A page in your DokuWiki was added or changed. Here are the details:
Date : 2014/01/20 12:32
Browser : Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:26.0) Gecko/20100101
Firefox/26.0
IP-Address : 88.173.78.196
Hostname : mne69-10-88-173-78-196.fbx.proxad.net
Old Revision:
http://ltb-project.org/wiki/documentation/self-service-password/latest/config_ldap?rev=1350718163
New Revision:
http://ltb-project.org/wiki/documentation/self-service-password/latest/config_ldap
Edit Summary:
User : coudot
@@ -86,8 +86,24 @@
* Force user to change password at next login:
<file php>
$ad_options['force_pwd_change'] = true;
</file>
+
+
+ You need to have a manager account on Active Directory with rights to change
password of users. To set the minimum rights for this account, do the following:
+ * Create a basic domain account without any additional privileges
+ * Use Delegate control wizard within "User and computers", then
+ * User Object
+ * Reset Password
+ * Write lockoutTime (if unlock is enabled)
+ * Write shadowlastchange
+
+ If you enabled the [[config_questions|reset by questions feature]], you also
need to give rights on the question attribute:
+ * Right click the OU where you want delegation of permissions to propogate
down from and select "Delegate Control…"
+ * Add the account to delegate to, click Next
+ * Create a custom task to delegate
+ * Select the radio button for "Only the following objects in the folder",
then select "User objects" at the bottom of the list, click Next
+ * Select the "Property-specific" checkbox only, then locate the attribute
you are using to store the "Reset by questions" answer in.
==== Samba ====
To manage compatibility with Windows world, Samba stores a specific hash of
the password in a second attribute (''sambaNTpassword''). It also store
modification date in ''sambaPwdLastSet''. Use ''$samba_mode'' to manage these
attributes:
--
This mail was generated by DokuWiki at
http://ltb-project.org/wiki/
_______________________________________________
ltb-changes mailing list
[email protected]
http://lists.ltb-project.org/listinfo/ltb-changes
