Editing Users

[Conan Malone]

Hi,

I was wondering how I would go about allowing users to edit their own details under the user tab?  Just now it is saying 'User actions are defined, but this action is not allowed!'.  I have set up a user privileges policy and set the 'update user' to true so not sure why it is not allowing users to update their own information.

I have tried signing in onto a SQLresolver and LDAPresolver and trying this but neither seem to let me.

Also I noticed that under the config for LDAP resolvers it doesn't show the option for 'Edit user store', does this mean that LDAP users will not be able to update their LDAP password from within privacyIDEA or would I need to set up some sort of permissions/roles within my LDAP to allow this?

Thanks,

Conan.

[Cornelius Kölbel]

Am Mittwoch, den 27.01.2016, 01:02 -0800 schrieb Conan Malone:
> Hi,
>
>
> I was wondering how I would go about allowing users to edit their own
> details under the user tab? Just now it is saying 'User actions are
> defined, but this action is not allowed!'. I have set up a user
> privileges policy and set the 'update user' to true so not sure why it
> is not allowing users to update their own information.

Hi,
does this work without any user policy?
How does your policies look like?

> I have tried signing in onto a SQLresolver and LDAPresolver and trying
> this but neither seem to let me.
>
>
> Also I noticed that under the config for LDAP resolvers it doesn't
> show the option for 'Edit user store', does this mean that LDAP users
> will not be able to update their LDAP password from within privacyIDEA
> or would I need to set up some sort of permissions/roles within my
> LDAP to allow this?

The LDAP resolver is not editable. This is simply not implemented since
editing an LDAP is a bit more tricky AND in most cases the roles are
separate roles of the domain admin and the security admin.

Kind regards
Cornelius

>
>
> Thanks,
> Conan.
> --
> For professional services and consultancy regarding two factor
> authentication please visit
> https://netknights.it/en/leistungen/support/
>
> In and enterprise environment you should get a SERVICE LEVEL AGREEMENT
> which suites your needs for SECURITY, AVAILABILITY and LIABILITY:
> https://netknights.it/en/leistungen/service-level-agreements/
> ---
> You received this message because you are subscribed to the Google
> Groups "privacyidea" group.
> To unsubscribe from this group and stop receiving emails from it, send
> an email to privacyidea...@googlegroups.com.
> To post to this group, send email to priva...@googlegroups.com.
> Visit this group at https://groups.google.com/group/privacyidea.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/privacyidea/4a57c587-d920-4fe6-9670-92cfb3db680d%40googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.

--
Cornelius Kölbel
corneliu...@netknights.it
+49 151 2960 1417

NetKnights GmbH
http://www.netknights.it
Landgraf-Karl-Str. 19, 34131 Kassel, Germany
Tel: +49 561 3166797, Fax: +49 561 3166798

Amtsgericht Kassel, HRB 16405
Geschäftsführer: Cornelius Kölbel