Domain User PAM attributes not being populated until initiating a password reset

Hello,

It appears that the read only attributes of Domain User PAM credential entries are not being populated/updated, either when added manually or imported via account discovery, or when a heartbeat occurs.

If a password reset is initiated, then the attributes do get populated, however this is problematic for credentials which are static and cannot be reset without impacting a system actively using it.

The absence of the attribute values inhibits RDM being able to use the credential to logon to systems which require specific username formats (i.e. UPN or DOMAIN\Username).

In the case of the SID attribute, if this is not populated (such as when a PAM account is added manually), then when running an account discovery it is unable to detect that the credential already exists.

Please let me know if you would like any additional info.

Joe