLAB\fdny\AD-TEST\Active Directory
  1357. Channel: Publisher
  1358. Status: Success
  1359. [03/19/12 14:23:46.609]:Active Directory PT:Fixing up association references.
  1360. [03/19/12 14:23:46.609]:Active Directory PT:Applying schema mapping policies to output.
  1361. [03/19/12 14:23:46.609]:Active Directory PT:Applying policy: %+C%14Csmp%-C.
  1362. [03/19/12 14:23:46.609]:Active Directory PT:Applying output transformation policies.
  1363. [03/19/12 14:23:46.609]:Active Directory PT:Applying policy: %+C%14Cotp%-C.
  1364. [03/19/12 14:23:46.610]:Active Directory PT: Applying to status #1.
  1365. [03/19/12 14:23:46.610]:Active Directory PT: Evaluating selection criteria for rule 'Street Address: Convert LF to CR-LF'.
  1366. [03/19/12 14:23:46.610]:Active Directory PT: Rule selected.
  1367. [03/19/12 14:23:46.610]:Active Directory PT: Applying rule 'Street Address: Convert LF to CR-LF'.
  1368. [03/19/12 14:23:46.610]:Active Directory PT: Action: do-reformat-op-attr("streetAddress",token-replace-all("[^\r]\n","\r\n",token-local-variable("current-value"))).
  1369. [03/19/12 14:23:46.611]:Active Directory PT: Evaluating selection criteria for rule 'logonHours: Convert to Active Directory form'.
  1370. [03/19/12 14:23:46.611]:Active Directory PT: Rule selected.
  1371. [03/19/12 14:23:46.612]:Active Directory PT: Applying rule 'logonHours: Convert to Active Directory form'.
  1372. [03/19/12 14:23:46.612]:Active Directory PT: Action: do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2ADLenient($current-value)")).
  1373. [03/19/12 14:23:46.612]:Active Directory PT: Evaluating selection criteria for rule 'accountExpires: Convert to Active Directory form'.
  1374. [03/19/12 14:23:46.612]:Active Directory PT: (if-op-attr 'accountExpires' changing) = FALSE.
  1375. [03/19/12 14:23:46.612]:Active Directory PT: Rule rejected.
  1376. [03/19/12 14:23:46.612]:Active Directory PT: Evaluating selection criteria for rule 'lockoutTime: Convert to Active Directory form'.
  1377. [03/19/12 14:23:46.612]:Active Directory PT: Rule selected.
  1378. [03/19/12 14:23:46.613]:Active Directory PT: Applying rule 'lockoutTime: Convert to Active Directory form'.
  1379. [03/19/12 14:23:46.613]:Active Directory PT: Action: do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateEpoch2FileTime($current-value)")).
  1380. [03/19/12 14:23:46.613]:Active Directory PT: Evaluating selection criteria for rule 'Add: User - convert multi-valued Telephone to single value'.
  1381. [03/19/12 14:23:46.613]:Active Directory PT: (if-operation equal "add") = FALSE.
  1382. [03/19/12 14:23:46.613]:Active Directory PT: Rule rejected.
  1383. [03/19/12 14:23:46.613]:Active Directory PT: Evaluating selection criteria for rule 'update Active Directory logon name'.
  1384. [03/19/12 14:23:46.614]:Active Directory PT: (if-xpath true "self::status[@level = 'success']/operation-data/windows-2000-logon-name") = FALSE.
  1385. [03/19/12 14:23:46.614]:Active Directory PT: Rule rejected.
  1386. [03/19/12 14:23:46.614]:Active Directory PT: Evaluating selection criteria for rule 'Exchange: Remove HomeMDB when disabled'.
  1387. [03/19/12 14:23:46.614]:Active Directory PT: (if-global-variable 'drv.exchMailboxMethod' equal "disabled") = TRUE.
  1388. [03/19/12 14:23:46.614]:Active Directory PT: Rule selected.
  1389. [03/19/12 14:23:46.614]:Active Directory PT: Applying rule 'Exchange: Remove HomeMDB when disabled'.
