Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I'm planning on setting up centralized authentication for a Samba file server, a VPN, Radius and Postfix using either LDAP or Kerberos. These services are going to be accessed by Windows clients.

As far as I can tell, this is very do-able, but I'm missing one piece of the puzzle. How will non-technical Windows users change their password?

Is there a gui (web-based?) way to give users the ability to change their LDAP or Kerberos password on a Linux server from their Windows laptops?

share|improve this question
add comment

1 Answer

up vote 0 down vote accepted

When you have set up everything correctly, they can do this from the Windows password change dialog you can get when pressing Ctrl+Alt+Del.

The key configuration variable in smb.conf is passwd chat, but also take a look at pam password change and ldap passwd sync.

share|improve this answer
    
Thanks, I assume the clients will need to be part of a Samba domain as opposed to being remaining in a workgroup? –  Pyzo Aug 16 '11 at 18:11
    
@Pyzo Correct, this will only work for domain machines. –  84104 Aug 16 '11 at 18:15
    
@Pyzo: If you need to have a password change method for non-domain users, you will indeed need another tool. Beside web tools like Usermin, you could use a Windows frontend to kpasswd if you use Kerberos with Samba or write a small tool that changes the SMB and LDAP password when using LDAP (this will require write access to the relevant attributes for your LDAP users). –  SvW Aug 16 '11 at 19:56
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.