RE: configure OpenLDAP to allow directory users - change pass

["Anne Moore" <diabeticithink@yahoo.com>]

Haha, yah perhaps so! However, that didn't work either. Now I just get
another set of errors:

"Result: Strong(er) authentication required (8)
Additional info: only authenticated users may change passwords"

This is a major pain in the butt... 

I just wish there was documentation on there on the basics of this setup,
but so far, I've found nothing...

Thanks anyway

-----Original Message-----
From: Gavin Henry [mailto:ghenry@suretecsystems.com] 
Sent: Friday, September 14, 2007 11:20 AM
To: Anne Moore
Cc: openldap-software@openldap.org
Subject: RE: configure OpenLDAP to allow directory users - change pass

<quote who="Anne Moore">
> We've tried the ldappasswd on the clients and receive this error:

ldappasswd -x

You're going to have to try a bit harder ;-)

>
> "ldap_sasl_interactive_bind_s: Internal (implementation specific) 
> error
> (80)
> additional info: SASL(-13): user not found: no secret in database"
>
> Obviously something is not configure correctly.
>
> Any ideas on this error?
>
> Thank you
>
> Anne
>
> -----Original Message-----
> From: openldap-software-bounces+diabeticithink=yahoo.com@OpenLDAP.org
> [mailto:openldap-software-bounces+diabeticithink=yahoo.com@OpenLDAP.or
> g]
> On
> Behalf Of Kurt Zeilenga
> Sent: Friday, September 14, 2007 2:20 AM
> To: Anne Moore
> Cc: openldap-software@openldap.org
> Subject: Re: configure OpenLDAP to allow directory users - change pass
>
>
> On Sep 13, 2007, at 3:12 PM, Anne Moore wrote:
>
>> Hi All
>>
>> Does anyone know how to configure OpenLDAP to allow directory users 
>> to change their own passwords?
>>
>> I've using Openldap-2.2.13-7.4E (on my RedHat server)
>>
>> As it is now, I have to change everyone's directory password for them 
>> and the security department isn't liking it.
>
> What do ldappasswd(1) and/or ldapmodify(1) say when changing the 
> directory user's password when run as the user (instead of you or the 
> Directory Manager)?
>
> Note: If the users are using some other software, you might have a 
> problem with that software.  But before raising an issue (on a list 
> about the other software, not here) you should make sure things work 
> using only OpenLDAP Software.  So, even if your users aren't using 
> these tools, you should test with them (as a user) before doing 
> anything else.
>
> -- Kurt
>
>