up vote 0 down vote favorite
share [g+] share [fb]

I'm planning on setting up centralized authentication for a Samba file server, a VPN, Radius and Postfix using either LDAP or Kerberos. These services are going to be accessed by Windows clients.

As far as I can tell, this is very do-able, but I'm missing one piece of the puzzle. How will non-technical Windows users change their password?

Is there a gui (web-based?) way to give users the ability to change their LDAP or Kerberos password on a Linux server from their Windows laptops?

link|improve this question
feedback

1 Answer

up vote 0 down vote accepted

When you have set up everything correctly, they can do this from the Windows password change dialog you can get when pressing Ctrl+Alt+Del.

The key configuration variable in smb.conf is passwd chat, but also take a look at pam password change and ldap passwd sync.

link|improve this answer
Thanks, I assume the clients will need to be part of a Samba domain as opposed to being remaining in a workgroup? – Pyzo Aug 16 '11 at 18:11
@Pyzo Correct, this will only work for domain machines. – 84104 Aug 16 '11 at 18:15
@Pyzo: If you need to have a password change method for non-domain users, you will indeed need another tool. Beside web tools like Usermin, you could use a Windows frontend to kpasswd if you use Kerberos with Samba or write a small tool that changes the SMB and LDAP password when using LDAP (this will require write access to the relevant attributes for your LDAP users). – SvenW Aug 16 '11 at 19:56
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.