We are running NetWare 6.5, SP7 and up until this point have used NFAP
for our Mac users to access the server. We are just now implementing a
password policy and need some assistance.

We have been using the cleartext option with AFPTCP. I have created the
password policy and testing it with some test accounts from our Macs
running OS X 10.4 and 10.5.

What I would like to do is to be able to create an account for someone
with an initial password so that when they attempt to login they are
notified that they need to select a new password based on the policy.

I have a test account created called, mactest with an initial password
that does not match the policy. I assign the policy with iManager and
then look at the properties of the user, I see the rules have been
applied to the user.

When I attempt to login to Mac OS X 10.4, I get an error. I try to login
with the virtual office in a browser with the password and am unable to
login either. I have grace logins set to 6.

How do I make this happen?