UNIX to Windows Password Synchronization Service -- Run-time Issues

Applies To: Windows Server 2008

UNIX to Windows Password Synchronization Service -- Run-time Issues indicates the functionality of UNIX to Windows password synchronization operations.

When Password Synchronization is configured for UNIX to Windows synchronization, and UNIX to Windows synchronization is functioning normally, passwords that are changed on UNIX hosts are synchronized on Windows-based computers and domains. The Password Synchronization pluggable authentication module (PAM) makes this possible by intercepting the password change request on the UNIX host, encrypting the password, and then sending the password change request to the Password Synchronization service running on the Windows-based computers with which it is configured to be synchronized.

Events

Event ID Source Message

4102

Microsoft-Windows-IDMU-PSync

Received password change request from host. %rhost = %1

4103

Microsoft-Windows-IDMU-PSync

Successfully updated password for user. %ruser = %1

8195

Microsoft-Windows-IDMU-PSync

Internal error: Memory allocation failed. Check system memory resources.

8210

Microsoft-Windows-IDMU-PSync

Failure updating UNIX password for user. %ruser = %1 %rLDAP error = %2

8214

Microsoft-Windows-IDMU-PSync

Failure accepting connections for password change requests. %rError = %1

8224

Microsoft-Windows-IDMU-PSync

Unable to update password for user. %ruser = %1 %r Check if user account is locked, expired, or disabled.

8228

Microsoft-Windows-IDMU-PSync

Error: unknown user. %ruser = %1

8229

Microsoft-Windows-IDMU-PSync

Error: unrecognized user name. %ruser = %1

8230

Microsoft-Windows-IDMU-PSync

Error: unrecognized password for user. %ruser = %1

8231

Microsoft-Windows-IDMU-PSync

Error changing password. Password expired for user. %ruser = %1

8232

Microsoft-Windows-IDMU-PSync

User can't change password. %ruser = %1

8233

Microsoft-Windows-IDMU-PSync

Error changing password. Password history conflict for user. %ruser = %1

8241

Microsoft-Windows-IDMU-PSync

Error changing password. Password too recent for user. %ruser = %1

8247

Microsoft-Windows-IDMU-PSync

Error occured in acquiring handle to Cryptographic Service Provider. Error=%1

8258

Microsoft-Windows-IDMU-PSync

Generating random number through Cryptographic Service Provider failed. Error = %1.

12288

Microsoft-Windows-IDMU-PSync

Password change request rejected for an account that was not valid. %rAccount = %1

12289

Microsoft-Windows-IDMU-PSync

Password propagation denied for user. User is in PasswordPropDeny group. %ruser = %1

12290

Microsoft-Windows-IDMU-PSync

Password propagation denied for user. User is not in PasswordPropAllow group. %ruser = %1

12291

Microsoft-Windows-IDMU-PSync

Error changing password. Password does not conform to password policy for user. %ruser = %1 %rhost = %2

16389

Microsoft-Windows-IDMU-PSync

Password change request for user = %1, from the UNIX side is rejected because the operating system is still loading.

Password Synchronization

Identity Management for UNIX