Page 1 of 1

Disallow change password for a certain SWA-user

Posted: Fri Jul 28, 2006 8:25 am
by vovaodei
Hi!

Following situation: i created a kinda "demo"-account, so any of my user
can login and see how scalix works etc.

But i want to permit them to change the password of this demoaccount from swa -
how can i do it?


Thanks!

Posted: Sat Jul 29, 2006 1:00 pm
by florian
wow, not a simple one.

we currently don't provide per-user password change controls.

However, as we use PAM for authentication, you might want to setup your /var/opt/scalix/sys/pam.d/ual.remote PAM configuration file in such a way that the "password" section uses the Linux standard "pam_listfile" module and denies the password change request, when the listed user tries to do it.

Hope this helps,
Florian.

Posted: Mon Jul 31, 2006 8:16 am
by vovaodei
Thanks!

It worked!

Posted: Wed Aug 02, 2006 11:27 am
by florian
Would you be willing to document this in detail for the benefit of the community? at best, please add it to the playground part of the scalix wiki (www.scalix.com/wiki) and i'll link it in as a contributed how-to thereafter.

Thanks! :-)

-- f.

Posted: Thu Aug 03, 2006 4:26 am
by vovaodei
sure :-)

per-user deny password change

Posted: Thu Oct 12, 2006 5:28 am
by spoiledmcse
I don't suppose you could paste the change to /var/opt/scalix/sys/pam.d in here, I've got the exact same requirement from a client to deny certain users permission to change passwords.

Thanks in advance!