I have a Unix-Linux Fan Out POC I am working on, and I have a number of
adds & modifies of users and groups working fine, but I can't get a
password to go to the target host.

I have tried it in an LDIF in a new user create, and with iManager "Set
Password" after the create. My problem is that I don't know where to
look to find the debug output of the scripts to see what actually
happened, as all the Sub channel events in the log point to a clean Set
Password event. My hunch is that there is a config option in an ASAM
file that I am missing. I also have looked at the adduser.sh and
moduser.sh scripts (stock) and don't see anything there that shows the
password actually being set in the /etc/shadow. Is this handled at a
lower API level? How is it supposed to get set?

Thanks!

[Most relevant part of the trace:]
08/25/16 22:49:55.046]:FanOut :Remote Interface Driver: Received
document for subscriber channel
[08/25/16 22:49:55.046]:FanOut :Remote Interface Driver: Waiting for
receive...
[08/25/16 22:49:55.046]:FanOut ST:Password synchronization command
status detected.
[08/25/16 22:49:55.047]:FanOut ST:Restoring operation data to output
document
[08/25/16 22:49:55.047]:FanOut ST:SubscriptionShim.execute() returned:
[08/25/16 22:49:55.048]:FanOut ST:
<nds dtdversion="1.1" ndsversion="8.6">
<source>
<product build="151208"/>
<contact/>
</source>
<output>
<status event-id="pwd-subscribe" level="success">
<operation-data>
<password-subscribe-status>
<association>F4C26561B7D17D4E5EB9F4C26561B7D1</association>
</password-subscribe-status>
</operation-data>
</status>
</output>
</nds>
[08/25/16 22:49:55.049]:FanOut ST:No input transformation policies.
[08/25/16 22:49:55.050]:FanOut ST:Applying schema mapping policies to
input.
[08/25/16 22:49:55.050]:FanOut ST:Applying policy:
%+C%14Csmp-FanOut-LinuxUnix%-C.
[08/25/16 22:49:55.050]:FanOut ST:Resolving association references.
[08/25/16 22:49:55.051]:FanOut ST:Processing returned document.
[08/25/16 22:49:55.051]:FanOut ST:Processing operation <status> for .
[08/25/16 22:49:55.052]:FanOut ST:
DirXML Log Event -------------------
Driver: \popoloco_DEV\system\DriverSet\fanout-LnxUnx
Channel: Subscriber
Object: \popoloco_DEV\popoloco\Users\e881787
Status: Success
[08/25/16 22:49:55.060]:FanOut ST:Password synchronization event status
recorded.
[08/25/16 22:49:55.061]:FanOut ST:End transaction.


