HP UX Identity Security Software Ldif, Example 6-2 Directory Manager generating a users password

Example 6-1 Directory Manager changing a user's password over SSL

The Directory Manager changes the password of the user uid=tuser1,ou=People,dc=example,dc=com to new_password over SSL.

#ldappasswd -Z -h myhost \

-P /etc/opt/dirsrv/slapd-instance_name/cert8.db \ -D "cn=Directory Manager" \

-w dmpassword -s new_password \ "uid=tuser1,ou=People,dc=example,dc=com"

Example 6-2 Directory Manager generating a user's password

The Directory Manager generates the password of the user uid=tuser2,ou=People,dc=example,dc=com over SSL.

#ldappasswd -Z -h myhost \

-P /etc/opt/dirsrv/slapd-instance_name/cert8.db \ -D "cn=Directory Manager" \

-w dmpassword "uid=tuser2,ou=People,dc=example,dc=com"

NOTE:

For more information on newly-generated passwords, see the "Managing the Password Policy" section of the HP-UX Directory Server administrator guide.

Example 6-3 User changing his own password

A user, tuser3, changes the password from old_newpassword to new_password over SSL.

#ldappasswd -Z -h myhost \

-P /etc/opt/dirsrv/slapd-instance_name/cert8.db \ -D "uid=tuser3,pu=People,dc=example,dc=com" \

-w old_password -a old_password -s new_password

Example 6-4 User authenticating with a user certificate and changing his password

A user, tuser4, authenticates with the user certificate and changes the password to new_password over SSL.

#ldappasswd -Z -h myhost \

-P /etc/opt/dirsrv/slapd-instance_name/cert8.db \ -W dbpassword -N "uid=tuser4" \

-K /etc/opt/dirsrv/slapd-instance_name/key3.db -s new_password

Example 6-5 User authenticating with DIGEST_MD5 and changing his password

A user, tuser5, authenticates with DIGEST-MD5and changes the password to new_password.

#ldappasswd -h myhost -o “mech=DIGEST-MD5” \

-o “authid=dn:uid=tuser5,ou=People,dc=example,dc=com” \ -w old_password -s new_password

Example 6-6 User already authenticating by Kerberos prompts for a new password

A user, who has already authenticated by Kerberos, prompts for the new password. This is not performed over SSL.

#ldappasswd -h myhost -o "mech=GSSAPI" -S

6.8ldif

6.8 ldif 211