From 8a2e6e7873cb10effe81cbc8c0bbc887beee9100 Mon Sep 17 00:00:00 2001
From: Mark Craig <mark.craig@forgerock.com>
Date: Thu, 22 Mar 2012 08:28:37 +0000
Subject: [PATCH] Tip on password reset vs. password change

---
 opendj3/src/main/docbkx/admin-guide/chap-ldap-operations.xml |   12 ++++++++++--
 1 files changed, 10 insertions(+), 2 deletions(-)

diff --git a/opendj3/src/main/docbkx/admin-guide/chap-ldap-operations.xml b/opendj3/src/main/docbkx/admin-guide/chap-ldap-operations.xml
index eb2662a..10b80f3 100644
--- a/opendj3/src/main/docbkx/admin-guide/chap-ldap-operations.xml
+++ b/opendj3/src/main/docbkx/admin-guide/chap-ldap-operations.xml
@@ -35,8 +35,7 @@
  command-line tools for performing LDAP operations. This chapter demonstrates
  how to use the command line tools to script LDAP operations.</para>
  
- <!-- TODO: search, compare, add, modify, modifyDN, delete, but also authrate,
- searchrate, modrate, and ldappasswordmodify, who am I?, cancel -->
+ <!-- TODO: who am I?, cancel -->
  
  <section xml:id="search-ldap">
   <title>Searching the Directory</title>
@@ -906,6 +905,15 @@
  --newPassword ChangeMe
 The LDAP password modify operation was successful</screen>
 
+   <tip>
+    <para>Whenever one user changes another user's password, OpenDJ considers
+    it a password reset. That often means the user has to change her password
+    again after the reset.</para>
+    <para>If you want your application to change a user's password, rather
+    than reset a user's password, have your application request the password
+    change as the user whose password is changing.</para>
+   </tip>
+
    <para>You could also accomplish password reset with the following command,
    but <command>set-password-is-reset</command> is a hidden option, supported
    only for testing.</para>

--
Gitblit v1.10.0