Sun LDAP to IDM synchronization issue

Question

Hello friends, I am trying to synchronize all the new accounts created in sun LDAP to IDM. It runs every 10 minutes as configured but does not pick the new user from LDAP. Here is the brief configuration detail.
(1) I have switched on the "Retro Plugin" for LDAP and found the changes are getting logged. The sample entry of the change log looks like :-
dn: changenumber=665,cn=changelog
objectClass: top
objectClass: changelogentry
changeNumber: 665
targetDn: uid=zorouser7,ou=people,ou=appuser,dc=educ,dc=mde
changeTime: 20090518211551Z
changeType: modify
changes:: cmVwbGFjZTogb2JwYXNzd29yZGNoYW5nZWZsYWcKb2JwYXNzd29yZGNoYW5nZWZsYWc6IGZhbHNlCi0KcmVwbGFjZTogb2JwYXNzd29yZGNyZWF0aW9uZGF0ZQpvYnBhc3N3b3JkY3JlYXRpb25kYXRlOiAyMDA5LTA1LTE4VDIxOjE1OjUwWgotCnJlcGxhY2U6IG1vZGlmaWVyc05hbWUKbW9kaWZpZXJzTmFtZTogY249b2JsaXgKLQpyZXBsYWNlOiBtb2RpZnlUaW1lc3RhbXAKbW9kaW
Z5VGltZXN0YW1wOiAyMDA5MDUxODIxMTU1MFoKLQoA
creatorsname: cn=Retro Changelog Plugin,cn=plugins,cn=config
modifiersname: cn=Retro Changelog Plugin,cn=plugins,cn=config
createtimestamp: 20090518211551Z
modifytimestamp: 20090518211551Z
nsuniqueid: 081d2284-1dd211b2-80b380e1-7558dd15
parentid: 1
entryid: 666
entrydn: changenumber=665,cn=changelog
numsubordinates: 0
subschemasubentry: cn=schema
hassubordinates: FALSE
(2) Here is my synchronization policy for LDAP resource :-
o Object class to synchronize : inetorgperson mdeUser mdeAuthZ OblixPersonPwdPolicy OblixOrgPerson (Last four are custom object)
o Ldap Filter for account synchronize : objectClass=inetOrgPerson
o Attributes to synchronize : uid userPassword givenName sn cn mail telephoneNumber objectClass mdeApplicationId mdeRoleId
o change log block size : 100
o Change Number Attribute Name : 665
o Proxy Administrator : Configurator
o Input form : Tabbed : User Form
o Create Unmatched Accounts : yes
o Assign source resource on create events : yes
(3) The IDM log for synchronization shows the following detail for each polling :-
2009-05-18T17:20:00.069-0500: Pause completed
2009-05-18T17:20:00.131-0500: Polling
2009-05-18T17:20:00.209-0500: Start of poll - lastUpdated = {changenumber=266}
2009-05-18T17:20:00.209-0500: buildSearchParams:BEGIN
2009-05-18T17:20:00.209-0500: Block Size: 100
2009-05-18T17:20:00.209-0500: Change Number Attribute Name: 665
2009-05-18T17:20:00.209-0500: Searching for: (&(665>=267)(665<=366))
2009-05-18T17:20:00.209-0500: Search attributes: [targetdn, changetype, changes, changetime, changenumber, newrdn, deleteoldrdn, newsuperior]
2009-05-18T17:20:00.225-0500: buildSearchParams:END
2009-05-18T17:20:00.240-0500: End of poll - lastUpdated = {changenumber=266}
2009-05-18T17:20:00.240-0500: Poll complete.
2009-05-18T17:20:00.240-0500: SARunner: loop 1
2009-05-18T17:20:00.272-0500: Started, paused until Mon May 18 17:30:00 CDT 2009
Please help .....
- Kabi
Edited by: kpp on May 18, 2009 5:21 PM

