Home / server / Questions / 58066
Accepted
keithosu
Asked: 2009-08-25 09:37:34 +0800 CST

Password Self-serve Active Directory via LAMP environment

  • 772

I would like to be able to change active directory passwords via a Linux/Apache based webpage. This would be a self serve web page for the user. I have SSL-LDAP setup on the Active Directory to make this happen. Is there any project or code out there that will do this?

I've looked at this phpadadmin and I cannot get it to work. I think this is for IIS/php/mySQL

Another thing to note is I would like the user to authenticate to change their own password. The product/service should not need a privileged account to run.

Thanks Keith

linux php apache-2.2 active-directory ldap

9 Answers

  1. Best Answer

    I don't know of any pre-built solutions, but you could pretty easily create a web page which shells out and executes 'adtool'.

    See a nice overview here:

    http://www.ghacks.net/2009/08/02/manage-your-active-directory-from-linux-with-adtool/

    • 2

  2. phpadadmin is just a wrapper for adLDAP. http://adldap.sourceforge.net/

    Both of which require the php-ldap extension be installed.

    • 2

  3. Check out some of the PERL Win32:OLE modules or just any LDAP module for that matter. I once wrote a perl CGI web app for doing the same thing using the Win32:OLE module but AD is just LDAP.

    • 1

  4. For a paid solution, myPassword from Namescape handles this pretty nicely.

    • 1

  5. checkout this link, it should be possible to get phpldapadmin to tie in with an Active Directory server to get the job done.

    • 1

  6. The LDAP Tool Box Self Service Password does exactly this. And it is open source!

    • 1

  7. From the LDAP toolbox Self Service Password docs for Active Directory: Due to PHP LDAP API limitations, changing password as user is not possible. You need to change it as manager.

    • 1

  8. CorendalDirectory is FREE and a pretty sophisticated LAMP and Web-based AD management tool.

    It has the self-service password changing you are looking for and even user and group template based object creation, too.

    • 0

  9. Self-service password from the LTB-project is a simple open source PHP application to allow users to change their own password on any LDAP server. It is compatible with AD.

    • 0