So we have a Windows 2003 SP2 Advance server that is a DC running eDir
8.8.1 with IDM 3.0.1 and password filters running on all of the DCs in
the AD.

Information (name, description, and such) all sync both directions.
Passwords only sync out of the AD to eDir. It was last known to be
working on Friday 8/31/07. And besides importing more accounts from
another AD (password sync is still working on that driver btw) nothing
has changed in the driver configuration or the systems. In a trace 0
log the change comes up as a success, but normally when there is a
password change we see it go out to the AD and then we also get a
Success coming back from the AD and we are not seeing that now. I'm
including a level 5 trace log as well.

Thank you,
Phil Wilson
Application Developer
Highline Community College

--begin trace--


[09/04/07 18:57:29.843]: IC Sync ST: Start transaction.
[09/04/07 18:57:29.843]: IC Sync ST: type(modify-entry)entry-id(51537)
dn(\T=HIGHLINE\O=IC\OU=Staff\CN=pfilson) class-id(435) class-name(User)
[09/04/07 18:57:29.843]: IC Sync ST: type(remove-value)<value suppressed>
[09/04/07 18:57:29.875]: IC Sync ST: type(add-value)<value suppressed>
[09/04/07 18:57:29.875]: IC Sync ST: Processing events for transaction.
[09/04/07 18:57:29.875]: IC Sync ST:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<modify class-name="User" event-id="RUMBLE-NDS#20070905000946#5#16"
qualified-src-dn="O=IC\OU=Staff\CN=pfilson"
src-dn="\HIGHLINE\IC\Staff\pfilson" src-entry-id="51537"
timestamp="1188957444#16">
<association
state="associated">adf34547ed08e445825f5c45d136f88 7</association>
<modify-attr attr-name="nspmDistributionPassword"><!-- content
suppressed -->
</modify-attr>
</modify>
</input>
</nds>
[09/04/07 18:57:29.890]: IC Sync ST: No event transformation policies.
[09/04/07 18:57:29.906]: IC Sync ST: Subscriber processing modify for
\HIGHLINE\IC\Staff\pfilson.
[09/04/07 18:57:29.906]: IC Sync ST: No command transformation policies.
[09/04/07 18:57:29.906]: IC Sync ST: Filtering out notification-only
attributes.
[09/04/07 18:57:29.906]: IC Sync ST: Filtered out <modify-attr
attr-name='nspmDistributionPassword'>.
[09/04/07 18:57:29.906]: IC Sync ST: Filtered out <modify
class-name='User'>.
[09/04/07 18:57:29.906]: IC Sync ST: Fixing up association references.
[09/04/07 18:57:29.906]: IC Sync ST: Applying schema mapping policies to
output.
[09/04/07 18:57:29.906]: IC Sync ST: Applying output transformation
policies.
[09/04/07 18:57:29.906]: IC Sync ST: Applying policy: %+C%14C'Convert
selected attributes to a form most commonly used in Active Directory.'%-C.
[09/04/07 18:57:29.906]: IC Sync ST: Policy returned:
[09/04/07 18:57:29.906]: IC Sync ST:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input/>
</nds>
[09/04/07 18:57:29.921]: IC Sync ST: Applying policy: %+C%14C'Email
notifications for failed password publications'%-C.
[09/04/07 18:57:29.921]: IC Sync ST: Policy returned:
[09/04/07 18:57:29.921]: IC Sync ST:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input/>
</nds>
[09/04/07 18:57:29.937]: IC Sync ST: Submitting document to subscriber shim:
[09/04/07 18:57:29.937]: IC Sync ST:
<nds dtdversion="3.0" ndsversion="8.x">
<source>
<product version="3.0.10.20060630 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input/>
</nds>
[09/04/07 18:57:29.937]: IC Sync ST: SubscriptionShim.execute() returned:
[09/04/07 18:57:29.937]: IC Sync ST:
<nds dtdversion="1.1" ndsversion="8.7">
<source>
<product asn1id="" build="20061005_085500"
instance="\HIGHLINE\IC\RumbleIDM3\AD-IC-Local" version="3.1.1">AD</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status level="success"/>
</output>
</nds>
[09/04/07 18:57:29.953]: IC Sync ST: Applying input transformation policies.
[09/04/07 18:57:29.953]: IC Sync ST: Applying policy: %+C%14C'Convert
selected attributes to a form most commonly used in the Identity Vault.'%-C.
[09/04/07 18:57:29.953]: IC Sync ST: Applying to status #1.
[09/04/07 18:57:29.968]: IC Sync ST: Evaluating selection criteria
for rule 'streetAddress: Convert CR-LF to LF'.
[09/04/07 18:57:29.968]: IC Sync ST: Rule selected.
[09/04/07 18:57:29.968]: IC Sync ST: Applying rule 'streetAddress:
