By default the Universal Password is configured to write the password but not read.

From the Novell Secure Password Manager Schema that implements NSPM

The attributeType nspmConfigurationOptions (Bitmask) shows values that can be read from LDAP

The default behavior is that when the Universal Password is set then the NDS Password and the Simple Password are set to the same value (one exception is that the NDS Password will uppercase "a" through "z".

Different eDirectory Versions and nspmConfigurationOptions MAY change this behavior. For example, there are options to NOT sync the NDS Password and/or the Simple Password.

More Information#

There might be more information for this subject on one of the following: