Article

coolguys's picture
article
Reads:

3337

Score:
0
0
 
Comments:

0

Reading the DN without Mapping the Attribute

Author Info

10 January 2007 - 4:26am
Submitted by: coolguys

Author Blog
Author Profile

Tags

Tags Map

(View Disclaimer)

Problem

A Forum reader recently asked:

"I'm using a modify operation on the subscriber channel of my AD-Driver. My current operations object is associated. What I need to know is the distinguished name in my destination object (the object in the AD). When I have a look at the object with LDAP, it looks somewhat like "cn=users name, ou=something, ou=something other, dc= ..." This is what I built up in placement rule when the object was created. Now I want to read this thing from AD via the assoc in my operation. I tried it several ways but didn't find a way."

And here's the response from Identity Manager expert Father Ramon ...

Solution

The query to the application produces an eDirectory DN. That's because IDM automatically marshalls referential attributes between the application and eDirectory namespaces, as that is what is needed for the synchronization of the same.

Here's an example of a rule in an input transformation that would allow you to use the destination attribute token and not have the attribute automatically mapped to corresponding eDir object before you get it:

<rule>
  <conditions/>
  <actions>
   <do-reformat-op-attr name="distinguishedName">
    <arg-value type="string">
     <token-local-variable name="current-value"/>
    </arg-value>
   </do-reformat-op-attr>
  </actions>
</rule>

For an example of querying from XPath to get the DN, see:
http://groups-beta.google.com/group/novell.support.nsure-identity-manager/msg/1a068b49646498c2


Disclaimer: As with everything else at Cool Solutions, this content is definitely not supported by Novell (so don't even think of calling Support if you try something and it blows up).

It was contributed by a community member and is published "as is." It seems to have worked for at least one person, and might work for you. But please be sure to test, test, test before you do anything drastic with it.



Related Articles


User Comments

© 2013 Novell