Has anyone been successful with this? iManager's Check Password Status
option, returns the following error:

Not Synchronized. Element 'check-object-password' is missing a required
attribute or attribute value for attribute 'dest-dn'.<nds
dtdversion="4.0" ndsversion="8.x"> <source> <product edition="Standard"
version="">DirXML</product> <contact>Novell, Inc.</contact>
</source> <input> <check-object-password
<association>IDU=1,table=USR,schema=INDIRECT</association> <password>
<!--content suppressed--> </password> </check-object-password> </input>

The following is from the Driver for JDBC Implementation Guide - IDM

11.13 Implementing Check Object Password

Unlike password set, check object password does not require embedded SQL
statements or attributes. Only a user account name is required.
This could be obtained from an association value (assuming that
associations are being maintained manually), a directory attribute, or a
database field. If stored in the directory or database, a query must be
issued to retrieve the value.

The example .xml configuration file stores database user account names
in database fields.
NOTE: Some databases, such as Sybase Adaptive Server Enterprise and
Microsoft SQL Server, differentiate between user account names and login
account names. Therefore, you might need to store two names, not just

To implement check object password, append a dest-dn attribute value to
the <check-object-password> event. In the following example, the
dest-dn attribute is bolded:

<input xmlns:jdbc="urn:dirxml:jdbc">
<check-object-password dest-dn="jdoe">

I'm not seeing where this attribute needs to be set.


jsnow's Profile: https://forums.netiq.com/member.php?userid=556
View this thread: https://forums.netiq.com/showthread.php?t=48754