OpenLDAP auth - restrict password change?

[billb3]

Hi All,

I'm using omldapsync for user management and having my users authenticate against OpenLDAP. I want to prevent them from using the Scalix Change Password dialogs in SWA & Outlook. Is there an easy way to do this?

--Bill

[billb3]

Right now my workaround is to set a ridiculously high(99) minimum password length...but if I could gray-out/disable the change password button...that would be ideal.

[stephan.klein]

Hi,

you can disable the scalix side 'change password' option by this line in swa.properties:

Code: Select all

swa.system.hasChangePassword=false


In addition, you can add a custom line in the swa menu to point your users to a site where they can change their ldap password. For example

Code: Select all

swa.url.1.url=https://change-password.DOMAIN.de


Regards
Stephan

[billb3]

Just what I was looking for, thanks Stephan!

Anyone know if there is an equivalent with Scalix Connect for Outlook?

[florian]

there is not; what we would rather recommend is that you enable your openldap password to be changed through scalix; you will have to use pam_ldap instead of om_ldap for this to work, but the Scalix Wiki describes how that is done.

Florian.