Hi Jürgen,

does the user have shadowAccount object class? In this case shadowLastChange 
will be set.

If your user is a Samba user then
sambaPwdLastSet will be updated on Samba password change.

Yeah, thank you Roland this was the problem. These attribute was'nt
writeable by the user.



If logging to file does not work this might be blocked by
SELinux. Try syslog.

No SELinux, and I tried syslog. No luck. Anyway, my problem was solved!





Best regards
Roland

Am 2. August 2017 17:47:46 MESZ schrieb Juergen Holm 
<[email protected]>:
Hi,

in selfservice I cannot change the unix password:

Aug  2 17:29:24 vmext21-029 httpd: LDAP Account Manager
(67ktljjp54f50u3g0i16o2o5e1 - 134.76.88.103) - ERROR:
[uid=et,ou=People,dc=theorie,dc=physik,dc=uni-goettingen,dc=de]
SelfService: Error while changing attributes: Insufficient access

LAM SelfService (No special LDAP-User/Password configured in
Selfservice) said:
Unable to change your account. Maybe you do not have enough rights to
change the settings.

There is no reason why this didn't work.:

slapd.conf:
...
access to attrs=userPassword,sambaNTPassword,sambaLMPassword
        by self write
        by anonymous auth
        by * none
...

A manual ldapmodify of attrs=userPassword  (binding with
uid=et,ou=People,dc=theorie,dc=physik,dc=uni-goettingen,dc=de) works!

Any hints?


So, I set Log-Level to Debug  and write to File /tmp/lam.log
(Allgemeine Einstellungen) but no file is created

How do I activate logging??


(LAM 6.0.1)

--
Mit freundlichen Grüßen

##------------ IT Physik / Georg August Universitaet Goettingen
----------
## Tel:      +49 551 399363                          FAX: +49 551
39189363
## Post:     Dr. Jürgen Holm -- Friedrich Hund Platz 1 -- 37077
Goettingen
## URL:      http://www.theorie.physik.uni-goettingen.de/jh.html
##
## Rechtschreibfehler sind Absicht und dienen der allgemeinen
Belustigung.
##-------------- Verschtehen Sie, Isch habe garrr kein Wooerd!
-----------

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Lam-public mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/lam-public

Reply via email to