Updating AD password using cfldap

[TruthInSatire]

I'm trying to provide the ability for our users to change their domain password from our website.

The website is located in the DMZ and is not part of the domain.

I have sucessfully connected and run several LDAP queries. I can authenticate via ldap and all is well.

When I try to change a password I get various errors depending on the code.

I'm not sure if the following attribut is even correct. I've seen it used in a php example.

<CFLDAP ACTION="MODIFY"
MODIFYTYPE="replace"
port = "636"
server = "#serverIP#"
username = "#domain#\#adminuser#"
password = "#adminpassword#"
ATTRIBUTES="unicodepwd=#newtestpassword#"
DN="#ldapDNLookup.DN#">

this code provides the following error:
An error has occured while trying to execute modify :Request: 1 cancelled.
One or more of the required attributes may be missing/incorrect or you do not have permissions to execute this operation on the server

if i don't specify a secure port i get this error:
An error has occured while trying to execute modify :[LDAP: error code 53 - 0000001F: SvcErr: DSID-031A0FC0, problem 5003 (WILL_NOT_PERFORM), data 0 ].

Is this possible to do with CFLDAP

We've heard that a million monkeys at a million keyboards could produce the complete works of Shakespeare; now, thanks to the Internet, we know that is not true.

 

[ecobb]

I'm not sure about a password, but I know that it's possible to update other AD info. I think passwords may take some type of special encryption and windows may keep that off limits.

Try this, see if it helps. There's an example on updating AD under the "Employee Self-Service Example" heading.

http://www.adobe.com/devnet/server_archive/articles/integrating_cf_apps_w_ms_active_directory.html

Hope This Helps!

ECAR
ECAR Technologies

http://www.ecartech.com

"My work is a game, a very serious game." - M.C. Escher

 

[TruthInSatire]

Hey buddy, good to hear from you.

I've read this. in fact, I think i've read everything online about cf and ldap.

I can actually modify other fields sucessfully. I hadn't tried it before i posted but it works perfectly. I get the exact same error if i specify port 636 when updating my phone number, so i'm working with the other network people to see what the deal is with ssl.

I found a script that will encode the password. at least, i think it does. I've found 2 fields that can be updated. I can't find much out about them though. I think 1 requires a formated entry, but the other one doesn't. right now i'm just going to wait until i see what's up with ssl.

unless someone else has any other ideas.

We've heard that a million monkeys at a million keyboards could produce the complete works of Shakespeare; now, thanks to the Internet, we know that is not true.