While I operate a similar network I don't require password resets (I have them 
choose a long and more secure password). In order for them to be able to change 
their password you would have to allow them write permission to their own 
userPassword attributes by putting something like the following in your 
slapd.conf file:

Access to dn.children="ou=People,dc=domain,dc=com" attrs=userPassword
        By self write

I do not know if the built in password management tools support LDAP but if 
they do the above will allows those changes to be made.

Regards,

Dan
 
-----Original Message-----
From: fedora-list-boun...@redhat.com [mailto:fedora-list-boun...@redhat.com] On 
Behalf Of Luc MAIGNAN
Sent: Wednesday, December 09, 2009 6:13 AM
To: Community assistance, encouragement, and advice for using Fedora.
Subject: LDAP authentication error

Hi,

I use an OpenLDAP server to permit users to log in their computers. All 
seem to be ok but for a while.
After several days, users are required to change their passwords (I've 
never configured it) and they cannot do that (they are said they don't 
have enough rights to do this).

Has anyone an idea to prevent the unsollicited change of password ?

BR

-- 
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines

-- 
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines

Reply via email to