Hello,
I get some trouble with the password policy settings.
I try to modify an user password when I am connected as an admin, but I can't due tu "User Alteration of Password is not allowed".
I connect with an "Admin profile" who have right to write on all the directory
Jan 5 15:06:25 clawma01 slapd[4363]: conn=94459 op=0 BIND dn="cn=adm_alecle23,ou=administrator,ou=security,o=oxylane" mech=SIMPLE ssf=0
Jan 5 15:06:25 clawma01 slapd[4363]: conn=94459 op=0 RESULT tag=97 err=0 text=
When I try to change a password for a standard user, I get this error message.
Jan 5 15:06:43 clawma01 slapd[4363]: conn=94459 op=12 MOD dn="uid=o2alecle23,ou=o2,ou=people,o=oxylane"
Jan 5 15:06:43 clawma01 slapd[4363]: conn=94459 op=12 MOD attr=userPassword
Jan 5 15:06:43 clawma01 slapd[4363]: conn=94459 op=12 RESULT tag=103 err=50 text=User alteration of password is not allowed
Here is the password policy used for this user
dn: cn=userDefault,ou=policy,ou=security,o=oxylane
objectClass: top
objectClass: pwdPolicy
objectClass: person
cn: userDefault
pwdAllowUserChange: TRUE
pwdAttribute: userPassword
pwdCheckQuality: 1
pwdExpireWarning: 432000
pwdFailureCountInterval: 1800
pwdGraceAuthNLimit: 0
pwdInHistory: 10
pwdLockout: TRUE
pwdLockoutDuration: 0
pwdMaxAge: 2764800
pwdMaxFailure: 15
pwdMinAge: 172800
pwdMinLength: 6
pwdMustChange: FALSE
sn: default_user
Could I change password for an user with an other account instead of rootdn?
How can I allow admin user to change password of standard user?
Regards,
Thomas
openldap-technical@openldap.org