?Syspassword shows old value after CTRL, ALT, DEL change password

  • 7013468
  • 16-Oct-2013
  • 31-Oct-2013

Environment

Novell SecureLogin
NSL7.0.3 HF6
eDirectory data store
Installed in LDAP Credential Manager mode
SyncLDAPPassword is set to 1

Situation

?Syspassword shows old value after CTRL, ALT, DEL change password 
?Syspassword is not updated with Windows password change
?Syspassword shows old value until reboot
Problem does not occur unless IDM AD – eDir driver is running

Resolution

Set SyncDelay as well as SyncLDAPPassword

Setting SyncLDAPPassword alone allows Windows and eDir passwords to synchronize if the IDM Microsoft AD Driver is NOT also syncronizing changes between AD and eDir.  
If the IDM AD-eDir driver is active then both SyncLDAPPassword and SyncDelay must be set.

Both values are set under HKEY_LOCAL_MACHINE\SOFTWARE\Novell\Login\LDAP
SyncDelay    REG_DWORD set to 5 (or any non-zero number)
SyncLDAPPassword  REG_DWORD set to 1

These settings require NSL7.0.3 HotFix 6 or later.