On Sep 13, 2007, at 3:12 PM, Anne Moore wrote:
Does anyone know how to configure OpenLDAP to allow directory users to change their own passwords?
Another note: if you are looking for examples of how to configure slapd(8) to allow directory users to change their own passwords, you needn't look any further than the OpenLDAP test suite. In particular, test010-passwd builds a server for the expressed purpose of testing password updates. If you were building from source, you could just run this particular test (./run test010) and then go explore the configure files it leaves behind.
As someone already pointed out (with example), the only configure slapd(8) really needs to allow a directory user to change their password is write permission to the userPassword attribute.
-- Kurt