Re: (ITS#5569) smbk5pwd breaks ppolicy-mandated password changes

[bgmilne@staff.telkomsa.net]

On Tuesday 08 July 2008 11:55:19 Howard Chu wrote:
> bgmilne@staff.telkomsa.net wrote:
> > Full_Name: Buchan Milne
> > Version: 2.3.41
> > OS: Linux 2.6
> > URL: ftp://ftp.openldap.org/incoming/
> > Submission from: (NULL) (196.207.32.38)
> >
> > I have not run this same test case on 2.4.x yet, but I remember having
> > problems trying to change passwords on 2.4.10 with a very similar
> > configuration, so I think it exists in 2.4.10 as well.
>
> Please try this patch...

Seems to fix it:

[root@tiger ~]# ldappasswd -x -D 
uid=bgmilne,ou=People,dc=ranger,dc=dnsalias,dc=com -W -S
New password:
Re-enter new password:
Enter LDAP Password:
Result: Insufficient access (50)
Additional info: Operations are restricted to 
bind/unbind/abandon/StartTLS/modify password
[root@tiger ~]# urpmi openldap-servers
To satisfy dependencies, the following packages are going to be installed:
   Package                        Version      Release       Arch
(medium "bgmilne")
  lib64ldap2.4_2                 2.4.10       1.1mdv2008.1  x86_64
  openldap                       2.4.10       1.1mdv2008.1  x86_64
  openldap-servers               2.4.10       1.1mdv2008.1  x86_64
9.5KB of additional disk space will be used.
1.5MB of packages will be retrieved.
Proceed with the installation of the 3 packages? (Y/n) y

installing lib64ldap2.4_2-2.4.10-1.1mdv2008.1.x86_64.rpm 
openldap-2.4.10-1.1mdv2008.1.x86_64.rpm 
openldap-servers-2.4.10-1.1mdv2008.1.x86_64.rpm 
from //home/bgmilne/rpm/mdk/RPMS.mdv2008.1/x86_64
Preparing...                     #############################################
      1/3: lib64ldap2.4_2        #############################################
      2/3: openldap              #############################################
      3/3: openldap-servers      #############################################
Stopping slapd: [  OK  ]
Starting slapd (ldap + ldaps): [  OK  ]
[root@tiger ~]# ldappasswd -x -D 
uid=bgmilne,ou=People,dc=ranger,dc=dnsalias,dc=com -W -S
New password:
Re-enter new password:
Enter LDAP Password:
[root@tiger ~]#



Thanks,
Buchan