Well I seem to have worked through trusted key issue: needed to point keygen .ini path domain to domain NOT po (thanks bfrye!
). So, now I have a key. However, when I try to perform users operations via the Manager authentication fails (the error tells me to check the registry for a GROUPWISE account.) Does it really mean an edirectory account (ala admin) or is it really asking for a groupwise (email) account? Format? (e.g. "cn=foo,o=bar"? foo.bar? foo?)