Windows only environment with a 2003 server running Identity Manager/remote
loader (non DC) with a 2003 AD Domain Controller running the password sync
module. The DC is also configured as a CA server.

I am able to create users in either AD or Edir and the accounts sync across
fine. However, passwords do not.

Here is a trace from the remote loader:
[9/6/2007 10:52:35.32] Drvrs : Active Directory ST:

DirXML Log Event -------------------

Driver: \COLOMBOTREE\colombobank\IDM3\ADDriverSet\Active Directory

Channel: Subscriber

Object: \COLOMBOTREE\colombobank\zentest3

Status: Error

Message: Code(-9010) An exception occurred: novell.jclient.JCException:
modifyEntry -608 ERR_ILLEGAL_ATTRIBUTE

[9/6/2007 10:52:35.82] Drvrs : Active Directory ST:

DirXML Log Event -------------------

Driver: \COLOMBOTREE\colombobank\IDM3\ADDriverSet\Active Directory

Channel: Subscriber

Object: \COLOMBOTREE\colombobank\zentest3

Status: Error

Message: Could not set password via platform call. Err=5 (access denied)

[9/6/2007 10:52:36.06] Drvrs : Active Directory ST:

DirXML Log Event -------------------

Driver: \COLOMBOTREE\colombobank\IDM3\ADDriverSet\Active Directory

Channel: Subscriber

Object: \COLOMBOTREE\colombobank\zentest3

Status: Success

[9/6/2007 10:52:38.85] OSync : 2007/09/06 10:52:38 Start partition sync
..COLOMBOTREE. state:[0], type:[0].

[9/6/2007 10:52:38.85] OSync : Sync - Partition .COLOMBOTREE. All processed
= YES

[9/6/2007 10:52:39.85] OSync : 2007/09/06 10:52:39 Start partition sync
..ADDriverSet.IDM3.colombobank.COLOMBOTREE. state:[0], type:[0].

[9/6/2007 10:52:39.85] OSync : Sync - Partition
..ADDriverSet.IDM3.colombobank.COLOMBOTREE. All processed = YES

[9/6/2007 11:03:54.26] Drvrs : Active Directory PT:

DirXML Log Event -------------------

Driver: \COLOMBOTREE\colombobank\IDM3\ADDriverSet\Active Directory

Channel: Publisher

Object: CN=zfd,OU=Colombo Bank,DC=colombo,DC=com (colombobank\zentest3)

Status: Success

[9/6/2007 11:03:54.26] Drvrs : Active Directory PT:

DirXML Log Event -------------------

Driver: \COLOMBOTREE\colombobank\IDM3\ADDriverSet\Active Directory

Channel: Publisher

Object: CN=zfd,OU=Colombo Bank,DC=colombo,DC=com (colombobank\zentest3)

Status: Success

[9/6/2007 11:03:54.43] Drvrs : Active Directory PT:

DirXML Log Event -------------------

Driver: \COLOMBOTREE\colombobank\IDM3\ADDriverSet\Active Directory

Channel: Publisher

Status: Success

[9/6/2007 11:03:58.87] OSync : 2007/09/06 11:03:58 Start partition sync
..COLOMBOTREE. state:[0], type:[0].

[9/6/2007 11:03:58.87] OSync : Sync - Partition .COLOMBOTREE. All processed
= YES

[9/6/2007 11:03:58.87] OSync : 2007/09/06 11:03:59 Start partition sync
..ADDriverSet.IDM3.colombobank.COLOMBOTREE. state:[0], type:[0].

[9/6/2007 11:03:58.90] OSync : Sync - Partition
..ADDriverSet.IDM3.colombobank.COLOMBOTREE. All processed = YES

[9/6/2007 11:13:34.60] Drvrs : Active Directory PT:

DirXML Log Event -------------------

Driver: \COLOMBOTREE\colombobank\IDM3\ADDriverSet\Active Directory

Channel: Publisher

Object: CN=zentest4 zentest4,OU=Colombo Bank,DC=colombo,DC=com

Status: Warning

Message: Code(-8019) Operation vetoed on unassociated object.

[9/6/2007 11:15:18.89] OSync : 2007/09/06 11:15:18 Start partition sync
..COLOMBOTREE. state:[0], type:[0].

[9/6/2007 11:15:18.97] OSync : Sync - Partition .COLOMBOTREE. All processed
= YES

[9/6/2007 11:18:54.10] Drvrs : Active Directory PT:

DirXML Log Event -------------------

Driver: \COLOMBOTREE\colombobank\IDM3\ADDriverSet\Active Directory

Channel: Publisher

Object: CN=zentest2
zfd\0ADEL:36e7818d-eb71-45d8-8ae0-a5890cfa13e4,CN=Deleted
Objects,DC=colombo,DC=com

Status: Warning

Message: Code(-8019) Operation vetoed on unassociated object.

[9/6/2007 11:18:55.11] Drvrs : Active Directory PT:

DirXML Log Event -------------------

Driver: \COLOMBOTREE\colombobank\IDM3\ADDriverSet\Active Directory

Channel: Publisher

Object: CN=zentest4 zentest4,OU=Colombo Bank,DC=colombo,DC=com
(colombobank\zentest4)

Status: Success

[9/6/2007 11:18:58.89] OSync : 2007/09/06 11:18:58 Start partition sync
..COLOMBOTREE. state:[0], type:[0].

[9/6/2007 11:18:58.96] OSync : Sync - Partition .COLOMBOTREE. All processed
= YES

[9/6/2007 11:18:59.03] Drvrs : Active Directory PT:

DirXML Log Event -------------------

Driver: \COLOMBOTREE\colombobank\IDM3\ADDriverSet\Active Directory

Channel: Publisher

Object: CN=zentest4 zentest4,OU=Colombo Bank,DC=colombo,DC=com
(colombobank\zentest4)

Status: Success

[9/6/2007 11:18:59.30] Drvrs : Active Directory PT:

DirXML Log Event -------------------

Driver: \COLOMBOTREE\colombobank\IDM3\ADDriverSet\Active Directory

Channel: Publisher

Status: Success

[9/6/2007 11:19:03.91] OSync : 2007/09/06 11:19:03 Start partition sync
..COLOMBOTREE. state:[0], type:[0].

[9/6/2007 11:19:04.03] OSync : Sync - Partition .COLOMBOTREE. All processed
= YES

[9/6/2007 11:19:04.03] OSync : 2007/09/06 11:19:04 Start partition sync
..ADDriverSet.IDM3.colombobank.COLOMBOTREE. state:[0], type:[0].

[9/6/2007 11:19:04.30] OSync : Sync - Partition
..ADDriverSet.IDM3.colombobank.COLOMBOTREE. All processed = YES

[9/6/2007 11:21:59.01] Drvrs : Unable to get nspm password(2) failed, -16049
(0xffffc14f), subject Active Directory.ADDriverSet.IDM3.colombobank, tree
COLOMBOTREE, object zentest4.colombobank