  1390. [03/19/12 14:23:46.614]:Active Directory PT: Action: do-strip-op-attr("homeMDB").
  1391. [03/19/12 14:23:46.615]:Active Directory PT:Policy returned:
  1392. [03/19/12 14:23:46.615]:Active Directory PT:
  1393. <nds dtdversion="3.5" ndsversion="8.x">
  1394. <source>
  1395. <product version="3.6.10.4747">DirXML</product>
  1396. <contact>Novell, Inc.</contact>
  1397. </source>
  1398. <output>
  1399. <status event-id="0" level="success"></status>
  1400. </output>
  1401. </nds>
  1402. [03/19/12 14:23:46.615]:Active Directory PT:Applying policy: %+C%14CPassword(Sub)-Pub Email Notifications%-C.
  1403. [03/19/12 14:23:46.615]:Active Directory PT: Applying to status #1.
  1404. [03/19/12 14:23:46.615]:Active Directory PT: Evaluating selection criteria for rule 'Send e-mail for a failed publish password operation'.
  1405. [03/19/12 14:23:46.616]:Active Directory PT: (if-global-variable 'notify-user-on-password-dist-failure' equal "true") = TRUE.
  1406. [03/19/12 14:23:46.616]:Active Directory PT: (if-operation equal "status") = TRUE.
  1407. [03/19/12 14:23:46.616]:Active Directory PT: (if-xpath true "self::status[@level != 'success']/operation-data/password-publish-status") = FALSE.
  1408. [03/19/12 14:23:46.616]:Active Directory PT: Rule rejected.
  1409. [03/19/12 14:23:46.616]:Active Directory PT:Policy returned:
  1410. [03/19/12 14:23:46.616]:Active Directory PT:
  1411. <nds dtdversion="3.5" ndsversion="8.x">
  1412. <source>
  1413. <product version="3.6.10.4747">DirXML</product>
  1414. <contact>Novell, Inc.</contact>
  1415. </source>
  1416. <output>
  1417. <status event-id="0" level="success"></status>
  1418. </output>
  1419. </nds>
  1420. [03/19/12 14:23:46.617]:Active Directory PT:Applying policy: %+C%14Clib-CredProv-ConvertPayload-otp-V1%-C.
  1421. [03/19/12 14:23:46.617]:Active Directory PT: Applying to status #1.
  1422. [03/19/12 14:23:46.617]:Active Directory PT: Evaluating selection criteria for rule 'Is credential provisioning enabled? Are there any custom payloads?'.
  1423. [03/19/12 14:23:46.617]:Active Directory PT: Rule selected.
  1424. [03/19/12 14:23:46.617]:Active Directory PT: Applying rule 'Is credential provisioning enabled? Are there any custom payloads?'.
  1425. [03/19/12 14:23:46.617]:Active Directory PT: Action: do-if().
  1426. [03/19/12 14:23:46.617]:Active Directory PT: Evaluating conditions.
  1427. [03/19/12 14:23:46.618]:Active Directory PT: (if-global-variable 'credprov.enable' not-equal "true") = TRUE.
  1428. [03/19/12 14:23:46.618]:Active Directory PT: Performing if actions.
  1429. [03/19/12 14:23:46.618]:Active Directory PT: Action: do-break().
  1430. [03/19/12 14:23:46.618]:Active Directory PT:Policy returned:
  1431. [03/19/12 14:23:46.618]:Active Directory PT:
  1432. <nds dtdversion="3.5" ndsversion="8.x">
  1433. <source>
  1434. <product version="3.6.10.4747">DirXML</product>
  1435. <contact>Novell, Inc.</contact>
  1436. </source>
  1437. <output>
  1438. <status event-id="0" level="success"></status>
  1439. </output>
  1440. </nds>
  1441. [03/19/12 14:23:46.618]:Active Directory PT:Applying policy: %+C%14Clib-AccountTracking-Subscribe-otp-V1%-C.
  1442. [03/19/12 14:23:46.619]:Active Directory PT: Applying to status #1.
