LoopbackDriver_20180131

<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE policy PUBLIC "policy-builder-dtd" "C:\netiq\idm\apps\Designer\plugins\com.novell.idm.policybuilder_4.0.0.201711091732\DTD\dirxmlscript4.0.2.dtd"><policy xmlns:es="http://www.novell.com/nxsl/ecmascript">
	<rule>
		<description>Find Expired Guest Users</description>
		<comment xml:space="preserve">This is to find expired guest accounts</comment>
		<comment name="author" xml:space="preserve">CNM</comment>
		<conditions>
			<and>
				<if-operation mode="nocase" op="equal">trigger</if-operation>
				<if-xml-attr mode="nocase" name="source" op="equal">FindExpiredGuests</if-xml-attr>
			</and>
		</conditions>
		<actions>
			<do-trace-message level="3">
				<arg-string>
					<token-text xml:space="preserve">Now executing 'Find Expired Guests' code</token-text>
				</arg-string>
			</do-trace-message>
			<do-set-local-variable disabled="true" name="lv-now" scope="policy">
				<arg-string>
					<token-time format="!CTIME" tz="UTC"/>
				</arg-string>
			</do-set-local-variable>
			<do-set-local-variable name="listOfExpiredGuests" scope="policy">
				<arg-node-set>
					<token-query class-name="User" datastore="src" max-result-count="150000">
						<arg-dn>
							<token-global-variable name="idv.dit.data.users"/>
						</arg-dn>
						<arg-match-attr name="OSUaffiliationList">
							<arg-value type="string">
								<token-text xml:space="preserve">Guest</token-text>
							</arg-value>
						</arg-match-attr>
					</token-query>
				</arg-node-set>
			</do-set-local-variable>
			<do-append-xml-element expression="." name="ExpiredGuests"/>
			<do-set-local-variable name="ldap-filter" scope="policy">
				<arg-string>
					<token-text xml:space="preserve">(&amp;(OSUaffiliationList=Guest)(OSUguestExpires>=</token-text>
					<token-convert-time dest-format="YYYYMMdd000000'Z'" src-format="!CTIME" src-tz="UTC">
						<token-time format="!CTIME" tz="UTC"/>
					</token-convert-time>
					<token-text xml:space="preserve">)(OSUguestExpires&lt;=</token-text>
					<token-convert-time dest-format="YYYYMMdd235959'Z'" src-format="!CTIME" src-tz="UTC">
						<token-time format="!CTIME" tz="UTC"/>
					</token-convert-time>
					<token-text xml:space="preserve">))</token-text>
				</arg-string>
			</do-set-local-variable>
			<do-clone-xpath dest-expression="ExpiredGuests" disabled="true" src-expression="es:ldapSearch('~NOVLLIBLDAP.host~','~NOVLLIBLDAP.port~','~NOVLLIBLDAP.user~','~NOVLLIBLDAP.password~','~NOVLLIBLDAP.base~','~NOVLLIBLDAP.scope~',$ldap-filter,'cn')"/>
			<do-clone-xpath dest-expression="ExpiredGuests" src-expression="es:ldapSearchWithTLS('~NOVLLIBLDAP.host~','~NOVLLIBLDAP.port~','~NOVLLIBLDAP.user~','~NOVLLIBLDAP.password~','~NOVLLIBLDAP.base~','~NOVLLIBLDAP.scope~','~NOVLLIBLDAP.keystore~',$ldap-filter,'cn')"/>
			<do-for-each>
				<arg-node-set>
					<token-xpath expression="*/instance"/>
				</arg-node-set>
				<arg-actions>
					<do-set-local-variable name="userDN" scope="policy">
						<arg-string>
							<token-xpath expression="$current-node/@src-dn"/>
						</arg-string>
					</do-set-local-variable>
					<do-set-local-variable name="lv-CN" scope="policy">
						<arg-string>
							<token-parse-dn dest-dn-format="dot" length="-1" src-dn-format="ldap" start="-1">
								<token-local-variable name="userDN"/>
							</token-parse-dn>
						</arg-string>
					</do-set-local-variable>
					<do-trace-message level="3">
						<arg-string>
							<token-text xml:space="preserve">user account </token-text>
							<token-local-variable name="lv-CN"/>
							<token-text xml:space="preserve">flagged inactive (userStatus attribute = 0).</token-text>
						</arg-string>
					</do-trace-message>
					<do-set-src-attr-value class-name="User" name="userStatus">
						<arg-dn>
							<token-text xml:space="preserve">\IDMTEST1\osumc\users\</token-text>
							<token-local-variable name="lv-CN"/>
						</arg-dn>
						<arg-value type="string">
							<token-text xml:space="preserve">0</token-text>
						</arg-value>
					</do-set-src-attr-value>
					<do-add-src-attr-value class-name="User" name="IWS:User Comment">
						<arg-dn>
							<token-text xml:space="preserve">\IDMTEST1\osumc\users\</token-text>
							<token-local-variable name="lv-CN"/>
						</arg-dn>
						<arg-value type="string">
							<token-text xml:space="preserve">Account entered inactive status on </token-text>
							<token-time format="!MEDIUM.DATETIME"/>
						</arg-value>
					</do-add-src-attr-value>
				</arg-actions>
			</do-for-each>
		</actions>
	</rule>
	<rule>
		<description>Veto All</description>
		<conditions>
			<and/>
		</conditions>
		<actions>
			<do-veto/>
		</actions>
	</rule>
</policy>