Specifications

Chapter 6 Managing User Authentication 73
If you change the password of an account whose password type is Open Directory and
the account resides in the LDAP directory of an Open Directory replica or master, the
change will eventually be synchronized with the master and all its replicas. Mac OS X
Server automatically synchronizes changes to Open Directory passwords among a
master and its replicas.
Resetting the Passwords of Multiple Users
You can use Workgroup Manager to simultaneously select multiple user accounts and
change them all to have the same password type and the same temporary password.
To change the password type and password of multiple user accounts:
1 In Workgroup Manager, click the Accounts button, then click the User button.
2 Open the directory domain that contains the user account whose password types and
passwords you want to reset, and authenticate as an administrator of the domain.
To open a directory domain, click the small globe icon above the list of users and
choose from the pop-up menu.
If you want to set the password type to be Open Directory, you must authenticate as
an administrator whose password type is Open Directory.
3 Command-click or Shift-click user accounts to select all accounts whose password type
needs to be changed.
4 Enter a password on the Basic pane, then set the User Password Type option on the
Advanced pane.
5 Click Save.
6 Tell the users the temporary password so they can log in.
After logging in with the temporary password, a user can change the password by
clicking Accounts in System Preferences.
If you change the password of accounts whose password type is Open Directory and
the accounts reside in the LDAP directory of an Open Directory replica or master, the
change will eventually be synchronized with the master and all its replicas. Mac OS X
Server automatically synchronizes changes to Open Directory passwords among a
master and its replicas.
LL2352.Book Page 73 Friday, August 22, 2003 3:12 PM