[LON-CAPA-admin] [was LON-CAPA-users] mass resetting internal aauth passwords

[Todd Ruskell]

Jim,

When I converted to LDAP authentication the "Change Password" option was 
removed.  That means I have to use the officially sanctioned LDAP password 
changer to do that.  Personally, I see that as a plus, since most students 
know how to change their email password, which on our campus equates to 
changing the password on the LDAP server.  

Todd

On Friday 15 September 2006 01:40 am, Jim Maxka wrote:
> While this topic is open, maybe someone can help me with this
> hypothetical situation -- which has never happened as far as I know.
>
> We use ldap authentication and so there should not be internal passwords
> in the loncapa system for the students.  What happens if a student
> changes the password in Change Preferences.  Does this become the
> student's internal password?  If this were to happen and the student
> forgot the password, would this have to be reset to local authentication?
>
> Just wondering -- Jim
>
> Lars Jensen wrote:
> > Hi Gerd and Ray,
> >
> > What's really needed is a service by which students can enter a
> > registered email address and get a new password, so instructors/DC's
> > doesn't have to be involved. I realize tha tnot all students
> > necessarily have a registered email with lon-capa, but whenever it
> > exists, it ought to be possible to get a new password via email.
> >
> > Lars.
> >
> > Gerd Kortemeyer wrote:
> >> Hi,
> >>
> >>> On Thu, 14 Sep 2006, Ray Batchelor wrote:
> >>>>     How can one quickly reset the passwords for a bunch of internally
> >>>> authenticated students in a hosted course??  Course coordinators
> >>>> can't reset
> >>>> passwords, it seems to me.
> >>
> >> On Sep 14, 2006, at 8:05 PM, lucasm at ohiou.edu wrote:
> >>> Have fun, Ray. This is a domain coordinator only ability as far as I
> >>> know.
> >>
> >> Yep. At some point, I would like to add the functionality that if a
> >> domain coordinator impersonates a course coordinator, they can upload
> >> class lists and overwrite the password. I have spend longer than I
> >> care to admit resetting passwords one-by-one by hand.
> >>
> >>> I have considered writing a script to do this, but I'm not sure this
> >>> is sanctioned behavior for root!
> >>
> >> A script is the way to go for now, I think. The file is
> >>
> >> /home/httpd/lonUsers/(your_domain)/(first)/(second)/(third)/(username)/p
> >>assword
> >>
> >>
> >> for example
> >>
> >> /home/httpd/lonUsers/msu/k/o/r/kortemey/password
> >>
> >> For internally authenticated, it looks like this:
> >>
> >> internal:3XbDe45Bh
> >>
> >> where the latter is the encrypted password.
> >>
> >> Reset one password by hand, and copy that file to the rest of the
> >> users. Somebody probably already has a script like that ...
> >>
> >> BTW, the reason that course coordinators cannot do this is that the
> >> confusion would be great if a kid is already in some courses, and
> >> then their password gets messed up because they were added to another
> >> course. We didn't want passwords to bounce around like that at the
> >> discretion of just any course coordinator.
> >>
> >> - Gerd.
> >> _______________________________________________
> >> LON-CAPA-admin mailing list
> >> LON-CAPA-admin at mail.lon-capa.org
> >> http://mail.lon-capa.org/mailman/listinfo/lon-capa-admin
> >
> > _______________________________________________
> > LON-CAPA-admin mailing list
> > LON-CAPA-admin at mail.lon-capa.org
> > http://mail.lon-capa.org/mailman/listinfo/lon-capa-admin
>
> _______________________________________________
> LON-CAPA-admin mailing list
> LON-CAPA-admin at mail.lon-capa.org
> http://mail.lon-capa.org/mailman/listinfo/lon-capa-admin

-- 
Dr. Todd Ruskell
Senior Lecturer, Department of Physics       Office:  Meyer Hall 326
Colorado School of Mines                     Phone: 303-384-2080
1523 Illinois Street                         Fax: 303-273-3919
Golden, CO 80401