I'm fairly inexperienced with LDAP and DSEE so to build my skills I installed directory server in the global zone of my Sol 10/u7 machine and created a zone to use as a client. For some reason when I try to change a users password as root (in the client zone) with passwd -r ldap I am prompted for that user's password. Is there anyway to configure DSEE to allow root on LDAP clients to change passwords without knowing the users password?
Hi,
actually, I would be interested in a solution to this problem too ...
I think the way root is treated depends on the implementation of the LDAP client. For example, in AIX root stays root for LDAP passwd. (prompts for the old password, but accepts a simple <enter>)
On HP-UX boxes, root is treated as normal user who has to supply the old password of the user he wants to change.
Solaris seems to handle a lot of this stuff similar to HP-UX.
If somebody here knows better, please tell us so.