Conditional creation of accounts in a resource - required field not working

Question

Hi,
We want to conditionally create account objects in a resource, based upon whether or not the users account has a non-empty value for a particular atttribute.
To me this seems to be what the 'required' attribute on a field is for, in theory I should be able to tag a field as required, and then if an account dosn't have a value for the attribute, it won't be created on the resource.
The Help, from IDM6.0, says the following:
Required -- If this attribute is required to create an account on the resource,
select the option. This selection applies only when creating accounts.
When I try to do this though, it fails, it goes ahead and creates the account within the resource anyway.
So what did I do wrong, or am I misunderstanding the meaning of this.
To test this, I created 2 XML Resources, Res1, and Res2.
I specified that Res1 had accountId, and email as attributes.
I specified that Res2 had accountId, and email as attributes, but ticked email as required.
I made accountId the idntity template in both cases.
I then created 2 test accounts test1, and test2, but only gave an email address to test1, but assigned both resources to both accounts.
Both resource xml files had both users listed.
For those who care more, the reason we want to do this is that we are running an LDAP with a sendmail tree, and want to populate this via IDM, all our users have email accounts, but not all have email aliases. Therefore, we only need some of the users to have entries that look like this.
sendmailMTAKey=fred.bloggs, ou=sendmail, o=anu.edu.au
sendmailMTAHost=anu.edu.au
sendmailMTAAliasValue=u1234567
sendmailMTAKey=fred.bloggs
sendmailMTAAliasGrouping=aliases
objectClass=sendmailMTA
objectClass=sendmailMTAAlias
objectClass=sendmailMTAAliasObject
objectClass=top
So I guess the question is really 2 things, what am I doing wrong with conditional account creation? Is this the right way to create these entries in the LDAP sendmail tree?

Answer 1

Hi again,
For those who care, I've got a resolution to the specific problem I mentioned in the above post, even if no answer to the general question of conditionally adding accounts on resources.
In this specific case, I had been given a poor description of the requirements of the sendmail schema. It turned out on closer investigation that a single ldap record could hold all the information needed. It seems the sendmai schema had been implemented inefficiently locally, before we looked to run it through IDM.