Re: Creating Active Directory Objects

[Randy <wis...@gm...>]

Mike (or anyone else who has successfully changed an Active Directory
password using python-ldap over SSL),

I have not found an update in the archives to your last message on
this subject (below).  Can you perhaps share some Python code showing
how to add or change the password for an Active Directory user via
LDAP over SSL?

Thanks!

- Randy Wiser

> From: Mike Matz <mmatz@wy...> - 2007-11-09 13:36
> Thank you to all who responded to my queries. I have been able to
> successfully create an account and set the password for an AD user on
> my test server. For those who are interested here is the breakdown of
> what I did. As I continue to debug and test I will post updates to
> this topic.

> Connected via SSL to the server. There is no need to manage
> certificates on the client since I am not binding, only establishing
> an LDAP connection. Certificate Services do need to be installed on
> the server. In the future I plan to try to implement the sasl_bind
> code that Michael mentioned. To create the account I performed an
> ldap add and to set the password I performed a modify on the
> unicodePwd attribute. This has appeared to work successfully. I am
> able to authenticate as the newly created user, map a home directory,
> etc. I will need to do further testing to ensure that this is a valid
> method for creating an account.

> Once again, thanks to all who provided input!
> Regards,
> Mike