UME as LDAP read only, what is the password

Hi,

If the portal or java instance is setup as UME = LDAP read only + database pointing to AD and the user is then assgined roles/groups in the Java UME with access to allow logon.

1. What is the password of the users to use?

2. I know the AD password is definitly not synchronised as it is one way encrypted. Does the user needs to be set a new password in portal to login with?

3. Will this password be stored on the Java UME only?

4. what happens if the users AD password changes, will it affect the password stored in the Java UME?

Thank you.

John