SASL, LDAP userPassword attribute always being updated

Question

Environment:
Sun Identity Manager 8.0.0.4
OpenLDAP 2.2.30
Issue:
At my institution, OpenLDAP delegates authentication to another source via SASL, and the userPassword attribute for user "uid=jsmith" is "{SASL}jsmith". In order to avoid the built-in password processing, I renamed the LHS of the attribute in the resource schema from "password" to "ldapPassword", changed the map type to "string" and set the Password Hash Algorithm on the resource to "NONE".
This is basically working:
1. The userPassword attribute is being set correctly when the resource is created, and LDIFs of the user objects confirm that.
2. When I view a user and look at the resource attributes, the userPassword attribute looks good.
But whenever the SIM user goes through a checkin/checkout process (say, via edit or active sync on a resource), the userPassword attribute in LDAP is updated, and the process results say it is being updated from "" to the value I would expect. Often, this is the only update required for this particular LDAP resource.
Any ideas why at checkin time it thinks the old value is null (or empty, hard to tell which) and therefore making it think that it needs to do a resource update?
Thanks in advance. -Les

Answer 1

Did you end up with a solution for this? its exactly where i am at now?