IDM - Passwords expiring immediately when set via connected system

  • 7003501
  • 10-Jun-2009
  • 26-Apr-2012

Environment

Novell Identity Manager 3.5.1
Novell Identity Manager 3.6
Novell Identity Manager - Password Synchronization

Situation

When the user sets their password in Active Directory, it is expiring the NDS Password immediately.

Resolution

How the password change behaves is controlled by the Global Configuration values on the Driver.
 
An Admin type password change is caused when you sync the password to the NDS password, which expires the password immediately. To do that you would have to have the global config value "Publish Password to the NDS Password" set to yes.
 
If the global config values "Publish Password to the NDS Password" is set to NO and "Publish Password to Distribution password" is set to YES, then the password change will go through as a user type password change and NOT expire it the immediately.