Re: [Freeipa-users] Any command can change the direcoty manager password

2014-03-17 Thread Rich Megginson

On 03/17/2014 07:50 AM, barry...@gmail.com wrote:

hi:

I accidently changed uid admin 's password  ...and then change back 
orginal.


BUT it seem that it also modify CN+directory manager also can now 
conflcit.s


The below command changed the password for cn=directory manager?

What do you mean by conflicts?



soem user cann not access using if cn= direcory manager.


???



any idea ? i tried the follwig command it says ssl conenection already 
establsied and error.



~]# LDAPTLS_CACERT=/etc/ipa/ca.crt ldappasswd \
   -ZZ -D 'cn=directory manager' -W \
   -S uid=admin,cn=users,cn=accounts,dc=domain,dc=com
New password:


Add -d 1 like this: . ldappasswd -d 1 .

That will cause debugging output from ldappasswd






___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users


___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Re: [Freeipa-users] Any command can change the direcoty manager password

2014-03-17 Thread Rob Crittenden

barry...@gmail.com wrote:

hi:

I accidently changed uid admin 's password  ...and then change back orginal.

BUT it seem that it also modify CN+directory manager also can now conflcit.s

soem user cann not access using if cn= direcory manager.

any idea ? i tried the follwig command it says ssl conenection already
establsied and error.


~]# LDAPTLS_CACERT=/etc/ipa/ca.crt ldappasswd \
-ZZ -D 'cn=directory manager' -W \
-S uid=admin,cn=users,cn=accounts,dc=domain,dc=com
New password:


I'm not sure I entirely follow you. From what I understand the admin 
password was changed and you'd like to change it back but are having a 
problem doing this using ldappasswd as Directory Manager?


/etc/openldap/ldap.conf may be pre-configured to use an ldaps URI which 
explains the SSL already established part. It will also define 
TLS_CACERT for you.


Try dropping the -ZZ, like this:

$ ldappasswd -D 'cn=directory manager' -W \
-S uid=admin,cn=users,cn=accounts,dc=domain,dc=com

rob

___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users