The DNLookup search control is a frequently used form control in custom forms, but it can also be found in several native IDM dialogs and is used to search and retrieve DNs from the Identity Vault.
The way a DNLookup control shows up depends on the definition of the corresponding entity (e.g., the ‘user’ entity) and the attributes declared for that entity (e.g., ‘Given Name’, ‘Surname’).
The attributes shown in the drop-down list are specified in the directory abstraction layer (DAL): Attributes that are declared with the “Search” and “Required” flags set, will show in the drop-down list for searchable attributes, as well as in the result table of the identified matches.
Now, there have been numerous requests to change the order in which these attributes are displayed when pressing the DNLookup, but the order of the attributes is predefined and cannot be changed. Often it depends on the order in which the selected attributes where added to the entity.
Well, in fact the order is stored in the xmlData attribute of each entity object in eDirectory:
For each entity, you’ll find an eDirectory object of the type ‘srvprvEntity’ which is located in a container underneath the user application driver container (CN=EntityDefs,CN=DirectoryModel,CN=AppConfig,CN=User Application Driver,[your driver set container])
Much of the declaration of the entity is stored in the ‘xmlData’ attribute of the entity object. You can manually edit the xmlData string, search for the “<attributes>..</attributes>” tag and find each entity attribute declaration in a separate “<attribute>..</attribute>” tag.
Changing the sequence of the “<attribute>..</attribute>” tags will modify the order in which the respective attributes are displayed in the search control.
There have been several comments in the Novell forums that explain extensively how you could use iManager or other tools to locate and edit the entity objects and change the xmlData. To find such instructions, Google for “Sequencing of DAL Entity Attributes for a DN Lookup Control”
While the approach suggested there works fine, there are some smaller drawbacks:
This Cool Solution presents a simple User Application form that provides an quick and easy-to-use GUI to update your entities and change the attribute order of your DNLookups.
Disclaimer: As with everything else at NetIQ Cool Solutions, this content is definitely not supported by NetIQ, so Customer Support will not be able to help you if it has any adverse effect on your environment. It just worked for at least one person, and perhaps it will be useful for you too. Be sure to test in a non-production environment.