Tell me more ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.
up vote 0 down vote favorite

I can connect with a user who has permissions to set passwords. I'm able to change attributes, but I can't set the password.

Found some instructions to set the attribute unicodePwd to \UNC:"password", but it says:

Error: Modify: Unwilling To Perform. <53>

Setting LDAP_OPT_ENCRYPT to 1 didn't work either. The port I'm using is 389.

Note: this is a repost of a question from stackoverflow, so please go and vote to close the original.

share|improve this question
Is there some reason you're trying to reset a password in such an exotic manner? Why not use the AD Users & Computers console? – ThatGraemeGuy Jun 1 '09 at 21:27

3 Answers

up vote 1 down vote accepted

You would use the userPassword attribute. Why are you using port 389, though? You wouldn't want to send a password change in clear text. I also don't believe AD will allow you to change a password via LDAP without an SSL connection.

share|improve this answer
up vote 1 down vote

I believe you should be using the userpassword attribute rather than the unicodePWD attribute. UserPassword is a writeable alias for unicodePWD.

share|improve this answer
up vote 1 down vote

Sam Cogan is correct. Use the other attribute. Here's a technet article describing how to do it.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.