  1443. [03/19/12 14:23:46.619]:Active Directory PT: Evaluating selection criteria for rule 'AccountTracking - disregard if disabled or wrong object class'.
  1444. [03/19/12 14:23:46.619]:Active Directory PT: Rule selected.
  1445. [03/19/12 14:23:46.619]:Active Directory PT: Applying rule 'AccountTracking - disregard if disabled or wrong object class'.
  1446. [03/19/12 14:23:46.619]:Active Directory PT: Action: do-if().
  1447. [03/19/12 14:23:46.619]:Active Directory PT: Evaluating conditions.
  1448. [03/19/12 14:23:46.619]:Active Directory PT: (if-global-variable 'drv.acctTrk.enable' not-equal "true") = FALSE.
  1449. [03/19/12 14:23:46.619]:Active Directory PT: Performing else actions.
  1450. [03/19/12 14:23:46.621]:Active Directory PT: Action: do-for-each(arg-node-set(token-global-variable("drv.acctTrk.objectClass"))).
  1451. [03/19/12 14:23:46.621]:Active Directory PT: arg-node-set(token-global-variable("drv.acctTrk.objectClass"))
  1452. [03/19/12 14:23:46.622]:Active Directory PT: token-global-variable("drv.acctTrk.objectClass")
  1453. [03/19/12 14:23:46.622]:Active Directory PT: Token Value: {"user"}.
  1454. [03/19/12 14:23:46.622]:Active Directory PT: Arg Value: {"user"}.
  1455. [03/19/12 14:23:46.622]:Active Directory PT: Performing actions for local-variable(current-node) = "user".
  1456. [03/19/12 14:23:46.622]:Active Directory PT: Action: do-if().
  1457. [03/19/12 14:23:46.622]:Active Directory PT: Evaluating conditions.
  1458. [03/19/12 14:23:46.622]:Active Directory PT: (if-class-name equal "$current-node$") = FALSE.
  1459. [03/19/12 14:23:46.623]:Active Directory PT: Performing else actions.
  1460. [03/19/12 14:23:46.623]:Active Directory PT: Action: do-if().
  1461. [03/19/12 14:23:46.623]:Active Directory PT: Evaluating conditions.
  1462. [03/19/12 14:23:46.623]:Active Directory PT: (if-local-variable 'pass' not-available) = TRUE.
  1463. [03/19/12 14:23:46.623]:Active Directory PT: Performing if actions.
  1464. [03/19/12 14:23:46.623]:Active Directory PT: Action: do-break().
  1465. [03/19/12 14:23:46.623]:Active Directory PT:Policy returned:
  1466. [03/19/12 14:23:46.623]:Active Directory PT:
  1467. <nds dtdversion="3.5" ndsversion="8.x">
  1468. <source>
  1469. <product version="3.6.10.4747">DirXML</product>
  1470. <contact>Novell, Inc.</contact>
  1471. </source>
  1472. <output>
  1473. <status event-id="0" level="success"></status>
  1474. </output>
  1475. </nds>
  1476. [03/19/12 14:23:46.624]:Active Directory PT:
  1477. <nds dtdversion="3.5" ndsversion="8.x">
  1478. <source>
  1479. <product version="3.6.10.4747">DirXML</product>
  1480. <contact>Novell, Inc.</contact>
  1481. </source>
  1482. <output>
  1483. <status event-id="0" level="success"></status>
  1484. </output>
  1485. </nds>
  1486. [03/19/12 14:23:46.624]:Active Directory PT:Remote Interface Driver: Sending...
  1487. [03/19/12 14:23:46.624]:Active Directory PT:
  1488. <nds dtdversion="3.5" ndsversion="8.x">
  1489. <source>
  1490. <product version="3.6.10.4747">DirXML</product>
  1491. <contact>Novell, Inc.</contact>
  1492. </source>
  1493. <output>
  1494. <status event-id="0" level="success"></status>
  1495. </output>
  1496. </nds>
  1497. [03/19/12 14:23:46.625]:Active Directory PT:Remote Interface Driver: Document sent.
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!