Hi guys,

I will add the PwdModify extended request to the server and the API (cf
http://www.ietf.org/rfc/rfc3062.txt).

Atm, it will be a bit brutal on the server :
- The oldPassword has to be provided by any user that want to change
his/her password
- The Admin user can change any password without having to provide the
old password
- Nobody can reset his/her password to blank
- A user can't change another user's password (except Admin)
- Of course, the modification will be done accordingly to the ACIs and
PasswordPolicy.

wdyt ?

-- 
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com 

Reply via email to