Convert CR-LF to LF'.
[09/04/07 18:57:29.968]: IC Sync ST: Action:
do-reformat-op-attr("streetAddress",token-replace-all("\r\n","\r",token-local-variable("current-value"))).
[09/04/07 18:57:29.968]: IC Sync ST: Evaluating selection criteria
for rule 'logonHours: Convert to Login Allowed Time Map form'.
[09/04/07 18:57:29.968]: IC Sync ST: Rule selected.
[09/04/07 18:57:29.968]: IC Sync ST: Applying rule 'logonHours:
Convert to Login Allowed Time Map form'.
[09/04/07 18:57:29.984]: IC Sync ST: Action:
do-reformat-op-attr("logonHours",token-xpath("jadutil:translateTimeMap2eDir($current-value)")).
[09/04/07 18:57:29.984]: IC Sync ST: Evaluating selection criteria
for rule 'accountExpires: Convert to Identity Vault time format'.
[09/04/07 18:57:29.984]: IC Sync ST: Rule selected.
[09/04/07 18:57:29.984]: IC Sync ST: Applying rule 'accountExpires:
Convert to Identity Vault time format'.
[09/04/07 18:57:29.984]: IC Sync ST: Action:
do-reformat-op-attr("accountExpires",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
[09/04/07 18:57:30.000]: IC Sync ST: Evaluating selection criteria
for rule 'lockoutTime: Convert to Identity Vault time format'.
[09/04/07 18:57:30.000]: IC Sync ST: Rule selected.
[09/04/07 18:57:30.000]: IC Sync ST: Applying rule 'lockoutTime:
Convert to Identity Vault time format'.
[09/04/07 18:57:30.000]: IC Sync ST: Action:
do-reformat-op-attr("lockoutTime",token-xpath("jadutil:translateFileTime2Epoch($current-value)")).
[09/04/07 18:57:30.000]: IC Sync ST: Policy returned:
[09/04/07 18:57:30.015]: IC Sync ST:
<nds dtdversion="1.1" ndsversion="8.7">
<source>
<product asn1id="" build="20061005_085500"
instance="\HIGHLINE\IC\RumbleIDM3\AD-IC-Local" version="3.1.1">AD</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status level="success"/>
</output>
</nds>
[09/04/07 18:57:30.015]: IC Sync ST: Applying policy: %+C%14C'Email
notifications for failed password subscriptions'%-C.
[09/04/07 18:57:30.015]: IC Sync ST: Applying to status #1.
[09/04/07 18:57:30.015]: IC Sync ST: Evaluating selection criteria
for rule 'Send e-mail on a failure when subscribing to passwords'.
[09/04/07 18:57:30.015]: IC Sync ST: (if-global-variable
'notify-user-on-password-dist-failure' equal "true") = TRUE.
[09/04/07 18:57:30.015]: IC Sync ST: (if-operation equal "status")
= TRUE.
[09/04/07 18:57:30.015]: IC Sync ST: (if-xpath true
"self::status[@level != 'success'][text() !=
'']/operation-data/password-subscribe-status/association[text() != '']")
= FALSE.
[09/04/07 18:57:30.015]: IC Sync ST: Rule rejected.
[09/04/07 18:57:30.015]: IC Sync ST: Evaluating selection criteria
for rule 'Send e-mail on failure to reset connected system password
using the Identity Manager data store password'.
[09/04/07 18:57:30.015]: IC Sync ST: (if-global-variable
'notify-user-on-password-dist-failure' equal "true") = TRUE.
[09/04/07 18:57:30.031]: IC Sync ST: (if-operation equal "status")
= TRUE.
[09/04/07 18:57:30.031]: IC Sync ST: (if-xpath true
"self::status[@level !=
'success']/operation-data/password-reset-status") = FALSE.
[09/04/07 18:57:30.031]: IC Sync ST: Rule rejected.
[09/04/07 18:57:30.031]: IC Sync ST: Policy returned:
[09/04/07 18:57:30.031]: IC Sync ST:
<nds dtdversion="1.1" ndsversion="8.7">
<source>
<product asn1id="" build="20061005_085500"
instance="\HIGHLINE\IC\RumbleIDM3\AD-IC-Local" version="3.1.1">AD</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status level="success"/>
</output>
</nds>
[09/04/07 18:57:30.046]: IC Sync ST: Applying schema mapping policies to
input.
[09/04/07 18:57:30.046]: IC Sync ST: Resolving association references.
[09/04/07 18:57:30.046]: IC Sync ST: Processing returned document.
[09/04/07 18:57:30.046]: IC Sync ST: Processing operation <status> for .
[09/04/07 18:57:30.046]: IC Sync ST:
DirXML Log Event -------------------
Driver: \HIGHLINE\IC\RumbleIDM3\AD-IC-Local
Channel: Subscriber
Object: \HIGHLINE\IC\Staff\pfilson
Status: Success
[09/04/07 18:57:30.062]: IC Sync ST: End transaction.
[09/04/07 18:57:54.093]: IC Sync PT: ADDriver: get object changes - 0x0000
[09/04/07 18:57:54.093]: IC Sync PT: ADDriver: object changes complete