pam_authz_search (&(objectClass=maroesjaSystemLoginIdentity)(uid=$username)(|(host=$hostname)(host=$fqdn)(host=\\*)))
# This is needed with nss-pam-ldapd before 0.8.4
-#map group uniqueMember member
+map group uniqueMember member
+
+# When root wants to change the password of an LDAP user, do a bind as this
+# user (the password will be prompted)
+rootpwmoddn cn=admin,dc=tika,dc=stderr,dc=nl