-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

K, there are a few problems with your setup.

First, you're on old versions of the IDM engine and MAD shim, which
means other things like filters are probably old too. While it may not
directly impact what you're seeing now, I'd still highly recommend being
on current patches.

Second, your DCs do not have filters installed, so they'll never pick up
passwords. The result is that if/when you migrate them over to
eDirectory they'll have no passwords, or made-up passwords (created by
IDM), and you do not want that usually. Having filters on the DCs will
make life better for you in general since password sync will work going
forward and if you get users to change their passwords in MAD after
setting everything up they'll just suddenly be able to get into
eDirectory magically with their current passwords..

Third, I believe the problem is now with your placement policy if
nothing else. You appear to be trying to place the objects under a
top-level 'Groups' container or a top-level Contractors container.
Maybe those exist, but if so they are not OUs. My guess is that you
need to fix the engine-side (feel free to post that trace from the
driver config written directly to a file.... no using ndstrace allowed
for this) to place them under a 'Groups' or 'Contractors' OU that is
within a top-level container (an Organization, a Country, aDomain...
something). The -601 in the trace indicates that the object
searched-for was not there in eDirectory so at the very least you have a
typo in these contexts where you are trying to put things.

Good luck.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.18 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQIcBAEBAgAGBQJP/Y34AAoJEF+XTK08PnB55RIQAM6fmPjZdO+cipIdpYCshyT3
dfyCmcBgYYhkhJMhdx/wA+w/MS/G5vPbivCuf17jP7o1CdO5bW8jCYLBnvbJAulj
A6+ArrX70ZgowUMX+u3JwDakA9KSDQ76xUriDl+/lUxie7/3NjsMlcmkJOzs+TGo
rfJi1hkTxWYNRoyfUMMgof7gNWV5DkUm8JvLM27XFbYM3dWK/hXWNZwecJn4polK
v8HHUlAsUyZ01hE52AjhZUgKnirF9XsJI/nRkLpqyrHJrOims/+PclVYrmbbtYPK
W8L0BRO6LfagksY/Wnj6NGZAjSGU3hb9+EnJ3Hvn1hyj92ccKbOJtW5oKlnzh0rP
tBPMMgNvBxrqhU1SNl8Nzolv0GbIrkyPUCsdebvrPhAU0GXeOZ Cu6AlwTDxNHQTh
QffjpoAaqJHoaIR63MTTwhsVeqFK8tY2ksJreny0GADOfhq7nH OjHoRN3W44j+PP
6f4NOQsq8b9paMk1zNHSY1ChRl3ZBZskdpAhY672FSEvKPz/Nz7H2bk04gF/3xsp
iVoNfC5zUDTaqJk/G06lHQixAFSFZ7SVRIOrhp7/iVINxQzieo7SOcmC1JFQ5szL
mRlEGTbnaSxwWtHRZI0IfOkUrupHK12Pj6C4bv4SgNrjc8l1Vz LZpilFmTG6nPcy
waTTGC4z4k2ZlR6wPUZQ
=uLUy
-----END PGP SIGNATURE-----