I have created a test IDM 4.02 system with an AD connector. Now I'm
trying to populate it with users via LDIF (exported from our production
MAD). The users I create in the ID vault using the LDIF import will not
sync to AD -- the driver reports an attribute conversion error having to
do with 'password-subscribe-status'. If I create the user manually, it
syncs fine. Can someone tell me what I'm doing wrong?

A sample of the LDIF format I'm using is here: http://pastebin.com/mTTCxK0p

and the driver trace that shows the failure is here: