Are you using SELinux?
On Aug 30, 2018, at 2:39 PM, Andrew Meyer via FreeIPA-users
Has anyone setup the self service password module?
I have it setup and working on tomcat on a seperate server.
If so I have a few questions:
1) did you install this on the freeipa main server or another server?
2) Did you have allow anonymous searching for pwm? I have a user account setup for this
and I was able to test auth but test account doesn't want to work. I'm not sure
why. I'm still looking through the logs.
I have been following this user's suggestions on getting this working:
PWM setup for FreeIPA (with LDAP and MySQL userdata
PWM setup for FreeIPA (with LDAP and MySQL userdata store)
PWM setup for FreeIPA (with LDAP and MySQL userdata store) - 1. PWM-FreeIPA.txt
Obviously not using the MySQL setup but FreeIPA (99pwm.ldif and PWMacis.ldif).
I am running the 99pwm on a test environment and its not allowing me to add the 99pwm.ldif
file. The dirsrv service complains that it can't read the file. But the permissions
[root@freeipa02-dev schema]# pwd
[root@freeipa02-dev schema]# ls -la | grep -i 99pwm
-rw-r-----. 1 dirsrv dirsrv 2036 Aug 30 12:57 99pwm.ldif
FreeIPA-users mailing list --
To unsubscribe send an email to
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
LEGAL DISCLAIMER: M.C. Dean, Inc. and its subsidiaries considers this e-mail and any files
transmitted with it to be protected, proprietary or privileged information intended solely
for the use of the named recipient(s). Any disclosure of this material or the information
contained herein, in whole or in part, to anyone outside of the intended recipient or
affiliates is strictly prohibited. M. C. Dean, Inc. accepts no liability for the content
of this e-mail or for the consequences of any actions taken on the basis of the
information contained in it, unless that information is subsequently confirmed in writing.
Employees of M.C. Dean, Inc. are instructed not to infringe on any rights of the
recipient; any such communication violates company policy. If you are not the intended
recipient, any disclosure, copying, distribution, or action taken or omitted in reliance
on this information is strictly prohibited by M.C. Dean, Inc.; please notify the sender
immediately by return e-mail, delete this communication and destroy all copies.