Hi I've set up the edir bidirectional driver (9.0.3) for one-way sync edir->vault (all attributes ignore for sub in filter. Passwoerd sync options: IDM accepts passwords, use distribution passwords) everything is working fine including password sync except when I migrate users (into vault), passwords fail to migrate. However if i create a new user manually in eDir and set the password, the password is also synced just fine and if the user himself changes the password it also works. This is working in my test environment where I have ChangeLog/eDir driver 9.0.2 running with eDirectory 9.0.3
Universal password are enabled for the users I'm trying to sycn and users are configured to be able to retrieve their own passwords (allowing the sync user/iManager user initiating the sync to retrieve password had no effect).
The ChangeLog module (9.0.3) is installed on the only eDirectory(version 8.8 SP8) server in the tree. I'm running IDM 4.6.1 on eDir 9.0.4.
the sync user has rights equal to admin.

I get this error when I migrate users into IDM, any ideas why?
[10/24/2017 14:26:12.384] Bi-directional eDirectory ST:Bi-directional eDirectory: Querying for the GUID : GUID is 80961252D45A464EFD8B80961252D45A
[10/24/2017 14:26:12.385] Bi-directional eDirectory ST:Bi-directional eDirectory: ERROR : Unexpected error while retreiving password information. Reason :
[10/24/2017 14:26:12.385] LDAPException: Undefined Attribute Type (17) Undefined Attribute Type
[10/24/2017 14:26:12.385] LDAPException: Server Message: 17 (0x11)
[10/24/2017 14:26:12.385] LDAPException: Matched DN:
[10/24/2017 14:26:12.385] at com.novell.ldap.LDAPResponse.getResultException(Un known Source)
[10/24/2017 14:26:12.385] at com.novell.ldap.LDAPResponse.chkResultCode(Unknown Source)
[10/24/2017 14:26:12.385] at com.novell.ldap.LDAPConnection.chkResultCode(Unkno wn Source)
[10/24/2017 14:26:12.385] at com.novell.ldap.LDAPConnection.extendedOperation(U nknown Source)
[10/24/2017 14:26:12.385] at com.novell.ldap.LDAPConnection.extendedOperation(U nknown Source)
[10/24/2017 14:26:12.385] at com.novell.nds.dirxml.driver.edir.LDAPInterface.ge tPasswordRequest(LDAPInterface.java:1277)
[10/24/2017 14:26:12.385] at com.novell.nds.dirxml.driver.edir.EdirXdsUtil.chec kUpdatePasswordAttrs(EdirXdsUtil.java:1288)
[10/24/2017 14:26:12.385] at com.novell.nds.dirxml.driver.edir.Query.queryOpera tion(Query.java:447)
[10/24/2017 14:26:12.385] at com.novell.nds.dirxml.driver.edir.EDIRSubscriber.s ubscriberQueryOperation(EDIRSubscriber.java:866)
[10/24/2017 14:26:12.385] at com.novell.nds.dirxml.driver.edir.EDIRSubscription Shim.execute(EDIRSubscriptionShim.java:238)
[10/24/2017 14:26:12.385] at com.novell.nds.dirxml.engine.Subscriber.execute(Su bscriber.java:470)
[10/24/2017 14:26:12.385] at com.novell.nds.dirxml.engine.Subscriber.execute(Su bscriber.java:304)
[10/24/2017 14:26:12.385] at com.novell.nds.dirxml.engine.Subscriber$Subscriber AppQueryProcessor.query(Subscriber.java:2347)
[10/24/2017 14:26:12.385] at com.novell.nds.dirxml.engine.Transformer.readObjec t(Transformer.java:1338)
[10/24/2017 14:26:12.385] at com.novell.nds.dirxml.engine.Publisher$SyncProcess or.process(Publisher.java:1339)
[10/24/2017 14:26:12.385] at com.novell.nds.dirxml.engine.Publisher.processEven t(Publisher.java:880)
[10/24/2017 14:26:12.385] at com.novell.nds.dirxml.engine.Publisher.processEven ts(Publisher.java:782)
[10/24/2017 14:26:12.385] at com.novell.nds.dirxml.engine.Publisher.execute(Pub lisher.java:466)
[10/24/2017 14:26:12.385] at com.novell.nds.dirxml.engine.Subscriber$QueryProce ssor.process(Subscriber.java:2123)
[10/24/2017 14:26:12.385] at com.novell.nds.dirxml.engine.Subscriber.processEve nt(Subscriber.java:1156)
[10/24/2017 14:26:12.385] at com.novell.nds.dirxml.engine.Subscriber.processEve nts(Subscriber.java:969)
[10/24/2017 14:26:12.385] at com.novell.nds.dirxml.engine.Driver.submitTransact ion(Driver.java:865)
[10/24/2017 14:26:12.385] at com.novell.nds.dirxml.engine.DriverEntry.submitTra nsaction(DriverEntry.java:1158)
[10/24/2017 14:26:12.385] at com.novell.nds.dirxml.engine.DriverEntry.processCa chedTransaction(DriverEntry.java:1042)
[10/24/2017 14:26:12.385] at com.novell.nds.dirxml.engine.DriverEntry.eventLoop (DriverEntry.java:850)
[10/24/2017 14:26:12.385] at com.novell.nds.dirxml.engine.DriverEntry.run(Drive rEntry.java:627)
[10/24/2017 14:26:12.385] at java.lang.Thread.run(Thread.java:748)