[Freeipa-users] Setting a new directory manager password

[Dmitri Pal]

On 03/26/2012 05:28 PM, Steven Jones wrote:
> Hi,
>
> Our policy is to have the security manager hold the top most password of AD. There is a requirement that we do the same thing for IPA if possible/practical.
>
> So, is there any reason apart from resetting the admin password or replication that I would ever need this password in a day to day context?

As long as you create other administrative accounts and define their
permissions as more confined you do not need to use this admin account
other than to perform operations on itself. All other functions can be
delegated except the DM password of the underlying DS that should be
used only if you need to do some low level DS operations in case
something went wrong.

> If not, how would I re-write/change the password?
>
> regards
>
> Steven Jones
>
> Technical Specialist - Linux RHCE
>
> Victoria University, Wellington, NZ
>
> 0064 4 463 6272
>
> _______________________________________________
> Freeipa-users mailing list
> Freeipa-users at redhat.com
> https://www.redhat.com/mailman/listinfo/freeipa-users


-- 
Thank you,
Dmitri Pal

Sr. Engineering Manager IPA project,
Red Hat Inc.


-------------------------------
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/