Doing one-way syncing from eDir to AD, and a Password check indicates that
the user is synchronized, however when I change the Novell password I get
the following on the Subscriber logs:

Error
<status event-id="pwd-subscribe" level="error" type="driver-general">
<message>Password set failed.</message>
<ldap-err ldap-rc="53" ldap-rc-name="LDAP_UNWILLING_TO_PERFORM">
<client-err ldap-rc="53"
ldap-rc-name="LDAP_UNWILLING_TO_PERFORM">Unwilling To Perform</client-err>
<server-err>0000001F: SvcErr: DSID-031A0FC0, problem 5003
(WILL_NOT_PERFORM), data 0
</server-err>
<server-err-ex win32-rc="31"/>
</ldap-err>
<operation-data>
<password-subscribe-status>
<association>204349eb1509d44e972cd2a8cbdbe68e</association>
</password-subscribe-status>
</operation-data>
<application>DirXML</application>
<module>NyseGroup AD Driver</module>
<object-dn>NYSE_TREENYSEMFRTestD</object-dn>
<component>Subscriber</component>
</status>

And the RemoteLoader log indicates "could not set password via platform
call. Err=5 (access denied)"
Any ideas?