A thought:
If a user logs in to a laptop, then does a "kinit", can they then do a
"kpasswd" to update their password ?
______________________________________________________________________________________________
Daniel E. White
daniel.e.white@nasa.gov<mailto:daniel.e.white@nasa.gov>
NICS Linux Engineer
NASA Goddard Space Flight Center
8800 Greenbelt Road
Building 14, Room E175
Greenbelt, MD 20771
Office: (301) 286-6919
Mobile: (240) 513-5290
From: Johan Vermeulen via FreeIPA-users <freeipa-users(a)lists.fedorahosted.org>
Reply-To: FreeIPA users list <freeipa-users(a)lists.fedorahosted.org>
Date: Tuesday, December 10, 2019 at 07:56
To: FreeIPA users list <freeipa-users(a)lists.fedorahosted.org>
Cc: Johan Vermeulen <jameslast29(a)gmail.com>
Subject: [EXTERNAL] [Freeipa-users] have users reset password
Hello All,
so we have some 200 laptops who are ipa-clients.
At the moment the only way for the users on these laptops to reset their passwords is to
wait until the password expires.
Than they get a message on the login screen and they can reset the password.
I would like to have an alternative method.
Have them login to the Freeipa server is the obvious, but here they see too much
information, like all the users.
Is there another way to have users reset their passwords?
Many thanks, J.