Beefy Boxes and Bandwidth Generously Provided by pair Networks
Perl Monk, Perl Meditation
 
PerlMonks  

Re: Change a user's Kerberos Password?

by 5mi11er (Deacon)
on Jul 08, 2009 at 20:16 UTC ( #778400=note: print w/ replies, xml ) Need Help??


in reply to Change a user's Kerberos Password?

At long last, I've completed and released my password changing website project.
Check it out at http://locksmith.sourceforge.net.


Comment on Re: Change a user's Kerberos Password?
Re^2: Change a user's Kerberos Password?
by Anonymous Monk on Nov 05, 2010 at 20:47 UTC
    Looking at the change_LDAP_password function in locksmith (at least in trunk) I notice you are hashing and replacing the attribute directly. It is probably easier/cleaner/better? to test for and use the ldap exop for password changes:

    $msg = $ldaph->set_password(user => $dn, newpasswd => $newpass, oldpasswd => $oldpass);

    This will let stuff like the openLdap smpk5pwd and ppolicy modules take care of other password related stuff like syncing NT/LANMAN passwords (needed for MSCHAP/eap/peap for wifi via radius) and password policy enforcement on the server. It also handles the encryption on the server with whatever standard the admin has setup in it there.

      Probably an excellent suggestion, but I haven't had to use that system in a while, and no longer have access to those systems, so I have no way of easily testing whether that would work or not.

Log In?
Username:
Password:

What's my password?
Create A New User
Node Status?
node history
Node Type: note [id://778400]
help
Chatterbox?
and the web crawler heard nothing...

How do I use this? | Other CB clients
Other Users?
Others browsing the Monastery: (4)
As of 2014-09-20 17:05 GMT
Sections?
Information?
Find Nodes?
Leftovers?
    Voting Booth?

    How do you remember the number of days in each month?











    Results (160 votes), past polls