[389-users] Re: ds-privilege-name equivalent

On Wed, 2018-08-22 at 12:41 +0200, rainer@ultra-secure.de wrote:
> Hi,
>
> I have a few users in my open-ds dump that have the following
> attribute:
>
> ds-privilege-name: password-reset
>
>
> Does something like this exist in 389-server or is it done purely on
> an
> ACI level?

If I recall correctly, if you have the write targetattr userPassword,
you can reset someone's password. I think this is a good example where
we need to document this better as password reset is a common
requriement.

I've CCed on our documentation wizard who may know where this is found,
or where it should be added.

Thanks!


>
>
>
> Best Regards
> Rainer
> _______________________________________________
> 389-users mailing list -- 389-users@lists.fedoraproject.org
> To unsubscribe send an email to
> 389-users-leave@lists.fedoraproject.org
> Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> List Guidelines:
> https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org/message/7KOM6VWJJZ6LEAARCSTZUHIUMQF6K55A/
--
Sincerely,

William
_______________________________________________
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org