If the Universal Password is enabled, the randkey option cannot be used for setting Universal Password while changing the password of a principal.

Setting the password for a principal associated with a user object sets Universal Password as the Kerberos password for all the principals that are Universal Password enabled and associated with that user object.

If Universal Password is enabled, the Kerberos Password Agent module should be loaded whenever the machine or eDirectory is restarted.

The Novell Kerberos KDC does not support extended characters in a password. If the Kerberos password is integrated with Universal Password, the Universal Password also cannot have extended characters.