I have an edir to edir driver connecting the vault and an eDir instance
on another server, and when I do a full sync of the account or change pw
or anything password related I get the following error.
DirXML Log Event -------------------
Channel: Subscriber
Object: \MCGID\user\USER\user
Status: Warning
Message: Code(-8021) Unable to set NMAS password: -1643

I also cannot view password policy assignments for individual users
using iManager and logging into the vault.... I get this error

Error: Simple bind failed. You may need to import the certificate from
the server.
Creating secure SSL LDAP context failed:

wferguson's Profile: https://forums.netiq.com/member.php?userid=360
View this thread: https://forums.netiq.com/showthread.php?t=54515