[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Can't change "access account" flag in WGM

Subject: Re: Can't change "access account" flag in WGM
From: Rob Middleton <email@hidden>
Date: Mon, 30 Jan 2006 12:18:18 +1100
Delivered-to: email@hidden
Delivered-to: email@hidden
User-agent: Thunderbird 1.4 (Macintosh/20050908)

Ben Lewis wrote:

Fresh install of 10.4.4 Server, imported users from 10.3.9 Server. All is
working well, Open Directory, AFP, firewall, all are working fine, however,
I can't edit the "access account" checkbox for any of the users in the
directory.

Whenever I try to disable access for a user, or change this checkbox at all
and click "Save" - the changes don't take effect. I can modify all other
aspects of the account.

Tried authenticating as directory administrator, system administrator, etc.

Any ideas?

I have a feeling it has something to do with kerberos, but who knows.

Thanks,

Ben

I would worry that even unticking the "access account" box won't fully disable a user. Presumably this just sets or unsets a flag in LDAP. What about a service that just checks the user's password but doesn't check any user information -- it would presume the account is enabled if it can verify the password.

To disable use of an account you need to lock the password (ensure the use of the valid user password always fails). Of course locking an account this way will mean things like email can continue to be delivered to that user account - that user just can't check it.

To lock a user account in this way via WGM -- "Advanced" tab, User Password Type - "Options..." - untick "Allow the user to log in".

Rob.
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Macos-x-server mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/macos-x-server/email@hidden

This email sent to email@hidden

Follow-Ups:
- Re: Can't change "access account" flag in WGM
  - From: Nigel Kersten <email@hidden>

References:
	>Can't change "access account" flag in WGM (From: Ben Lewis <email@hidden>)

Prev by Date: Re: Energy Saver Schedule for backup Server
Next by Date: Mail (Postfix, Sieve, Cyrus)
Previous by thread: Re: Can't change "access account" flag in WGM
Next by thread: Re: Can't change "access account" flag in WGM
Index(es):
- Date
- Thread

Home