external LDAP, password change

[zaf]

I've got ZCS configured to authenticate against Fedora Directory Server and it works really well. However, when a user changes his password in the web ui, it doesn't change on the directory server. Is there a way to fix this? Or if not, is there a way to hide the change password button to keep from confusing the user?
Thanks!

[KevinH]

No way to fix this, but seems we should have a COS option to remove the change password functionality optionally when external auth is enabled.

Can you file that into bugzilla?

[zaf]

Originally Posted by KevinH

No way to fix this, but seems we should have a COS option to remove the change password functionality optionally when external auth is enabled.

Can you file that into bugzilla?

Thanks, Kevin. The bug has been submitted. I would really like to see ZCS fixed so that the users could change their LDAP passwords from the web application, though.

I did find the option to remove the 'change password' button, so that will work well for now.

[bjared]

Originally Posted by zaf

Thanks, Kevin. The bug has been submitted. I would really like to see ZCS fixed so that the users could change their LDAP passwords from the web application, though.

I did find the option to remove the 'change password' button, so that will work well for now.

Zaf, you got a ticket number? I'd like to vote on this bug. We're implimenting an external LDAP server, and ZCS is simply going to be the easiest way for users to update their passwords. (It's a stand-alone openLDAP server, and we don't want to scare them with MULCM or something less user-friendly.)

--Brian

EDIT: Nevermind. I found it. Dang this is an old bug...

[phoenix]

Originally Posted by bjared

EDIT: Nevermind. I found it. Dang this is an old bug...

This is an old thread.

[jayso]

What about just replicating the password from OpenLDAP to Fedora Directory Server? Is that a possibility? I have thought about this for a while and this seems to be the simplest fix.
Of course, then you would also have to have the other replication agreement from FDS to OLDAP. It seems do-able in my book, I just need to get zimbra up and running for a test to get this going..

(This issue is my one show stopper atm, if it weren't for this I would have the licenses paid for)

[mrdebian]

Anyone know if this feature is been implemented in the current version of Zimbra open source edition?

[phoenix]

Originally Posted by mrdebian

Anyone know if this feature is been implemented in the current version of Zimbra open source edition?

You should search bugzilla for the bug tht relates to this problem, there is also a couple of threads in the forums that have scripts that will synchronise passwords between AD (or an LDAP server) and Zimbra.