Hi,

My Customer have IDM integrated with Active Directory.

When the users change password from computer in Windows domain , the password is not sync in IDM.

They see the following error: Code(-8021) Unable to set NMAS password: -215 DSERR_DUPLICATE_PASSWORD



<nds dtdversion="2.2">
<source>
<product build="20140409_120000" instance="\COMPENSAR-PROD\system\DriverSet01\AD-MID" version="4.0.0.4">AD</product>
<contact>NetIQ Corporation</contact>
</source>
<input>
<modify-password class-name="User" dest-dn="compensar\usuarios\internos\20933432" dest-entry-id="149192" event-id="AD-MID##15d1d4a6441##0" password-admin-reset="true" src-dn="CN=ALBA ROCIO SUAREZ TORRES,OU=PSS,OU=OU USUARIOS,DC=COMPENSAR,DC=CCF">
<association>c66d0628467b8f42aeb0dc7709eb5130</association>
<password><!-- content suppressed --></password>
</modify-password>
<modify class-name="User" dest-dn="compensar\usuarios\internos\20933432" dest-entry-id="149192" event-id="pwd-publish" src-dn="CN=ALBA ROCIO SUAREZ TORRES,OU=PSS,OU=OU USUARIOS,DC=COMPENSAR,DC=CCF">
<association>c66d0628467b8f42aeb0dc7709eb5130</association>
<modify-attr attr-name="nspmDistributionPassword" enforce-password-policy="true"><!-- content suppressed -->
</modify-attr>
</modify>
</input>
</nds>


DirXML Log Event -------------------
Driver: \COMPENSAR-PROD\system\DriverSet01\AD-MID
Channel: Publisher
Object: CN=ALBA ROCIO SUAREZ TORRES,OU=PSS,OU=OU USUARIOS,DC=COMPENSAR,DC=CCF (compensar\usuarios\internos\20933432)
Status: Success
[07/07/17 08:43:21.004]:AD-MID ST: (if-association associated) = TRUE.
[07/07/17 08:43:21.005]:AD-MID PT:
DirXML Log Event -------------------
Driver: \COMPENSAR-PROD\system\DriverSet01\AD-MID
Channel: Publisher
Object: CN=ALBA ROCIO SUAREZ TORRES,OU=PSS,OU=OU USUARIOS,DC=COMPENSAR,DC=CCF (compensar\usuarios\internos\20933432)
Status: Warning
Message: Code(-8021) Unable to set NMAS password: -215 DSERR_DUPLICATE_PASSWORD.




How they can resolve this problem?

TIA