Synchronizing Password Expiration

[ab@novell.com]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Yes, if you want them to go both directions you should have these policies
in place on both drivers. See a default driver preconfiguration (import a
new driver and look) for examples. As a note these policies are not
unique to the eDirectory driver preconfigs.

Hopefully the documentation states you must use the
nspmDistributionPassword attribute when synchronizing from eDirectory to
anything else that is not eDirectory as that is true. This attribute
technically is not needed when using eDir to eDir (though it is
recommended) or when doing publisher-channel password synchronization in
general (though it is the most-common method by far).

Good luck.





DougB wrote:
> ab@novell.com,
>
>> 1. No, the change only needs to be done on the destination side, though
>> both sides will (by default when using the Novell-shipped preconfigs) have
>> the same logic.
>>
> But if I want a password change on either side to propagate to the other
> side, I would need it in both places?
>
>> 2. Not sure; though that could work in some cases it is not the way I
>> would go unless you do not have UP as an option in the environments.
>>
>
> Okay. I asked because the IDM/Password Sync documentation seems to say
> that you should only sync the dist password when the connected system
> doesn't support NDS or Universal password (i.e., anything besides
> another eDirectory).
>
> Thanks
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQIcBAEBAgAGBQJK8ESzAAoJEF+XTK08PnB57DcP/2kTjYx5LJQyjSqOa+YpzxL7
oC+/kx5/AveT/MzlTBIw+NPrp8k2lZEaFkHQfcUJ+w35ecUE7yGXo6VFP7aWviO/
Q0cPQ6tsLephwwrSPmJlUFItTMOTEDx0Qn/qkSmrHyFJ62E81k3RAaBgZAhV+8Ta
rUVjyLZfo3VWD1Ffzbfgo2gFMQqwDpo7ZxbweygLyigt/q7u/beWDLGMl8iFCaPL
WqmRvQwwbx8aBzEkTa5aH7RjNJVMC3G0cgiXEs6QxFR2ncm4yA 14an2ZH1ntXe0S
SWJ2mf8b/n2qeNMUWXbdsZMIHwfkyPEHNl9fSRP6LEmbEk4zudouCtbfnBp oUdTZ
MsOQ0D4a7WTMoA1WmVJOVZ/ahmOOet6RDgwHpNGm/JtErC5OyvFrjkRCF458CL6z
pZMKt7Aci0hKsYv5S5BGNdTpS782ztc/LhYod/Jl9PQA+OG5KTwz5AvF4hZEC0Ji
Te4DFYwLgw1KDeGtA7BE9WhD65X/P4c5PxTuIBg5iFxukQ6Cb2E9vxO0spd3nBoQ
YBxtS0Etc9DmZq+IrDYxhz0Ty5/SCyKux32LQQBPnzE15jsWy64OsOUWmz0DSrPS
iS4qmsHaCaZK4ejGjvQY0VnieoMYuWp/gKD8KxIk/WxkPZ44Qk+n7XWDpP2qElwt
FSKghgdPhWgm+YpmrUMA
=FydV
-----END PGP SIGNATURE-----