The problem our organization has is that the Novell client does not
support multi-tree UPS. Our organization followed Novell's recommendation
to setup a separate eDirectory tree for Identity Management and eGuide.
DirXML drivers are syncing user account attributes and passwords via UPS
to our production tree the users are logging into. The IDM tree has UPS
configured and users are able to change their passwords through a web
interface and also set/use challenge questions.

The users can not use the Novell client to set their password, because
this would change their passwords in the production tree and not in the
IDM tree, or forgotten password feature.

It would be ideal if there was a means to configure the Novell client to
identify the associated account of the user in the IDM tree and use the
UPS policies from the IDM that are associated with the account.