Moving Disabled User Objects to the Inactive Container

Novell Cool Solutions: Tip

Digg This - Slashdot This Posted: 15 Mar 2006

Problem

A reader asked:

"How do I set a rule so that when I disable a user in eDirectory, his eDirectory object is moved to the Inactive Container? Can I use the Login Disabled attribute for the condition? My sub choices are Equal, Not Equal, Available, Not Available. Do I just say Equal to TRUE?"

Solution

You will want to use the action "do-move-src-object" when the Login Disabled attribute is changing to TRUE.

Try the rule below ...

<rule>
<description>Move user based on Login being disabled</description>
    <conditions>
    <and>
    <if-class-name mode="nocase" op="equal">User</if-class-name>
    <if-operation op="equal">modify</if-operation>
    <if-op-attr name="Login Disabled" op="available"/>
    <if-op-attr mode="nocase" name="Login Disabled"op="changing-to">true</if-op-attr>
    </and>
    </conditions>
<actions>
    <do-move-src-object>
    <arg-dn>
    <token-text xml:space="preserve">\Org\InactiveUsers\</token-text>
    <token-src-attr name="CN"/>
    </arg-dn>
    </do-move-src-object>
</actions>
</rule>

I am guessing you will want to build another rule that will do the opposite when the user is enabled.

Novell Cool Solutions (corporate web communities) are produced by WebWise Solutions. www.webwiseone.com