The risks of enabling universal password are documented by NMASTM. Refer to the Deploying Universal Password section in the Novell Modular Authentication Service 2.3.x Administration Guide.