Red Hat 8.1, Command Reference Manual

Page: 284 / 372

Chapter 6. Command-Line Utilities
270
ldappasswd -Z -h myhost -P /etc/dirsrv/slapd- instance_name /cert8.db -D "cn=Directory Manager"
-w admpassword -s new_password "uid=tuser1,ou=People,dc=example,dc=com"
Example 6.1. Directory Manager Changing a User's Password Over SSL
The Directory Manager generates the password of the user
uid=tuser2,ou=People,dc=example,dc=com
over SSL.
ldappasswd -Z -h myhost -P /etc/dirsrv/slapd- instance_name /cert8.db -D "cn=Directory Manager"
-w admpassword "uid=tuser2,ou=People,dc=example,dc=com"
Example 6.2. Directory Manager Generating a User's Password
NOTE
For more information on newly-generated passwords, see the "Managing the Password
Policy" section of the
Directory Server Administrator's Guide
.
A user,
tuser3
, changes the password from
old_newpassword
to
new_password
over SSL.
ldappasswd -Z -h myhost -P /etc/dirsrv/slapd- instance_name /cert8.db -D
"uid=tuser3,ou=People,dc=example,dc=com"
-w old_password -a old_password -s new_password
Example 6.3. User Changing His Own Password
A user,
tuser4
, authenticates with the user certificate and changes the password to
new_password
over SSL.
ldappasswd -Z -h myhost -P /etc/dirsrv/slapd- instance_name /cert8.db -W dbpassword -N
"uid=tuser4"
-K /etc/dirsrv/slapd-
instance_name /key3.db -s new_password
Example 6.4. User Authenticating With a User Certificate and Changing His Password
A user,
tuser5
, authenticates with
DIGEST-MD5
and changes the password to
new_password
.
ldappasswd -h myhost -o “mech=DIGEST-MD5” -o
“authid=dn:uid=tuser5,ou=People,dc=example,dc=com”
-w old_password -s new_password
Example 6.5. User Authenticating with DIGEST_MD5 and Changing His Password
A user, who has already authenticated by Kerberos, prompts for the new password. This is not
performed over SSL.
ldappasswd -h myhost -o "mech=GSSAPI" -S
Example 6.6. User Already Authenticating by Kerberos Prompts for a New Password