2016-10-20 9:05 GMT+02:00 BÖSCH Christian <boe...@fhv.at>:
> yes, but the created computer account seems always be disabled in AD.
>
> tried to set useraccountcontrol flags like this, but they never arrive in
> AD…
>
>
> <forceValues>
> <string>
> var uac = dstBean.getDatasetFirstValueById('userAccountControl');
> uac =
> AD.userAccountControlSet(dstBean.getDatasetFirstValueById('userAccountControl'),
> [AD.UAC_SET_WORKSTATION_TRUST_ACCOUNT]);
> uac = uac +
> AD.userAccountControlSet(dstBean.getDatasetFirstValueById('userAccountControl'),
> [AD.UAC_SET_PASSWD_NOTREQD]);
> uac = uac +
> AD.userAccountControlSet(dstBean.getDatasetFirstValueById('userAccountControl'),
> [AD.UAC_UNSET_ACCOUNTDISABLE]);
> uac;
> </string>
> </forceValues>
>
If the entry is in creation, the dstBean is empty so you can't use it
to set values for userAccountControl. Try maybe to use <createValues>
and KEEP policy to set the value at object creation for this
attribute.
Clément.
_______________________________________________________________
Ldap Synchronization Connector (LSC) - http://lsc-project.org
lsc-users mailing list
lsc-users@lists.lsc-project.org
http://lists.lsc-project.org/listinfo/lsc-users
