LDAP and passwords

William Muriithi william.muriithi-Re5JQEeQqe8AvxtiuMwx3w at public.gmane.org
Thu Jul 30 19:17:19 UTC 2009


>
>
> Unfortunately every time they change password they also need to change
> their clients. specifically Evolution/Thunderbird and the Firefox Weave
> plugin. Is there any way that this can be done automatically so that
> changing ones password does not have to become a multistep affair?
>

Unfortunately, there is not much you can do, unless you are ready to
complicate the setup a little.

You can look configuring all those applications to look for the passwords
directly from the ldap. From the way you describe it, it looks like they
indirectly depends on the ldap password - as in, they are using cached
password or local passwords. Which make your problem wield, in that, they
should not then be affected by ldap passwords at all.

Do you mind describing your setup a little?  Use evolutions as an example
and take us through the authentication process.


Alternatively, you can use kerberos. It has a little high learning curve,
but should be the best solution. Check if all your applications can use
kerberos, either directly or through pam before going that route though.

William

>
> Inquiring minds want to know.
>
> cheers,
> darryl
> --
> The Toronto Linux Users Group.      Meetings: http://gtalug.org/
> TLUG requests: Linux topics, No HTML, wrap text below 80 columns
> How to UNSUBSCRIBE: http://gtalug.org/wiki/Mailing_lists
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://gtalug.org/pipermail/legacy/attachments/20090730/21543daa/attachment.html>


More information about the Legacy mailing list