Dirk Streubel wrote:
Hello Robbie,
thanks a lot for the quick answer.
I was wondering that kpasswsd and passwd change the Password Entry in
the 389 Server.
But if it works i will use that way in the future :)
IPA has a plugin in 389-ds that intercepts password changes and
synchronizes the userPassword in LDAP, sets the Kerberos keys and
optionally can set other passwords as well while it has the cleartext
password.
So pretty much any valid method to set a password will work the same
way: ldappasswd, ldapmodify, kpasswd, passwd or several ipa commands.
This also enforces password policy in a uniform way.
rob
Regards
Dirk
Am 12.12.19 um 20:21 schrieb Robbie Harwood via FreeIPA-users:
> Dirk Streubel via FreeIPA-users<freeipa-users(a)lists.fedorahosted.org>
> writes:
>
>> Hello Rob,
>>
>> just for my understanding, when kpasswd and passwd change the password
>> of the IPA / IDM User, how notice the IPA/IDM Server the change?
> They share a database (LDAP) for storage of that information, so the
> change happens for both at the same time.
>
> Thanks,
> --Robbie
>
> _______________________________________________
> FreeIPA-users mailing list --freeipa-users(a)lists.fedorahosted.org
> To unsubscribe send an email tofreeipa-users-leave(a)lists.fedorahosted.org
> Fedora Code of
Conduct:https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List
Guidelines:https://fedoraproject.org/wiki/Mailing_list_guidelines
> List
Archives:https://lists.fedorahosted.org/archives/list/freeipa-users@lists...