If the Policy Server is using Active Directory Global Catalog, the pwdLastSet attribute can be ignored if you manually add the following registry value:
SiteMinder\CurrentVersion\Ds\LDAPProvider\IgnoreADPwdLastSet
To enable this feature, set this REG_DWORD value to a non-zero value.
Note: This feature was removed in 6.0 SP2 and was added back in at v6.0 SP2_CR002.
| Copyright © 2011 CA. All rights reserved. | Email CA Technologies about this topic |