Home / server / Questions / 180364
Accepted
Tom Wright
Asked: 2010-09-13 06:23:22 +0800 CST

Is there an app/script I can deploy to enable my users to change their own LDAP passwords?

  • 772

I've recently enabled LDAP based authentication on my domain. This has allowed us to use a single set of credentials to administer the blog, the forum and the wiki.

Unfortunately, this has come at the cost of users being able to change their own passwords.

Ideally, users would be able to visit a page (i.e. mydomain.com/account), authenticate and then change their password.

Does anyone know of a script or app that will allow me to do this quickly and easily? I guess it wouldn't be hard to write in PHP, but I'd prefer not to have the hassle.

scripting ldap web-applications password-management

4 Answers

  1. Best Answer

    I you might be interested in phpLdapPassword.

    phpLdapPasswd is a system that allows certain password management functions to be initiated from a standard web browser. As the name suggests, phpLdapPasswd is designed to integrate with an LDAP directory. The core functionality includes password changes and password resets. Templates, CSS directives and external functions allow for a high degree of flexibility in how phpLdapPasswd looks and acts. However, quick deployments are also possible by using the included default files and settings.

    • 4

  2. I found phpLdapPasswd the most flexible solution.

    As the original site of phpLdapPasswd is down and Karyl discontinued development, I added a separate github project: https://github.com/koppor/phpLdapPasswd

    • 3

  3. I've coded one a little while ago and blogged about it. It enforces a 6 characters password with a minimum of 1 special character. The blog post is in french, but the code is commented in english.

    blog post: http://jve.linuxwall.info/blog/index.php?post/2009/03/15/Changer-un-mot-de-passe-LDAP tar with the php: http://jve.linuxwall.info/ressources/code/ldapchangepasswd.tar

    Feel free to contact me if some of the functions are unclear

    • 2

  4. What you need to do is bind as the user's DN, with the old password, and then modify: userPassword with the new password value.

    Pretty much any script that does that should work.

    • 1