<html><body><div style="color:#000; background-color:#fff; font-family:times new roman, new york, times, serif;font-size:12pt"><div><span>I've coded it with python-kerberos and it works. Pretty rough though.</span></div><div><span><br></span></div><div><span>--Gelen.</span></div><div><br></div> <div style="font-size: 12pt; font-family: 'times new roman', 'new york', times, serif; "> <div style="font-size: 12pt; font-family: 'times new roman', 'new york', times, serif; "> <div dir="ltr"> <font size="2" face="Arial"> <hr size="1"> <b><span style="font-weight:bold;">From:</span></b> Gelen James <hahaha_30k@yahoo.com><br> <b><span style="font-weight: bold;">To:</span></b> "freeipa-devel@redhat.com" <freeipa-devel@redhat.com> <br> <b><span style="font-weight: bold;">Sent:</span></b> Sunday, May 20, 2012 2:22 AM<br> <b><span style="font-weight: bold;">Subject:</span></b> Feature request: Web UI for IPA users to reset their own expired passwords<br> </font> </div> <br> <div id="yiv138539915"><div><div style="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); font-size: 12pt; font-family: 'times new roman', 'new york', times, serif; "><div>The currently assumption is that all IPA users can login into Unix/Linux machines to change their IPA password, or reset their expired password. </div><div><br></div><div> But this is not available all the time, so a more general alternative -- web UI -- will be more appreciated. The basic requirements are:</div><div><br></div><div> 1, The web UI accept user's passwords, expired is also accepted.</div><div> </div><div> 2, the authentication is based on IPA Kerberos.</div><div><br></div><div> 3, authenticated regular IPA user can only reset his/her password only.</div><div><br></div><div> 4, (bonus) authenticated admin users can alter other users' password as well.</div><div><br></div><div><br></div><div>Thanks.</div><div><br></div><div>--Gelen</div><div><br></div><div><br></div></div></div></div><br><br> </div> </div> </div></body></html>