On 04/12/2016 11:50 AM, wodel youchi wrote: Hi, I am trying to make horde's module passwd let users change their passwords. In the configuration file of the moduke there are two options for ldap : - ldap : this option uses the users credentials to modify the password (the user change his password with his credentials). - ldapadmin : this option uses the admin, such as the Directory Manager to modify the user's password. the first one, didn't work for me, I get in the horde log : could not replace userPassword attribute, LDAP server : constraint violation. the second one worked. In the error log of 389DS, I didn't find any useful error message. PS : tls is enabled. any idea? changing th pw as user, you probably violate the password policy Regards. -- 389 users mailing list 389-users@%(host_name)shttp://lists.fedoraproject.org/admin/lists/389-users@lists.fedoraproject.org -- Red Hat GmbH, http://www.de.redhat.com/, Registered seat: Grasbrunn, Commercial register: Amtsgericht Muenchen, HRB 153243, Managing Directors: Paul Argiry, Charles Cachera, Michael Cunningham, Michael O'Neill -- 389 users mailing list 389-users@%(host_name)s http://lists.fedoraproject.org/admin/lists/389-users@lists.fedoraproject.org

Hi, I was not talking about access control, but about password policy - quality of passwords, reuse, expiration, when it can be changed ... Please read: https://access.redhat.com/documentation/en-US/Red_Hat_Directory_Server/10... On 04/12/2016 12:35 PM, wodel youchi wrote: Hi, and thanks But as I understand, there is and AC created for ou=people,dc=example,dc=com called "Allow self entry modification" and userPassword attribute is selected for write. is there another AC that supersedes this one? Regards. 2016-04-12 11:19 GMT+01:00 Ludwig Krispenz <lkrispen(a)redhat.com&gt;: > > On 04/12/2016 11:50 AM, wodel youchi wrote: > > Hi, > > I am trying to make horde's module passwd let users change their > passwords. > > In the configuration file of the moduke there are two options for ldap : > > - ldap : this option uses the users credentials to modify the password > (the user change his password with his credentials). > > - ldapadmin : this option uses the admin, such as the Directory Manager > to modify the user's password. > > the first one, didn't work for me, I get in the horde log : could not > replace userPassword attribute, LDAP server : constraint violation. > > the second one worked. > > In the error log of 389DS, I didn't find any useful error message. > > PS : tls is enabled. > > > any idea? > > changing th pw as user, you probably violate the password policy > > > > Regards. > > > -- > 389 users mailing list > 389-users@%(host_name)shttp://lists.fedoraproject.org/admin/lists/389-users@lists.fedoraproject.org > > > -- > Red Hat GmbH, http://www.de.redhat.com/, Registered seat: Grasbrunn, > Commercial register: Amtsgericht Muenchen, HRB 153243, > Managing Directors: Paul Argiry, Charles Cachera, Michael Cunningham, Michael O'Neill > > > -- > 389 users mailing list > 389-users@%(host_name)s > > http://lists.fedoraproject.org/admin/lists/389-users@lists.fedoraproject.org > -- 389 users mailing list 389-users@%(host_name)shttp://lists.fedoraproject.org/admin/lists/389-users@lists.fedoraproject.org -- Red Hat GmbH, http://www.de.redhat.com/, Registered seat: Grasbrunn, Commercial register: Amtsgericht Muenchen, HRB 153243, Managing Directors: Paul Argiry, Charles Cachera, Michael Cunningham, Michael O'Neill -- 389 users mailing list 389-users@%(host_name)s http://lists.fedoraproject.org/admin/lists/389-users@lists.fedoraproject.org