[Fedora-directory-users] Active Directory PW sync works for console but not user initiated PW changes

[John A. Sullivan III]

On Mon, 2009-04-27 at 19:07 -0600, Rich Megginson wrote:
> John A. Sullivan III wrote:
> > Hello, all.  This is a sequel to the last email on this subject now that
> > we've resolved the shadowLastChange problem.  Fixing that problem did
> > not fix the DS 8.0 / AD password synchronization problem.  To reiterate,
> > the passwords synchronize if the change is made from idm-console or from
> > AD.  But they do not change when our Ubuntu/KDE users change their own
> > passwords.  It fails when changed from both the KDE password change
> > interface and using passwd at the command line.
> >   
> Take a look at the directory server access log - I think the change is 
> being rejected before it even gets into the replication code, which is 
> why the error log output below is not too helpful.
<snip>
Ah, I forgot to mention that the password change is successful in DS.
It just doesn't synchronize.  Would that be the case if there was an
access failure? I'll enable the access logs and give it a check - John
-- 
John A. Sullivan III
Open Source Development Corporation
+1 207-985-7880
jsullivan at opensourcedevel.com

http://www.spiritualoutreach.com
Making Christianity intelligible to secular society