Block password reset for admin user

larrabee / freeipa-password-reset

Self-service password reset app for FreeIPA

GNU General Public License v3.0

88 stars 30 forks source link

Closed AltiUP closed 4 years ago

AltiUP commented 4 years ago

Is it possible to block the password reset for the admin user?

Chris.

larrabee commented 4 years ago

Hello. By default the app cannot update password of admin users (members of group "admins").

Default RBAC permission System: Change User password have filter: (!(memberOf=cn=admins,cn=groups,cn=accounts,dc=ultimate-guitar,dc=com))

AltiUP commented 4 years ago

Hi,

Thank you! I didn't pay attention to that rule.

Chris