DSfW: ADC install fails NDS error: bad password (-222)

  • 7011732
  • 30-Jan-2013
  • 30-Jan-2013


Novell Open Enterprise Server 11 SP1 (OES11SP1)
Domain Services for Windows


Installing an ADC fails with "NDS error: bad password (-222)"
OES11SP1 ADC install into a Name Mapped domain (no patches)
PDC is OES11SP1 November Maintenance Patch


Setting the passwordExpirationTime on the administrator to a date in the future or removing the password expiration on the password policy, or setting a new password before installing an ADC is the current workaround until a bug fix.


The Administrators password is good, but the expiration date is older than thecurrent date.  The Administrator user is assigned the domain password policyand has the nspmDoNotExpirePassword set to TRUE.
The Administrator password is being interpreted as expired if the expiration date isolder than the current date and the nspmDoNotExpirePassword attribute is set toTRUE.The nspmDoNotExpirePassword attribute should override and the passwordexpiration. Instead the nspmDoNotExpirePassword is interpreted as FALSE on a DSfW server.