The System Intercept#The Platform Services System Intercept communicates with the Platform Services Process for password verification and password changes.
Sample Pam configs are located at:#
The Fan-Out DirXML Driver used stored each user's password as a custom ePassword. In version 3.1.1, the Driver accesses users' Universal Passwords directly. Using the Universal Password makes the password more secure, and reduces the chances that password synchronization will fail.
Make sure you have Password Policies assigned to each container with managed users. (If you are upgrading a Fan-Out Driver, these policies are probably already in place.) Additionally, make sure the "Enable Universal Password" and "Allow admin to retrieve passwords" configuration options are enabled for each policy. If these options are not enabled, you will receive the error message "Could not retrieve a Universal Password for object ... (error code -1)" in your Fan-Out Driver log.