LDAP 用户修改自己的密码问题

z6566103

openLDAP 服务器已弄好，用户登录不能够修改自己的密码。。
蛋疼。。。。。

1. Sample access control policy:
   
2. #       Root DSE: allow anyone to read it
   
3. #       Subschema (sub)entry DSE: allow anyone to read it
   
4. #       Other DSEs:
   
5. #               Allow self write access
   
6. #               Allow authenticated users read access
   
7. #               Allow anonymous users to authenticate
   
8. #       Directives needed to implement policy:
   
9. # access to dn.base="" by * read
   
10. # access to dn.base="cn=Subschema" by * read
    
11. [color=Blue]access to *
    
12.         by self write
    
13.         by users read
    
14.         by anonymous auth[/color]
    
15. #
    
16. # if no access controls are present, the default policy
    
17. # allows anyone and everyone to read anything but restricts
    
18. # updates to rootdn.  (e.g., "access to * by * read")
    
19. #
    
20. # rootdn can always read and write EVERYTHING!
    
21. 
    
22. # enable on-the-fly configuration (cn=config)
    

复制代码

到底这个LDAP的ACL是怎么设置的啊！！！！！！！！！！！！！！！！！求大神指导啊！！

jihuasy

/etc/pam.d/system-auth-ac
/etc/pam.d/password-auth-ac
修改这两个文件
使用ldap认证