I've coded it with python-kerberos and it works. Pretty rough though.
--Gelen.
________________________________
From: Gelen James <hahaha_...@yahoo.com>
To: "freeipa-de...@redhat.com" <freeipa-de...@redhat.com>
Sent: Sunday, May 20, 2012 2:22 AM
Subject: Feature request: Web UI for IPA users to reset their own expired
passwords
The currently assumption is that all IPA users can login into Unix/Linux
machines to change their IPA password, or reset their expired password.
But this is not available all the time, so a more general alternative -- web
UI -- will be more appreciated. The basic requirements are:
1, The web UI accept user's passwords, expired is also accepted.
2, the authentication is based on IPA Kerberos.
3, authenticated regular IPA user can only reset his/her password only.
4, (bonus) authenticated admin users can alter other users' password as well.
Thanks.
--Gelen
_______________________________________________
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users