Because the target AD DC/LDS instance doesn't support application password validation, ntdsutil couldn't verify the password ...