Answer 1

Maybe something like this. Keep in mind, your LDAP may have specific rules for what really constitutes a Create, Update, or Delete.
<?xml version='1.0' encoding='UTF-8'?>
<!DOCTYPE Configuration PUBLIC 'waveset.dtd' 'waveset.dtd'>
<Configuration name='LDAP Active Sync Form' wstype='UserForm'>
     <Extension>
          <Form name='LDAP Active Sync Form' objectLocationID='objectType=UserForm&objectName=LDAP+Active+Sync+Form&objectPath=0&isBegin=true'>
               <Field name='IAPI.cancel'>
                    <Expansion>
                         <s>true</s>
                    </Expansion>
                    <Disable>
                         <isnull>
                              <select>
                                   <ref>activeSync.changedAttributes.accountType</ref>
                                   <ref>activeSync.accountType</ref>
                              </select>
                         </isnull>
                    </Disable>
               </Field>
               <Field name='password.password'>
                    <Expansion>
                         <s>TestPassword1</s>                              
                    </Expansion>
               </Field>
               <Field name='waveset.accountId'>
                    <Expansion>
                         <ref>activeSync.accountId</ref>
                    </Expansion>
                    <Disable>
                         <neq>
                              <upcase>
                                   <ref>feedOp</ref>
                              </upcase>
                              <upcase>
                                   <s>create</s>
                              </upcase>
                         </neq>
                    </Disable>
               </Field>
               <Field name='waveset.resources'>
                    <Expansion>
                         <list>
                              <s>LDAP_RESOURCE_NAME</s>
                         </list>
                    </Expansion>
                    <Disable>
                         <neq>
                              <upcase>
                                   <ref>feedOp</ref>
                              </upcase>
                              <upcase>
                                   <s>create</s>
                              </upcase>
                         </neq>
                    </Disable>
               </Field>
               <Field name='waveset.organization'>
                    <Expansion>
                         <s>Top:Something</s>
                    </Expansion>
                    <Disable>
                         <neq>
                              <upcase>
                                   <ref>feedOp</ref>
                              </upcase>
                              <upcase>
                                   <s>create</s>
                              </upcase>
                         </neq>
                    </Disable>
               </Field>
               <Field name='accounts[Lighthouse].email'>
                    <Expansion>
                         <ref>activeSync.mail</ref>
                    </Expansion>
               </Field>
               <Field name='global.idmManager'>
                    <Expansion>
                         <ref>activeSync.supervisor</ref>
                    </Expansion>
                    <Disable>
                         <neq>
                              <upcase>
                                   <ref>feedOp</ref>
                              </upcase>
                              <upcase>
                                   <s>create</s>
                              </upcase>
                         </neq>
                    </Disable>
               </Field>
               <Field name='waveset.idmManager'>
                    <Expansion>
                         <ref>global.idmManager</ref>
                    </Expansion>
                    <Disable>
                         <neq>
                              <upcase>
                                   <ref>feedOp</ref>
                              </upcase>
                              <upcase>
                                   <s>create</s>
                              </upcase>
                         </neq>
                    </Disable>
               </Field>
               <Field name='viewOptions.Process'>
                    <Expansion>
                         <switch>
                              <upcase>
                                   <ref>feedOp</ref>
                              </upcase>
                              <case>
                                   <s>CREATE</s>
                                   <s>Active Sync Create User Workflow</s>
                              </case>
                              <case>
                                   <s>UPDATE</s>
                                   <s>Active Sync Update User Workflow</s>
                              </case>
                              <case>
                                   <s>DELETE</s>
                                   <s>Active Sync Disable User Workflow</s>
                              </case>
                              <case default='true'>
                                   <null/>
                              </case>
                         </switch>
                    </Expansion>
               </Field>
          </Form>
     </Extension>
     <MemberObjectGroups>
          <ObjectRef type='ObjectGroup' id='#ID#Top' name='Top'/>
     </MemberObjectGroups>
</Configuration>