Dear Alan, it´s a little mor complicated.... Like https://www.netiq.com/documentation/edir_radius/radiusadmin/data/bxxer30.htm... says: "Enabling Universal Password for eDirectory Users Ensure that you enable Universal Password for the users in eDirectory. After enabling, you need to set the Universal Password either manually or by logging in. " Basic concept is, that you have to trigger the sync from the NDS password (Hash) to the universal passsword store per user, partitiion or tree, ... That´s e.g. also possible wih a Novell Client Login with NMAS enabled, but a password change does always do a password sync. Just wanted to point out the way working for the most edir setups.... But all of that is depending from how you want to have your policies, use your passwords and which methods you use.... e.g. you can also do a no sync policy between those passwords.... as you like it. See also: https://www.netiq.com/documentation/edir88/pwm_administration88/data/alpcc1q... https://www.netiq.com/documentation/edir88/pwm_administration88/data/alpccs8... and https://www.netiq.com/documentation/edir88/pwm_administration88/data/alpccv4... Ciao Anja
<A.L.M.Buxey@lboro.ac.uk> 29.04.2014 23:27 >>> Hi,
Are you saying that if universal password will not enable it for existing users who are not changing their passwords? That sucks. :-/
interesting - its not something I've seen - UP gets turned on, things just work(tm) alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html