From ff039f953043d2c15f1eb44f794a77865ab5a775 Mon Sep 17 00:00:00 2001
From: Mark Felder <feld@feld.me>
Date: Fri, 11 Oct 2024 15:41:08 -0400
Subject: [PATCH] Add example OpenLDAP ldif to enable users to change their own
 passwords

---
 installation/openldap/pw_self_service.ldif | 7 +++++++
 1 file changed, 7 insertions(+)
 create mode 100644 installation/openldap/pw_self_service.ldif

diff --git a/installation/openldap/pw_self_service.ldif b/installation/openldap/pw_self_service.ldif
new file mode 100644
index 0000000000..463dabbfb5
--- /dev/null
+++ b/installation/openldap/pw_self_service.ldif
@@ -0,0 +1,7 @@
+dn: olcDatabase={1}mdb,cn=config
+changetype: modify
+add: olcAccess
+olcAccess: {1}to attrs=userPassword
+  by self write
+  by anonymous auth
+  by * none