Design document

Web app for account management and password recovery.

Modes of operation

• as a service, (password recovery tool), authenticated to IPA as a service (with password change rights) via a Kerberos ticket.
• as account management, authenticated to IPA as the user who logs in.

User login methods

Reference issue for discussion #9 (closed).

• Initial: username and password
• Kerberos?
• SSO?

Functionality

• Password recovery
• Password change
• Simple account inspection