-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

IDM can, in theory, change an object's GUID (it is one of the few things
that can), but it is not configured to do so out of the box with ANY
driver config and doing so would be a huge error in the development of
the config, so unless you have explicitly enabled that then that is not
the problem.

Also, while I have not used kinit against MAD, well, ever, I do not see
how a GUID and a timeout could be related. Are you sure time is in sync
between all relevant systems? I'm willing to bet a bit that this is not
directly related to IDM, though there are some tests we can try to
verify one way or another. First, create a user that is NOT
synchronized via IDM to the MAD environment and see if it has the same
problem as the other broken users. I'm guessing it will and, if so,
post in the OES DSfW forum to work that out.

Good luck.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.18 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQIcBAEBAgAGBQJPujv5AAoJEF+XTK08PnB5ZSMQAIY7aFpiUq b3SlRyE1ZYLgeY
/nthXZL0QdEXa4uUBNZWzDrZmbcBYvBe5D95Hu3oBJH4PhjUWZS QNY5Q/QBhbgco
TrZuGmDw3AyFxvdRx3kSfovHQAGySDd0KD+Bd3KO30QtKOoMDL C22lWsgO0WIAZi
/aRmvMBtfO8FoMGT/hxcXwFkVDCVUz7qSytMt23q9BaDgSUUjOVrnmg/9WeklXrH
9N6hO8i9Z5lseO1tj2fa6X9INczYuQgi5VfUo1WEA4HYkxZEtX L8W0dC3F33XdOt
Jh83C0DnrYrIUsO0rnBXoFlik1f5wem7B6Ikl0vCzkhw/d/OJYDl8/nZBaLJWwo/
0QMXS7kjVQZ1l50WZW4xEjmiEFNvpqGp/Ym9dODjHezRtI0qsq9U4hMnzRuX+Nj9
RyR/77T70Ji/Zm2iWu/firEf2YNZB4LaKdMijZKeuY+TAokR5s9vXif9PCb5C4d/
S6yRnSLwyRqnphLfPSo+346KK4RjQw9JkbsrS/gQ9WyqIZ/x0dHKhsUpp2V4J1wX
W8uG1mjGBdNhCWX7DTlZQQpn2kcjnRBGtbSmVyVZdgc9Gc5k+b rLEsX0U8VA28r8
pVexeup+j7lh1Bsd2FkwBc9gD6dlBvgWVDhga26FaSJg1GBRiZ pnwIoS08e/wJgY
3lOvF3ysRGUzRTiPGujW
=YPN0
-----END PGP SIGNATURE-----