Can you guys do me a favour? Tell me the shim version of the AD
driver you are running, and show me a password change, on the Pub
channel?

Per bug:
https://bugzilla.novell.com/show_bug.cgi?id=283109

In the 3.5.13 or so timeframe, a change was made to detect if the
Admin did the password change in AD vs the user. So we should get in
the <modify-password> node, an XML attr named
password-admin-reset='true' but I am not seeing it on a 4.0.1.1
engine, with 3.5.16 shim.

Wondering if it is working in other versions and was regressed in
3.5.16 or not. (I.e. Need to see a diversity of events).

Here is an example of what I would like to see:

<nds dtdversion="2.2">
<source>
<product version="4.0.1.1">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<modify-password class-name="User" event-id="Active
Directory##136124c0546##0" src-dn="CN=John\, Smith,OU=Associate
Accounts,OU=Users,OU=Directory Management
Project,DC=int,DC=acme,DC=local">
<association>5ca91f224969dd499d69d61f9d7a43b5</association>
<password><!-- content suppressed --></password>
</modify-password>
</input>
</nds>

As you can see the password is supressed, so no issue sharing the XML.

(This gets converted to a <modify> event with a <modify-attr
attr-name='nspmDistributionPassword'> if you are syncing to UP/DP.)

Here is an example of a working one (Apparently I posted this last
July, but I do not recall doing it...)

<modify-password event-id="LHU-AD##13175e021e5##0" class-name="user"
src-dn="CN=JOE BLOGGS,OU=Users,OU=Student,DC=contoso,DC=com"
password-admin-reset="true">
<association>b253542862b84f4b9f69b252221f2d79</association>
<password><!-- content suppressed --></password>
</modify-password>