Running IDM 3.5.1. NDS sync to AD. Netware server is IDM Engine.
Password sync was working fine. User migration was working fine. In
early stages on one domain controller.

Added second domain controller. Installed filter/password sync
software on the new domain controller.

Can set UP for user in iManager. But when I go to check password
status I get an error:

Error: status is -631

Do not get this error on accounts previously syncronized. They
indicate "syncronized".

Password policy is assigned to the user containers.

UP is enabled. Distrabution password is enabled.

Also, not getting any migration status of new accounts on DSTrace.

Here is the remote loader log during startup of Engine:

DirXML: [08/19/08 14:08:36.25]: Loader: Verifying command port...
DirXML: [08/19/08 14:08:37.34]: Loader: Verifying driver can be
loaded...
DirXML: [08/19/08 14:08:37.34]: ADDriver: Driver::destroy
DirXML: [08/19/08 14:08:37.34]: ADDriver: Driver::~Driver()
DirXML: [08/19/08 14:08:37.34]: Loader: Waiting for DirXML to connect
on 'TCP server socket, port 8090, address localhost'...
DirXML: [08/19/08 14:09:28.35]: Loader: Received 'handshake' document
DirXML: [08/19/08 14:09:28.35]: Loader: XML Document:
DirXML: [08/19/08 14:09:28.35]: <handshake version="1.0">
<password><!-- content suppressed --></password>
</handshake>
DirXML: [08/19/08 14:09:28.37]: Loader: Received 'handshake' document
DirXML: [08/19/08 14:09:28.37]: Loader: XML Document:
DirXML: [08/19/08 14:09:28.37]: <nds dtdversion="3.5"
ndsversion="8.x">
<output>
<status level="success"/>
</output>
</nds>
DirXML: [08/19/08 14:09:28.37]: Loader: Connected.
DirXML: [08/19/08 14:09:28.37]: Loader: Received 'driver start'
document
DirXML: [08/19/08 14:09:28.37]: Loader: XML Document:
DirXML: [08/19/08 14:09:28.37]: <top>
<driver-init>
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="3.5.10.20070918 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<init-params src-dn="\ANB_TREE\ANB\IDM\ANBDrvrSet0\ADDriverANB">
<authentication-info>
<user>addriver_anbd1</user>
<password><!-- content suppressed --></password>
</authentication-info>
<driver-options>
<auth-options display-name="Show authentication
options">show</auth-options>
<auth-method display-name="Authentication
Method">Negotiate</auth-method>
<signing display-name="Digitally sign
communications">no</signing>
<sealing display-name="Digitally sign and seal
communications">no</sealing>
<use-ssl display-name="Use SSL for encryption">no</use-ssl>
<impersonation display-name="Logon and
impersonate">yes</impersonation>
<xchg-options display-name="Show Microsoft Exchange
options">show</xchg-options>
<exch-api-type display-name="Exchange Management interface type
(use-cdoexm/use-post-cdoexm)">default</exch-api-type>
<exch-move display-name="Allow Exchange mailbox move
(yes/no)">no</exch-move>
<exch-delete display-name="Allow Exchange mailbox delete
(yes/no)">no</exch-delete>
<access-options display-name="Show access
options">show</access-options>
<pollingInterval display-name="Driver Polling
Interval">1</pollingInterval>
<pub-heartbeat-interval display-name="Publisher heartbeat
interval">0</pub-heartbeat-interval>
<pub-password-expire-time display-name="Password Sync Timeout
(minutes)">5</pub-password-expire-time>
<search-domain-scope display-name="Search domain
scope">no</search-domain-scope>
<retry-ldap-auth-unknown display-name="Retry LDAP Auth unknown
DirXML: [08/19/08 14:09:28.37]: error">no</retry-ldap-auth-unknown>
<enable-incremental-values display-name="Enable DirSync
Incremental Values">no</enable-incremental-values>
</driver-options>
</init-params>
</input>
</nds>
</driver-init>
<subscriber-init>
<nds dtdversion="3.5" ndsversion="8.x">
<source>
<product version="3.5.10.20070918 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<init-params
src-dn="\ANB_TREE\ANB\IDM\ANBDrvrSet0\ADDriverANB\Subs criber">
<authentication-info>
<user>addriver_anbd1</user>
<password><!-- content suppressed --></password>
</authentication-info>
<driver-filter>
<allow-class class-name="group">
<allow-attr attr-name="description"/>
<allow-attr attr-name="displayName"/>
<allow-attr attr-name="L"/>
<allow-attr attr-name="managedBy"/>
</allow-class>
<allow-class class-name="user">
<allow-attr attr-name="description"/>
<allow-attr attr-name="facsimileTelephoneNumber"/>
<allow-attr attr-name="displayName"/>
<allow-attr attr-name="givenName"/>
<allow-attr attr-name="initials"/>
<allow-attr attr-name="mail"/>
<allow-attr attr-name="logonHours"/>
<allow-attr attr-name="dirxml-uACAccountDisable"/>
<allow-attr attr-name="l"/>
<allow-attr attr-name="postalCode"/>
<allow-attr attr-name="postOfficeBox"/>
<allow-attr attr-name="st"/>
<allow-attr attr-name="streetAddress"/>
<allow-attr attr-name="sn"/>
<allow-attr attr-name="telephoneNumber"/>
<allow-attr attr-name="title"/>
</allow-class>
</driver-filter>
</init-params>
</input>
</nds>
</subscriber-init>
<publisher-init>
<nds dtdversion="3.5" ndsversion="8.x">

