<html><body>Hi all,<div><br></div><div>I have a question about protected objects. I need to exclude multiple OU's in AD.</div><div><br></div><div>I tryed to do that by adding:</div><div><br></div><div><div> <protected></div><div> <filter></div><div> <q:substring></div><div> <q:matching>stringIgnoreCase</q:matching></div><div> <q:path>declare namespace icfs='http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/resource-schema-3'; attributes/icfs:name</q:path></div><div> <q:value>ou=Global,dc=hell,dc=local</q:value></div><div> <q:anchorEnd>true</q:anchorEnd></div><div> </q:substring></div><div> </filter></div><div> </protected></div><div> <protected></div><div> <filter></div><div> <q:substring></div><div> <q:matching>stringIgnoreCase</q:matching></div><div> <q:path>declare namespace icfs='http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/resource-schema-3'; attributes/icfs:name</q:path></div><div> <q:value>ou=CZ,dc=hell,dc=local</q:value></div><div> <q:anchorEnd>true</q:anchorEnd></div><div> </q:substring></div><div> </filter></div><div> </protected></div></div><div><div> <protected></div><div> <filter></div><div> <q:substring></div><div> <q:matching>stringIgnoreCase</q:matching></div><div> <q:path>declare namespace icfs='http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/resource-schema-3'; attributes/icfs:name</q:path></div><div> <q:value>cz=Users,dc=hell,dc=local</q:value></div><div> <q:anchorEnd>true</q:anchorEnd></div><div> </q:substring></div><div> </filter></div><div> </protected></div></div><div><br></div><div>But it doesnt work. I am not able to see account in repository and resource. If htere is only one protected OU then it works.</div><div>Where is an error?</div><div><br></div><div>Thanks </div><div><br></div><div>Jan</div></body></html>