I'm trying to do a migration from eDir to AD. I don't know why, but
sometimes (not always) I'm getting the error message "Could not set
password via platform call. Err=5 (access denied)".

The AD domain has 3 DC, and they all have the PassSync tool running. The
RL is installed in one of the DC and it's the one that I used to install
the PassSync tool in the other DCs.

The driver idea is to replace the AD password with the one contained in
eDir when the attribute "businessCategory" changes to "tomigrate". After
the operation is completed, the attribute changes to "migrated".

Sometimes when I do my tests the sync works well, but when a user
launches it from a different computer we have the error above (he also
did it well several times). I pass all day yesterday trying to
understand what happens, but now I can say I'm clueless...

I would be very glad if you could help me.

I have a piece of my remote loader log file and a transaction log file
(from the ad driver), but it's divided into 3 parts (to big) :

http://pastebin.com/3TYKAfBx - remote loader
http://pastebin.com/NARG1BuQ - ad1
http://pastebin.com/1wf4BgXU - ad2
http://pastebin.com/nJQhTef6 - ad3

Thanks in advance for your help,

MuadDib_II's Profile: https://forums.netiq.com/member.php?userid=8754
View this thread: https://forums.netiq.com/showthread.php?t=53899