[Kroupware] How to change the manager password?

[Dieter Kluenter]

Hi,

Wim Bakker <wim at unetix.nl> writes:

> On Tuesday 08 July 2003 19:42, Stephan Buys wrote:
>> Hi Wim,
>>
>> You need to change the password of the manager object in Kolab.
>> This can be done easily with something like GC or Ldapbrowser.
>>
>> Regards,
>> Stephan
>>
>
> Hai,
>
> ldapbrowser doesn't exist , but ldapsearch does however
> just as ldappasswd but that gives me the following error:
> ---------------------
> ldappasswd  -A manager
> Old password:
> Re-enter old password:
> Result: Strong(er) authentication required (8)
> Additional info: only authenticated users may change passwords


ldappasswd -x -D "cn=manager,dc=<yourbasedn> -W -A cn=<full dn>
same with ldapsearch or ldapadd.
Just to give you an example for my personal entry

ldappasswd -x -D "cn=manager,dc=orange,dc=l4b,dc=de" -W -A \n
"cn=dieter at l4b.de,dc=orange,dc=l4b,dc=de" 

-x is the flag for a simple bind
-D is the flag for the bind DN
-W is the flag for request for password
-A is the flag for old password

while cb=dieter at l4b.de is the entry which password hase to be changed.

> So it seems I'm stuck with recompiling everything , deleting the
> whole kolab tree and choosing a password that hopefully doesn't
> generate errors in the scripts from kolab.

if ldappasswd doesn't work for some reason, try to delete the entry
with ldapdelete (same syntax), write a *.ldif file and add the entry
with ldapadd. 

An other way would be to dump your database,
1. rc.openldap stop
2. slapcat -f /kolab/etc/openldap/slapd.conf -l /tmp/my_first.ldif
3. edit the file to your requirements
   The best way to create a ldappassword is by means of slappasswd, just
   cut 'n paste the encrypted password into the *.ldif file.
4. destroy your database files underneath
   /kolab/var/openldap/openldap-data
5. load your *.ldif file, using slapadd
   slapadd -x -D "cn=manager,dc=<your basedn>" -W -f
   /kolab/etc/openldap/slapd.conf -l /tmp/my_first_changed.ldif
6. rc.openldap start

Be happy :-)

-Dieter 


-- 
Dieter Kluenter  | Systemberatung
Tel:040.64861967 | Fax: 040.64891521
mailto: dkluenter(at)dkluenter.de
http://www.avci.de