DirXML: [08/19/08 14:09:28.37]: <source>
<product version="3.5.10.20070918 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<init-params
src-dn="\ANB_TREE\ANB\IDM\ANBDrvrSet0\ADDriverANB\Publ isher">
<authentication-info>
<user>addriver_anbd1</user>
<password><!-- content suppressed --></password>
</authentication-info>
<driver-filter>
<allow-class class-name="organizationalUnit">
<allow-attr attr-name="description"/>
</allow-class>
</driver-filter>
<publisher-state>
<cookie>TVNEUwMAAABe7FTq0ffIAQAAAAAAAAAAKAAAAGlGAA AAAAAAAAAAAAAAAABpRgAAAAAAABlYtlETOW9AnaL9KCvq0TkB AAAAAAAAAAEAAAAAAAAAGVi2URM5b0Cdov0oK+rROQ5gAAAAAA AA</cookie>
</publisher-state>
</init-params>
</input>
</nds>
</publisher-init>
</top>
DirXML: [08/19/08 14:09:28.39]: Loader: Reading driver state from file
DirXML: [08/19/08 14:09:28.39]: Loader: Starting driver...
DirXML: [08/19/08 14:09:28.39]: Loader: Calling driverShim->init()
DirXML: [08/19/08 14:09:28.39]: Loader: XML Document:
DirXML: [08/19/08 14:09:28.39]: <nds dtdversion="3.5"
ndsversion="8.x">
<source>
<product version="3.5.10.20070918 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<init-params src-dn="\ANB_TREE\ANB\IDM\ANBDrvrSet0\ADDriverANB">
<authentication-info>
<user>addriver_anbd1</user>
<password><!-- content suppressed --></password>
</authentication-info>
<driver-options>
<auth-options display-name="Show authentication
options">show</auth-options>
<auth-method display-name="Authentication
Method">Negotiate</auth-method>
<signing display-name="Digitally sign communications">no</signing>
<sealing display-name="Digitally sign and seal
communications">no</sealing>
<use-ssl display-name="Use SSL for encryption">no</use-ssl>
<impersonation display-name="Logon and
impersonate">yes</impersonation>
<xchg-options display-name="Show Microsoft Exchange
options">show</xchg-options>
<exch-api-type display-name="Exchange Management interface type
(use-cdoexm/use-post-cdoexm)">default</exch-api-type>
<exch-move display-name="Allow Exchange mailbox move
(yes/no)">no</exch-move>
<exch-delete display-name="Allow Exchange mailbox delete
(yes/no)">no</exch-delete>
<access-options display-name="Show access
options">show</access-options>
<pollingInterval display-name="Driver Polling
Interval">1</pollingInterval>
<pub-heartbeat-interval display-name="Publisher heartbeat
interval">0</pub-heartbeat-interval>
<pub-password-expire-time display-name="Password Sync Timeout
(minutes)">5</pub-password-expire-time>
<search-domain-scope display-name="Search domain
scope">no</search-domain-scope>
<retry-ldap-auth-unknown display-name="Retry LDAP Auth unknown
error">no</retry-ldap-auth-unknown>
<enable-incremental-values display-na
DirXML: [08/19/08 14:09:28.39]: me="Enable DirSync Incremental
Values">no</enable-incremental-values>
</driver-options>
</init-params>
</input>
</nds>
DirXML: [08/19/08 14:09:28.39]: ADDriver: Driver::init
DirXML: [08/19/08 14:09:28.39]: ADDriver: MadDriver:nInit()
DirXML: [08/19/08 14:09:28.39]: ADDriver: MadConnMgr::initialize
DirXML: [08/19/08 14:09:28.39]: Loader: driverShim->init() returned:
DirXML: [08/19/08 14:09:28.39]: Loader: XML Document:
DirXML: [08/19/08 14:09:28.39]: <nds ndsversion="8.7"
dtdversion="1.1">
<source>
<product version="3.5.1" asn1id="" build="20070823_095000"
instance="">AD</product>
<contact>Novell, Inc.</contact>
</source>
<output>
<status level="success"/>
</output>
</nds>
DirXML: [08/19/08 14:09:28.39]: Loader: Calling
subscriptionShim->init()
DirXML: [08/19/08 14:09:28.39]: Loader: XML Document:
DirXML: [08/19/08 14:09:28.39]: <nds dtdversion="3.5"
ndsversion="8.x">
<source>
<product version="3.5.10.20070918 ">DirXML</product>
<contact>Novell, Inc.</contact>
</source>
<input>
<init-params
src-dn="\ANB_TREE\ANB\IDM\ANBDrvrSet0\ADDriverANB\Subs criber">
<authentication-info>


--
fdgoings
------------------------------------------------------------------------
fdgoings's Profile: http://forums.novell.com/member.php?userid=5050
View this thread: http://forums.novell.com/showthread.php?t=340561