Hello,

 

I get some trouble with the password policy settings.

 

I try to modify an user password when I am connected as an admin, but I can’t due tu “User Alteration of Password is not allowed”.

 

I connect with an "Admin profile" who have right to write on all the directory

Jan  5 15:06:25 clawma01 slapd[4363]: conn=94459 op=0 BIND dn="cn=adm_alecle23,ou=administrator,ou=security,o=oxylane" mech=SIMPLE ssf=0

Jan  5 15:06:25 clawma01 slapd[4363]: conn=94459 op=0 RESULT tag=97 err=0 text=

 

When I try to change a password for a standard user, I get this error message.

Jan  5 15:06:43 clawma01 slapd[4363]: conn=94459 op=12 MOD dn="uid=o2alecle23,ou=o2,ou=people,o=oxylane"

Jan  5 15:06:43 clawma01 slapd[4363]: conn=94459 op=12 MOD attr=userPassword

Jan  5 15:06:43 clawma01 slapd[4363]: conn=94459 op=12 RESULT tag=103 err=50 text=User alteration of password is not allowed

 

Here is the password policy used for this user

dn: cn=userDefault,ou=policy,ou=security,o=oxylane

objectClass: top

objectClass: pwdPolicy

objectClass: person

cn: userDefault

pwdAllowUserChange: TRUE

pwdAttribute: userPassword

pwdCheckQuality: 1

pwdExpireWarning: 432000

pwdFailureCountInterval: 1800

pwdGraceAuthNLimit: 0

pwdInHistory: 10

pwdLockout: TRUE

pwdLockoutDuration: 0

pwdMaxAge: 2764800

pwdMaxFailure: 15

pwdMinAge: 172800

pwdMinLength: 6

pwdMustChange: FALSE

sn: default_user

 

Could I change password for an user with an other account instead of rootdn?

How can I allow admin user to change password of standard user?

 

Regards,

 

Thomas