[FULLish TRACE]
[08/25/16 22:49:54.766]:FanOut ST:Start transaction.
[08/25/16 22:49:54.766]:FanOut ST:type(modify-entry)entry-id(282045)
dn(\T=popoloco_DEV\O=popoloco\OU=Users\CN=e881787) class-id(435)
class-name(User)
[08/25/16 22:49:54.767]:FanOut ST:type(add-value)<value suppressed>
[08/25/16 22:49:54.769]:FanOut ST:Processing events for transaction.
[08/25/16 22:49:54.771]:FanOut ST:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Evaluation" version="4.5.0.0">DirXML</product>
<contact>NetIQ Corporation</contact>
</source>
<input>
<modify cached-time="20160825224954.708Z" class-name="User"
event-id="az18u1568#20160825224954#1#1:5fd32bc0-6c5d-4b69-55be-c02bd35f5d6c"
qualified-src-dn="O=popoloco\OU=Users\CN=e881787"
src-dn="\popoloco_DEV\popoloco\Users\e881787" src-entry-id="282045"
timestamp="1472165394#12">
<association
state="associated">F4C26561B7D17D4E5EB9F4C26561B7D 1</association>
<modify-attr attr-name="nspmDistributionPassword"><!-- content
suppressed -->
</modify-attr>
</modify>
</input>
</nds>
[08/25/16 22:49:54.775]:FanOut ST:Password synchronization event
detected.
[08/25/16 22:49:54.931]:FanOut ST: Applying to modify-password #1.
[08/25/16 22:49:54.933]:FanOut ST: Evaluating selection criteria for
rule 'Add operation-data element to password operations'.
[08/25/16 22:49:54.935]:FanOut ST: (if-operation equal "add") =
FALSE.
[08/25/16 22:49:54.937]:FanOut ST: (if-operation equal
"modify-password") = TRUE.
[08/25/16 22:49:54.938]:FanOut ST: (if-xpath not-true
"operation-data") = TRUE.
[08/25/16 22:49:54.940]:FanOut ST: Rule selected.
[08/25/16 22:49:54.940]:FanOut ST: Applying rule 'Add operation-data
element to password operations'.
[08/25/16 22:49:54.942]:FanOut ST: Action:
do-append-xml-element("operation-data",".").
[08/25/16 22:49:54.944]:FanOut ST: Evaluating selection criteria for
rule 'Add payload data to a reset password from a failed password
publish operation'.
[08/25/16 22:49:54.947]:FanOut ST: (if-operation equal
"modify-password") = TRUE.
[08/25/16 22:49:54.949]:FanOut ST: (if-xpath true
"self::modify-password[@event-id = 'pwd-publish-failed']") = FALSE.
[08/25/16 22:49:54.951]:FanOut ST: Rule rejected.
[08/25/16 22:49:54.952]:FanOut ST: Evaluating selection criteria for
rule 'Add payload data to password operations'.
[08/25/16 22:49:54.954]:FanOut ST: (if-operation equal "add") =
FALSE.
[08/25/16 22:49:54.956]:FanOut ST: (if-operation equal
"modify-password") = TRUE.
[08/25/16 22:49:54.958]:FanOut ST: (if-xpath true
"self::modify-password[@event-id != 'pwd-publish-failed']") = TRUE.
[08/25/16 22:49:54.959]:FanOut ST: Rule selected.
[08/25/16 22:49:54.960]:FanOut ST: Applying rule 'Add payload data to
password operations'.
[08/25/16 22:49:54.962]:FanOut ST: Action:
do-append-xml-element("password-subscribe-status","operation-data").
[08/25/16 22:49:54.964]:FanOut ST: Action:
do-append-xml-element("association","operation-data/password-subscribe-status").
[08/25/16 22:49:54.967]:FanOut ST: Action:
do-append-xml-text("operation-data/password-subscribe-status/association",token-association()).
[08/25/16 22:49:54.970]:FanOut ST:
arg-string(token-association())
[08/25/16 22:49:54.971]:FanOut ST: token-association()
[08/25/16 22:49:54.972]:FanOut ST: Token Value:
"F4C26561B7D17D4E5EB9F4C26561B7D1".
[08/25/16 22:49:54.973]:FanOut ST: Arg Value:
"F4C26561B7D17D4E5EB9F4C26561B7D1".
[08/25/16 22:49:54.975]:FanOut ST:Policy returned:
[08/25/16 22:49:54.977]:FanOut ST:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Evaluation" version="4.5.0.0">DirXML</product>
<contact>NetIQ Corporation</contact>
</source>
<input>
<modify-password class-name="User" event-id="pwd-subscribe"
qualified-src-dn="O=popoloco\OU=Users\CN=e881787"
src-dn="\popoloco_DEV\popoloco\Users\e881787" src-entry-id="282045"
timestamp="1472165394#12">
<association>F4C26561B7D17D4E5EB9F4C26561B7D1</association>
<password><!-- content suppressed --></password>
<operation-data>
<password-subscribe-status>
<association>F4C26561B7D17D4E5EB9F4C26561B7D1</association>
</password-subscribe-status>
</operation-data>
</modify-password>
</input>
</nds>
[08/25/16 22:49:56.003]:FanOut :Remote Interface Driver: Received
document for publisher channel
[08/25/16 22:49:56.003]:FanOut :Remote Interface Driver: Waiting for
receive...
[08/25/16 22:49:56.003]:FanOut PT:Receiving DOM document from
application.
[08/25/16 22:49:56.004]:FanOut PT:
<nds dtdversion="1.1" ndsversion="8.6">
<input>
<status event-id="publisher-log" level="success">OBJ120I Object
Services received an event for .e881787.Users.popoloco. aos3460
(.e881787.Users.popoloco)</status>
</input>
</nds>
[08/25/16 22:49:56.006]:FanOut PT:No input transformation policies.
[08/25/16 22:49:56.006]:FanOut PT:Applying schema mapping policies to
input.
[08/25/16 22:49:56.007]:FanOut PT:Applying policy:
%+C%14Csmp-FanOut-LinuxUnix%-C.
[08/25/16 22:49:56.007]:FanOut PT:Resolving association references.
[08/25/16 22:49:56.008]:FanOut PT:No event transformation policies.
[08/25/16 22:49:56.008]:FanOut PT:Applying publisher filter.
[08/25/16 22:49:56.008]:FanOut PT:Publisher processing status for .
[08/25/16 22:49:56.009]:FanOut PT:No command transformation policies.
[08/25/16 22:49:56.009]:FanOut PT:Filtering out notification-only
attributes.
[08/25/16 22:49:56.009]:FanOut PT:Pumping XDS to eDirectory.
[08/25/16 22:49:56.010]:FanOut PT:Performing operation status for .
[08/25/16 22:49:56.010]:FanOut PT:
DirXML Log Event -------------------
Driver: \popoloco_DEV\system\DriverSet\fanout-LnxUnx
Channel: Publisher
Status: Success
Message: OBJ120I Object Services received an event for
..e881787.Users.popoloco. aos3460 (.e881787.Users.popoloco)
[08/25/16 22:49:56.012]:FanOut PT:Fixing up association references.
[08/25/16 22:49:56.012]:FanOut PT:Applying schema mapping policies to
output.
[08/25/16 22:49:56.013]:FanOut PT:Applying policy:
%+C%14Csmp-FanOut-LinuxUnix%-C.
[08/25/16 22:49:56.013]:FanOut PT:No output transformation policies.
[08/25/16 22:49:56.014]:FanOut PT:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Evaluation" version="4.5.0.0">DirXML</product>
<contact>NetIQ Corporation</contact>
</source>
<output>
<status event-id="publisher-log" level="success"></status>
</output>
</nds>
[08/25/16 22:49:56.016]:FanOut PT:Remote Interface Driver: Sending...
[08/25/16 22:49:56.016]:FanOut PT:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Evaluation" version="4.5.0.0">DirXML</product>
<contact>NetIQ Corporation</contact>
</source>
<output>
<status event-id="publisher-log" level="success"></status>
</output>
</nds>


--
desertpilotjc
------------------------------------------------------------------------
desertpilotjc's Profile: https://forums.netiq.com/member.php?userid=9777
View this thread: https://forums.netiq.com/showthread.php?t=56494