Identity Synchronization for Microsoft 1.0 password synchronization failure

Question

Hi
I�ve installed Identity Synchronization for Microsoft 1.0, and I can synchronize all attribute mail, telephonenumber etc � but I can not sync passwords! Between Active Directory and DS 5.2!!!
In the audit log of isw I have
CNN101 server1 "The controller has received the following inbound action from the accessor: Typ
e: UNKNOWN {Data Attrs: } {Other Attrs: samaccountname: user1 usnchanged: 1696 objectguid: NfQTjHdpAE+h4MS/2UxZzQ== dn: CN=user1 user,OU=util
i,DC=ldap,DC=com whenchanged: 20040825204423.0Z sn: user1 givenname: user}." (Action ID=CNN101-FE9B7FD2EE-6, SN=0)
but for a telephone number modification i have:
CNN101 server1 "The agent has received the following inbound action from the controller: Type: MODIFY SUL: SUL1 {Data Attrs: [REPL telephonenumber: 88888888888888]} {Other Attrs: samaccountname: user1 usnchanged: 2893 objectguid: ReawE
r7nqkSYpupcV/7V3w== dn: CN=user1 users,OU=utlisateurs,DC=fr,DC=ldap,DC=com whenchanged: 20040826194415.0Z}." (Action ID=CNN101-FE9BE2BDDF-26, S
N=1)
Can anybody help ?
I have installed one connector for AD , and one connector for DS and a subcomponent, the user are linked and resync with success.
Thanks

Answer 1

Hi,
ISW does not propagate the new password value itself when a password change is detected in Active Directory. The log message quoted does not show any error.
Note that passwords are not synchronized during resync. However, when resync'ing from Active Directory to Sun ONE Directory, you can invalidate the passwords of the Sun ONE Directory accounts using the -i flag. The invalidation will force on-demand password synchronization to start when a user with invalidated passwords attempts authentication to Sun ONE Directory.
I would also highly recommend following the instructions in the troubleshooting section of the product documentation.
Bertold