I just did this.  I setup the pwm users under the normal account setup.

Sent from Yahoo Mail on Android

On Sat, Nov 10, 2018 at 10:57, Joyce Babu via FreeIPA-users

<freeipa-users@lists.fedorahosted.org> wrote:

I am trying to setup PWM for allowing users to reset their password. I found the following guide on setting up PWM with FreeIPA

https://gist.github.com/OneLoveAmaru/2ac93400a30466cdecc7a60e30ae1303 .

The above guide creates the pwmproxy and pwmtest users under  cn=users,cn=accounts,dc=example,dc=com.

uid=pwmproxy,cn=users,cn=accounts,dc=example,dc=com

uid=pwmtest,cn=users,cn=accounts,dc=example,dc=com

But FreeIPA documentation does not recommend creating such accounts as normal user accounts.

https://www.freeipa.org/page/HowTo/LDAP#System_Accounts

Is it better to create the above accounts under cn=sysaccounts,cn=etc,dc=example,dc=com as recommended in the HowTo?

Or does PWM require that the pwm users also be created under the same base dn?

_______________________________________________

FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org

To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org

Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org