TREE1: OHICOIDV
TREE2: OHICO

NOTE:
Ran "NDS to NDS Driver Certificates" wizard from TREE1.
Data Flow is set to Bi-Directional for both eDir drivers.
Imported default driver config (eDirectory.xml) on both ends.
TREE1 is presently sync'ing well bi-directionaly with AD domain, now trying
to connect to TREE2 such that ultimately, TREE2 data will sync to AD domain.


Change User name in TREE1 gives.
Errors from Trace Level 3 in TREE1
11:17:52 901A5100 Drvrs: eDirectory Driver OHICO-OHICOIDV PT:
DirXML Log Event -------------------
Driver: \OHICO\OHICO\OHICO Driver Set 1\eDirectory Driver OHICO-OHICOIDV
Channel: Publisher
Object: \OHICOIDV\IDVault\Users\aduser1 (OHICO\aduser1)
Status: Error
Message: Code(-9010) An exception occurred: novell.jclient.JCException:
createEntry -672 ERR_NO_ACCESS


Errors from Trace Level 3 in TREE2
11:17:52 901A5100 Drvrs: eDirectory Driver OHICO-OHICOIDV PT:
DirXML Log Event -------------------
Driver: \OHICO\OHICO\OHICO Driver Set 1\eDirectory Driver OHICO-OHICOIDV
Channel: Publisher
Object: \OHICOIDV\IDVault\Users\aduser1 (OHICO\aduser1)
Status: Error
Message: Code(-9010) An exception occurred: novell.jclient.JCException:
createEntry -672 ERR_NO_ACCESS




Change User name in TREE2 gives.
Errors from Trace Level 3 in TREE2
11:11:45 90271260 Drvrs: Unable to get nspm password(2) failed, -1659
(0xfffff985), subject eDirectory Driver OHICO-OHICOIDV.OHICO Driver Set
1.OHICO, tree OHICO, object AFeres.OHICO
11:11:45 90271260 Drvrs: eDirectory Driver OHICO-OHICOIDV ST:
DirXML Log Event -------------------
Driver: \OHICO\OHICO\OHICO Driver Set 1\eDirectory Driver OHICO-OHICOIDV
Channel: Subscriber
Object: \OHICO\OHICO\AFeres
Status: Error
Message: Code(-9024) Unable to read current state of \OHICO\OHICO\AFeres.

Errors from Trace Level 3 in TREE1
Nothing reaches TREE1


Suggestions please?
Thanks,
Marc