Thank you for your reply, Andrew.

I went ahead and created the proxy user as a sysaccount and the  test user
as a normal account.

I am seeing the following error, when PWM starts.
> Insufficient 'write' privilege to the 'ipaUniqueID' attribute of entry

Is it necessary to give the proxy user write permission to ipaUniqueID for
PWM to work properly?

On Sun, Nov 11, 2018 at 7:20 AM Andrew Meyer <andrewm...@yahoo.com> wrote:

> I just did this.  I setup the pwm users under the normal account setup.
>
> Sent from Yahoo Mail on Android
> <https://go.onelink.me/107872968?pid=InProduct&c=Global_Internal_YGrowth_AndroidEmailSig__AndroidUsers&af_wl=ym&af_sub1=Internal&af_sub2=Global_YGrowth&af_sub3=EmailSignature>
>
> On Sat, Nov 10, 2018 at 10:57, Joyce Babu via FreeIPA-users
> <freeipa-users@lists.fedorahosted.org> wrote:
> I am trying to setup PWM for allowing users to reset their password. I
> found the following guide on setting up PWM with FreeIPA
> https://gist.github.com/OneLoveAmaru/2ac93400a30466cdecc7a60e30ae1303 .
>
> The above guide creates the pwmproxy and pwmtest users under
> cn=users,cn=accounts,dc=example,dc=com.
>
> uid=pwmproxy,cn=users,cn=accounts,dc=example,dc=com
> uid=pwmtest,cn=users,cn=accounts,dc=example,dc=com
>
> But FreeIPA documentation does not recommend creating such accounts as
> normal user accounts.
> https://www.freeipa.org/page/HowTo/LDAP#System_Accounts
>
> Is it better to create the above accounts under
> cn=sysaccounts,cn=etc,dc=example,dc=com as recommended in the HowTo?
> Or does PWM require that the pwm users also be created under the same base
> dn?
> _______________________________________________
> FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
> To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
> Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
>
>

-- 
*Thanks and regards,*
Joyce Babu
---------------------------------------------

Ennexa Technologies Pvt. Ltd.Building No. 11/476, Manganam P.O.,*(Near
Manganam Service Co-Operative Bank)*Kottayam, Kerala - 686018, India

+91-9895445364 | +91-481-2970053 | i...@ennexa.com | www.ennexa.com
Registered Address: Kochuparambil, Manarcad PO, Kottayam, Kerala - 686019,
India
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org

Reply via email to