Article

anonymous's picture
article
Reads:

3852

Score:
0
0
 
Comments:

0

Stripping Data from Attributes, AD to eDirectory

Author Info

28 March 2007 - 1:33am
Submitted by: anonymous (not verified)

(View Disclaimer)

Problem

A Forum reader recently asked:

"We are trying to sync an attribute called "whenCreated" from MAD to eDirectory. We need to strip off some information from the attribute on the way from MAD to eDirectory. It has an extra .0Z at the end of the time data. What is the best way to strip off the extra info, and where should we create the policy?"

And here's the response from Father Ramon ...

Solution

You can use an input transformation like this:

<rule>
  <description>Reformat whenCreated
  <conditions/>
  <actions>
   <do-reformat-op-attr name="whenCreated">
    <arg-value type="string">
     <token-replace-first regex="(^.*)\..*Z" replace-with="$1">
      <token-local-variable name="current-value"/>
     </token-replace-first>
    </arg-value>
   </do-reformat-op-attr>
  </actions>
</rule>

You might also want to convert it to eDirectory time format. The input transformation that comes in the default AD configuration has rules that do this for other attributes (accountExpires, lockoutTime). Copy one of the rules for these and change the rule and attribute name.


Disclaimer: As with everything else at Cool Solutions, this content is definitely not supported by Novell (so don't even think of calling Support if you try something and it blows up).

It was contributed by a community member and is published "as is." It seems to have worked for at least one person, and might work for you. But please be sure to test, test, test before you do anything drastic with it.




User Comments

© 2013 Novell