Self-host pwm

PWM (Password Management Servlets) is an open-source web application that lets users manage their own LDAP directory credentials. Through a browser interface, people can change passwords, recover forgotten ones, unlock locked accounts, create new accounts, and look up colleagues. It works with Microsoft Active Directory, NetIQ eDirectory, 389 Directory Server, OpenLDAP, and generic LDAP. The system offers more than 500 settings, strong password rules with dictionary checks and regex, multi-factor options like TOTP and SMS, and single sign-on via CAS, OAuth, Basic Auth, or HTTP headers. You can run it as a Docker container, a WAR file on Tomcat, or a standalone JAR with Tomcat built in. It defaults to HTTPS on port 8443 and needs Java 11 through 17. All configuration lives in one exportable file managed through a web console.