If a user is added to the Identity Vault, but the driver does not add the attributes specified in the creation policy to the User object, ensure that the user meets the appropriate selection criteria.
Use iManager to examine the driver’s GCVs under the
heading, and ensure that the user meets the driver’s event selection criteria.If the driver is configured to use Role-Based Entitlements, make sure that the user has the required entitlement.
For details about using entitlements, see the Identity Manager 3.6.1 Administration Guide on the Identity Manager 3.6.1 Documentation Web site.
You can obtain diagnostic information from a trace.
To obtain a driver trace of events related to adding a user:
Use iManager to navigate to the Driver Overview page.
Click the driver image to display the Driver Settings window.
Select
.With Internet Explorer,
is located under the tab.With other browsers,
is located in the drop-down menu at the top.Set
to 10.Run ndstrace to capture the trace information for the driver.
Because a large volume of debug information is produced by the driver, we recommend that you record the trace to a file.
Add a user.
Trace messages pertaining to the NxSettings driver are preceded by a number and DVRS: NxSettings ST:. Search the trace, case insensitively, for the word error. If you find no errors, examine the Identity Vault to see if the driver set the attributes specified in the creation policy on the User object you added.
A null pointer exception from the Metadirectory engine can be caused by a problem with the NxSettings Stylesheet object’s contents or by a lack of free UIDs or GIDs available to be allocated. If you find a null pointer exception in the trace, search the trace for related status messages from the driver. For more information about status messages from the driver, see Section C.0, Messages.