Allowing Users to Administer Their Passwords -- Or Not

Novell Cool Solutions: Tip

Digg This - Slashdot This Posted: 4 Sep 2002

Here's a forum poster with a question about allowing users to manage their passwords in a specific tree but not another. If this is something you've tried to do (or would like to), here's the secret.

The Question
My company wants to avoid having users change their own passwords in the CORP_TREE. But we would like to allow them to make password changes in our WORKFORCE_TREE. I've seen this setup before, but don't recall the setup required in the rights and trustees stuff. Any ideas?

The Answer
It's an attribute on the user object:

NDS: Password Allow Change
LDAP: passwordAllowChange

Set it to TRUE or FALSE as needed.

You can get more details about this attribute in Novell's Developer documentation at: http://developer.novell.com/ndk/doc/ndslib/index.html?schm_enu/data/sdk4734.html

Novell Cool Solutions (corporate web communities) are produced by WebWise Solutions. www.webwiseone.com