Novell Home

My Favorites

Close

Please to see your favorites.

DSfW: ADC install fails NDS error: bad password (-222)

This document (7011732) is provided subject to the disclaimer at the end of this document.

Environment

Novell Open Enterprise Server 11 SP1 (OES11SP1)
Domain Services for Windows
DSfW

Situation

Installing an ADC fails with "NDS error: bad password (-222)"
OES11SP1 ADC install into a Name Mapped domain (no patches)
PDC is OES11SP1 November Maintenance Patch

Resolution

Setting the passwordExpirationTime on the administrator to a date in the future or removing the password expiration on the password policy, or setting a new password before installing an ADC is the current workaround until a bug fix.

Cause

The Administrators password is good, but the expiration date is older than thecurrent date.  The Administrator user is assigned the domain password policyand has the nspmDoNotExpirePassword set to TRUE.
 
The Administrator password is being interpreted as expired if the expiration date isolder than the current date and the nspmDoNotExpirePassword attribute is set toTRUE.The nspmDoNotExpirePassword attribute should override and the passwordexpiration. Instead the nspmDoNotExpirePassword is interpreted as FALSE on a DSfW server.

Disclaimer

This Support Knowledgebase provides a valuable tool for NetIQ/Novell/SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.

  • Document ID:7011732
  • Creation Date:30-JAN-13
  • Modified Date:30-JAN-13
    • NovellOpen Enterprise Server
    • SUSESUSE Linux Enterprise Server
    • NetIQeDirectory

Did this document solve your problem? Provide Feedback