Re: configure OpenLDAP to allow directory users - change pass

[Kurt Zeilenga <kurt@OpenLDAP.org>]

On Sep 13, 2007, at 3:12 PM, Anne Moore wrote:

> Does anyone know how to configure OpenLDAP to allow directory users  
> to change their own passwords?

Another note: if you are looking for examples of how to configure  
slapd(8) to allow directory users to change their own passwords, you  
needn't look any further than the OpenLDAP test suite.  In  
particular, test010-passwd builds a server for the expressed purpose  
of testing password updates.  If you were building from source, you  
could just run this particular test (./run test010) and then go  
explore the configure files it leaves behind.

As someone already pointed out (with example), the only configure  
slapd(8) really needs to allow a directory user to change their  
password is write permission to the userPassword attribute.

-- Kurt