I'm encouraged to hear that you managed to create working accounts with PHP. if you can create the account and get it to the point where the user has a crypt password as you indicated above, use this line to convert it to an open directory password:ĭscl -u adminusername -P adminpassword /LDAPv3/serverip -passwd /Users/clientusername newpassword 2>&1 & If you are using a shell script I'm not sure how you would add the account offhand.
we use it to add single accounts, add batch accounts from our databases, reset passwords, etc. I've been using some php scripts i wrote to do this rather successfully. In my situation, pwpolicy and setpassword allows the imposition of a criteria for password such as min length, numeric, etc. This means the Open Directory is updated and additionally the Kerberos password is updated. If you use WGM to change the password the same entry is made, e.g. That is if your directory administrator is diradmin. The first is credited to the username and the second is credited to the diradmin. Will result in prompting diradmin password and new user password.īoth methods result in a CHANGEPASS entry in Password Server Log of OD. Passwd -i OpenDirectory -l /LDAPv3/127.0.0.1 -u diradmin username
Jaydisc cued me to relook.ĭscl localhost -passwd /LDAPv3/127.0.0.1/Users/username oldpassword newpasswordĪllows a user to change his/her own password without interaction. I have been trying to solve a similar type problem and misread pwpolicy for only changing password policy.
0 kommentar(er)
