I am trying to change the Active Directory (on a Windows 2008 server) from a CentOS 6.2 machine over openLDAP.
I have tried passwd, ldappasswd and trying to see if I can do it with Samba without the use of TSL/SSL/SASL. Is this possible?
It's also very finicky about formatting of the raw LDAP (UTF-16 for the password strings is required), as well as permission enforcement.
For resetting a password (changing it without knowing the old one), the user that bound to LDAP needs to have the "Reset Password" permission on the target user. If you're doing this, you must use the
For changing a password (knowing the old and the new), you don't need to be bound to LDAP as any particular user (assuming that you've left the default permissions in place for "Change Password"). However, you need to send both a
See the documentation for the