<html><body><div style="color:#000; background-color:#fff; font-family:times new roman, new york, times, serif;font-size:12pt"><div><span>No problem.</span></div><div><span><br></span></div><div>The code is attached. It is just one python script, with configuration items on the top.</div><div><br></div><div> Please be reminded that this code is pretty rough and not well-tested as I can not find appropriate documents on how to use python kerberos module.</div><div><br></div><div> Disclaim: This piece of code just works as a prototype, it is not well-tested, nor DOS attack prove at all, so it could potentially harm or totally destroy someone's authentication system. :(</div><div><br></div><div>Thanks.</div><div><br></div><div>--Gelen</div><div><br></div><div><br></div> <div style="font-size: 12pt; font-family: 'times new roman', 'new york', times, serif; "> <div style="font-size: 12pt; font-family: 'times new roman', 'new york', times, serif; "> <div dir="ltr"> <font size="2" face="Arial"> <hr size="1"> <b><span style="font-weight:bold;">From:</span></b> Rob Crittenden <rcritten@redhat.com><br> <b><span style="font-weight: bold;">To:</span></b> Gelen James <hahaha_30k@yahoo.com> <br><b><span style="font-weight: bold;">Cc:</span></b> "freeipa-devel@redhat.com" <freeipa-devel@redhat.com>; "freeipa-users@redhat.com" <freeipa-users@redhat.com> <br> <b><span style="font-weight: bold;">Sent:</span></b> Wednesday, May 23, 2012 12:14 PM<br> <b><span style="font-weight: bold;">Subject:</span></b> Re: [Freeipa-devel] I've done it by myself and it works -- Re: Feature request: Web UI for IPA users to reset their own expired passwords<br> </font> </div> <br> Gelen James wrote:<br>> I've coded it with python-kerberos and it works. Pretty rough though.<br><br>Is this something you'd be interested in contributing?<br><br>rob<br><br>><br>> --Gelen.<br>><br>> ------------------------------------------------------------------------<br>> *From:* Gelen James <<a ymailto="mailto:hahaha_30k@yahoo.com" href="mailto:hahaha_30k@yahoo.com">hahaha_30k@yahoo.com</a>><br>> *To:* "<a ymailto="mailto:freeipa-devel@redhat.com" href="mailto:freeipa-devel@redhat.com">freeipa-devel@redhat.com</a>" <<a ymailto="mailto:freeipa-devel@redhat.com" href="mailto:freeipa-devel@redhat.com">freeipa-devel@redhat.com</a>><br>> *Sent:* Sunday, May 20, 2012 2:22 AM<br>> *Subject:* Feature request: Web UI for IPA users to reset their own<br>> expired passwords<br>><br>> The currently assumption is that all IPA users can login into Unix/Linux<br>> machines to change their IPA password, or reset their expired password.<br>><br>> But this is not available all the time, so a more general alternative --<br>> web UI -- will be more appreciated. The basic requirements are:<br>><br>> 1, The web UI accept user's passwords, expired is also accepted.<br>> 2, the authentication is based on IPA Kerberos.<br>><br>> 3, authenticated regular IPA user can only reset his/her password only.<br>><br>> 4, (bonus) authenticated admin users can alter other users' password as<br>> well.<br>><br>><br>> Thanks.<br>><br>> --Gelen<br>><br>><br>><br>><br>><br>><br>> _______________________________________________<br>> Freeipa-devel mailing list<br>> <a ymailto="mailto:Freeipa-devel@redhat.com" href="mailto:Freeipa-devel@redhat.com">Freeipa-devel@redhat.com</a><br>> <a href="https://www.redhat.com/mailman/listinfo/freeipa-devel" target="_blank">https://www.redhat.com/mailman/listinfo/freeipa-devel</a><br><br><br><br> </div> </div> </div></body></html>