Re: [389-users] Reset Password as Root if User Forgets Password

2014-01-22 Thread Nathan Kinder
On 01/22/2014 12:31 PM, Chaudhari, Rohit K. wrote: > Before I explore this further, when using "ldappasswd," will it still > prompt me for the current password before I can type in a new password to > replace it? You need to be bound to the LDAP server as a user who has permission to change the pa

Re: [389-users] Naming conflict on hub/consumer

2014-01-22 Thread Rich Megginson
On 01/22/2014 01:39 PM, Colin Tulloch wrote: Looks like about 800, thanks to the replication conflict entries. Lookthroughlimit (and or the rangelookthrough) rangelookthrough is only for range (>= and <=) searches. was limiting it – when you asked if the searches were showing un-indexed st

Re: [389-users] Naming conflict on hub/consumer

2014-01-22 Thread Colin Tulloch
Looks like about 800, thanks to the replication conflict entries. Lookthroughlimit (and or the rangelookthrough) was limiting it – when you asked if the searches were showing un-indexed still, that clued me in, I remembered reading the difference between idlistscanlimit and lookthroughlimit. W

Re: [389-users] Reset Password as Root if User Forgets Password

2014-01-22 Thread Chaudhari, Rohit K.
Before I explore this further, when using "ldappasswd," will it still prompt me for the current password before I can type in a new password to replace it? On 1/22/14 3:26 PM, "Paul Robert Marino" wrote: >your SSL cert or your DNS is bad. TLS requires full forward and revers >lookup of the C na

[389-users] Deleting home folders when deleting ldap users

2014-01-22 Thread Chaudhari, Rohit K.
Hello, I'm using JNDI and Java to delete LDAP users, but when I delete them, their home folders stay on the Desktop. How do I get these to delete as well without creating a separate script? Is there a toggle in LDAP to make this happen? Secondly, if a user has multiple home folders scattered ac

Re: [389-users] Reset Password as Root if User Forgets Password

2014-01-22 Thread Chaudhari, Rohit K.
I'm not using kerberos. The other suggestion about using ldappasswd led to the error: ldap_sasl_interactive_bind_s: Can't contact LDAP server (-1) Additional info: TLS: hostname does not match CN in peer certificate Is there a way to create a JNDI equivalent command so that I could add a checkbo

Re: [389-users] Reset Password as Root if User Forgets Password

2014-01-22 Thread Paul Robert Marino
sorry thats not possible. If you are using Kerberos then you can do it via the kadmin command. If not then you have to use one of several other tools like the admin console or ldapmodify for example. On Wed, Jan 22, 2014 at 9:06 AM, Chaudhari, Rohit K. wrote: > Hello, > > I need to be able to re

Re: [389-users] Naming conflict on hub/consumer

2014-01-22 Thread Rich Megginson
On 01/21/2014 06:57 PM, Colin Tulloch wrote: No, not showing up un-indexed anymore Is this with the search filter="(&(|(objectClass=cRLDistributionPoint)(objectClass=pkiCA))(cn=CRL*8))" ? How many entries should match this filter? *From:*389-users-boun...@lists.fedoraproject.org [mailto

[389-users] Reset Password as Root if User Forgets Password

2014-01-22 Thread Chaudhari, Rohit K.
Hello, I need to be able to reset a LDAP user's password if they forget it with the user root. But when I try the "passwd" command as root for a LDAP user, I get the following: (as root) passwd tuser Changing password for user tuser. Password reset by root is not supported. passwd: Authentica