multiple accounts for active directory

hello guys,

i tried to set multiple accounts (ad) for one idm-user. i created a identity rule similar to the documentation:

<Rule subtype='IdentityRule' id='#ID#F7664C512237E38E:54851055:11203DE16DD:-7EAD' name='Administrator Identity' lock='Configurator#1177076836355' creator='Configurator' createDate='1176996139515' lastModifier='Configurator' lastModDate='1177074739949' lastMod='69042'>

<concat>

<s>CN=</s>

<ref>fullname</ref>

<s>_br</s>

<s>,OU=Administration,OU=IT</s>

<s>,OU=Employees,OU=User</s>

<s>,DC=company,dc=local</s>

</concat>

<MemberObjectGroups>

<ObjectRef type='ObjectGroup' id='#ID#Top' name='Top'/>

</MemberObjectGroups>

</Rule>

then i activated multiple accounts for resource: active directory and select the defined identity rule to create a new attribute type (someAT).

so my identity template is:

CN=$fullname$,OU=$UserDepartmentOU$,OU=$UserSecondOu$,OU=User,DC=company,dc=local

every time i try to assign the second attribute type (AD 1|someAT) to a user i get this error:

com.waveset.util.WavesetException: Missing attribute UserDepartmentOU required by the identity templatefor resource AD 1

has anyone a idea why this error comes?

best regards

[1795 byte] By [Murat_Firata] at [2007-11-27 1:46:15]