phpldapadmin assistance

[Ansar Mohammed]

  _____  

From: owner-tlug-lxSQFCZeNF4 at public.gmane.org [mailto:owner-tlug-lxSQFCZeNF4 at public.gmane.org] On Behalf Of Kihara
Muriithi
Sent: April 14, 2007 7:20 AM
To: tlug-lxSQFCZeNF4 at public.gmane.org
Subject: [TLUG]: phpldapadmin assistance
 
Hi pals,

I have been looking around for a way to let users manage their password
without admin assistance. In another word, I am looking for a way where a
user can point a browser to a certain address, put his/her current user name
and password and get an interface where password change is possible. These
passwords are held in bdb, openldap back end. This have proved to be really
difficult.  How do people manage ldap content out there? 
 

I initially attempted to replace bdb with mysql. My plan was, once I had
openldap running with mysql as its backend, I could set up apache to manage
mysql, without using the ldap protocol. That wasn't successful. There is
little documentation on the Internet on how to do this and I couldn't figure
a way around compilation errors I encountered in the course of doing it. I
have at the moment seized giving this idea preference, but would give it
another shot if I came across a clear howto. 

The other attempt was to set up phpldapadmin. This is definitely easier, but
not without some hiccups. It looks like phpldapadmin can only bind to
openldap as  manager or anonymous. The problem is, if it binds as manager
user1 can mess around with user2 password, even if one login to phpldapadmin
with his/her own username. On the other hand, if phpldapadmin binds
anonymously, no user can change the password. Now this is not ideal as
administrator will need to be involved in password changes. Is phpldapadmin
capable of doing this? i.e. binding as a user and offering rights to change
data of that specific user only. If so, is it possible for once to assist me
with config.php file with confidential data stripped off? I would be
grateful for any assistance 

Thanks
William
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://gtalug.org/pipermail/legacy/attachments/20070414/5b51a08f/attachment.html>