Table 6.2 1. SASL Options
Option Description
-o Specifies SASL options. T he format is -o
saslOption=value. saslOption can have one of six
values:
mech, the SASL authentication mechanism
authid, the user who is binding to the server
(Kerberos principal)
authzid, a proxy authorization (ignored by the
server since proxy authorization is not
supported)
secProp, the security properties
realm, the Kerberos realm
flags
The expected values depend on the supported
mechanism. T he -o can be used multiple times to
pass all of the required SASL information for the
mechanism. For example:
-o "m ech=DIGEST-MD5" -o
"authzid=test_user" -o
"authid=test_user"
See SASL Options for ldapsearch for information on how to use SASL options with ldappasswd.
Exa mples
The following examples provide show how to perform various tasks using the ldappasswd command.
Exa mple 6.1. Directory Manager Changing a User's Password Over SSL
The Directory Manager changes the password of the user
uid=tuser1,ou=People,dc=exam ple,dc=com to new_password over SSL.
ldappasswd -Z -h myhost -P /etc/dirsrv/slapd-instance_name/cert8.db -D
"cn=Directory Manager" -w admpassword -s new_password
"uid=tuser1,ou=People,dc=example,dc=com"
Exa mple 6.2. Directory Manager Generat ing a User's Password
The Directory Manager generates the password of the user
uid=tuser2,ou=People,dc=exam ple,dc=com over SSL.
ldappasswd -Z -h myhost -P /etc/dirsrv/slapd-instance_name/cert8.db -D
"cn=Directory Manager" -w admpassword "uid=tuser2,ou=People,dc=exam ple,dc=com"
NOTE
For more information on newly-generated passwords, see the "Managing the Password Policy"
section of the Directory Server Administrator's Guide.
Exa mple 6.3. User Changing His Own Password
A user, tuser3, changes the password from old_newpassword to new_password over SSL.
ldappasswd -Z -h myhost -P /etc/dirsrv/slapd-instance_name/cert8.db -D
"uid=tuser3,ou=People,dc=example,dc=com"
-w old_password -a old_password -s new_password
Comentários a estes Manuais