[Freeipa-users] Kerberos Password change limitation while behind a NAT

[Marc Schlinger]

Le 30/09/2010 18:30, Simo Sorce a écrit :
> You can use ldappasswd too, either with GSSAPI auth or eventually even
> with plaintext auth (require using SSL) in that case though you will
> neeed to know the user DN.
>
> Simo.
>
>    

So  if a user logs in when his password is expired, will pam_ldap in the 
pam password step do the trick ?

I still wonder how ldappasswd can change the kerberos password.

Thanks

Marc.