<html><head><style type='text/css'>p { margin: 0; }</style></head><body><div style='font-family: Times New Roman; font-size: 12pt; color: #000000'>Yes, the password change box does appear when I login as 'root'. I am able to set passwords for local users as the 'root' user. <br><br>Interesting though, when I login to RT as myself via LDAP with 'SuperUser' rights, I do not see the password boxes for any users other than myself. So, I went ahead and entered a password for my account and made it that same as my LDAP retrieved password. Now, I can see password boxes for all of my users and can make changes to their passwords. Which is what I want. <br><br>But, can someone explain the logic of the credentials checking process that is followed here? Is RT using my LDAP retrieved password or is it using an internal password in this process? If I change my password internal to RT and make it different than my LDAP retrieved password they both work and appear to be the same user. So it seems that a user's account, if it is external, can have and external and internal password. <br><span><br><br><span name="x"></span>Kurt Engle<br><br><span name="x"></span><br></span><br><hr id="zwchr"><b>From: </b>"Kevin Falcone" <falcone@bestpractical.com><br><b>To: </b>rt-users@lists.bestpractical.com<br><b>Sent: </b>Wednesday, January 12, 2011 3:11:45 PM<br><b>Subject: </b>Re: [rt-users] Set User Password<br><br>On Wed, Jan 12, 2011 at 04:58:02PM -0600, John Alberts wrote:<br>> On Wed, 12 Jan 2011 13:16:51 -0800 (PST)<br>> Kurt Engle <engle@4j.lane.edu> wrote:<br>> <br>> > I am wanting to use the Internal RT user database as well as an<br>> > External LDAP database for user authentication.<br>> <br>> The only way I've found to do this is to temporarily disable LDAP auth,<br>> add the users I want and set their password, and then re-enable LDAP<br>> auth. One side effect, if the user you added does exist in LDAP, the<br>> user can use either the LDAP password or the password you gave them to<br>> login.<br>> <br>> Not sure if there is a better way to do this, but I couldn't find any<br>> 'official' way to layer authentication and I only need to add a couple<br>> special users for automation purposes, so what I did worked for me.<br><br>RT-Authen-ExternalAuth hides the password boxes using css if the<br>current user doesn't have a password, since it can't ask you to type<br>in your password before changing the user's password. Does it work if<br>you're logged in as the root user?<br><br>-kevin<br></div></body></html>