[Freeipa-users] Mail Challenge Password Reset

[Simo Sorce]

On Wed, 2013-03-20 at 19:35 -0500, KodaK wrote:
> On Wed, Mar 20, 2013 at 6:23 PM, Michael ORourke
> <mrorourke at earthlink.net> wrote:
> > We have a POC with PWM and a testIPA server running freeIPA v2.2.0.
> > It is working very well and we plan to move it into production soon.
> > I haven't written a how-to, but I have several notes on setting this up.
> > What part of PWM are you having trouble with?
> 
> It's been a while, but IIRC when a user would request a reset via pwm
> and then set their password, it would require a further change because
> changing it through PWM was as-if an admin had done so.

You should have given the pwm user 'password sync' privileges.
See this: http://www.freeipa.org/page/PasswordSynchronization

>   Something
> like that.  Like I said, I didn't test that long with it.  Like Dmitri
> said, if you could share your notes or write up a how-to the community
> would certainly appreciate it.

It would be very nice.

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York