-
Notifications
You must be signed in to change notification settings - Fork 325
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Question about delegation of control #442
Comments
Okay, I think this makes more sense if you read it as "Create a custom task to delegate" acting on "User objects". However, that seems to still be insufficient permissions to change a user's password when "User must change password at next logon" is checked in AD.
And:
is displayed. Perhaps rights to change password must be given as well? |
No that still seems insufficient. |
I do not have enough AD skills to answer you. If you think the documentation should be updated, please modify https://github.com/ltb-project/self-service-password/blob/master/docs/config_ldap.rst and propose a pull request |
The active directory documentation states:
I don't follow this. On my 2012 AD server when I go through the wizard I get:
So I don't follow what "User Object", "Write lockoutTime", and "Write shadowlastchange" refer to exactly. Thanks for any help.
The text was updated successfully, but these errors were encountered: