Users are not provisioned when a non-domain partition is merged into the domain partition

A non-domain partition (partition not int the domain) is merged into the domain partition.  Users are not provisioned before the merge because they are not in the domain.  After the merge they are still not provisioned unless they are modified.

Since the user is not provisioned the supplementalCredentials is not populated so knit will not work.

Modifying the users one at a time will trigger provision however this can be time consuming.  In OES2SP3 the domaincntrl tool will allow users to be provisioned in mass.

Simple run domaincntrl --add -a <domain name>. 
For a domain named novell.com run domaincntrl --samify -a novell.com. 
Check the users for the samaccountname and supplementalcredentials to verify they are provisioned and have a password (assuming they have a universal password).