When the ON system is doing a password lookup for validating LDAP credentials, it only calls for a built in .Net method. If an unsupported flag is set the password lookup will fail.