PHP.nl

ldap_exop_passwd

ldap_exop_passwd

PASSWD extended operation helper

 **ldap_exop_passwd** LDAP\Connection $ldap string $user string $old_password string $new_password array $controls

Performs a PASSWD extended operation.

ldapldap.parameter.ldap

userdn of the user to change the password of.

old_passwordThe old password of this user. May be ommited depending of server configuration.

new_passwordThe new password for this user. May be omitted or empty to have a generated password.

controls If provided, a password policy request control is send with the request and this is filled with an array of returned with the request. LDAP Controls

Returns the generated password if  is empty or omitted.
Otherwise returns true on success and false on failure.

new_password

Voorbeeld: PASSWD extended operation

<?php
$ds = ldap_connect("localhost");  // assuming the LDAP server is on this host

if ($ds) {
    // bind with appropriate dn to give update access
    $bind = ldap_bind($ds, "cn=root, o=My Company, c=US", "secret");
    if (!$bind) {
      echo "Unable to bind to LDAP server";
      exit;
    }

    // use PASSWD EXOP to change the user password for a generated one
    $genpw = ldap_exop_passwd($ds, "cn=root, o=My Company, c=US", "secret");
    if ($genpw) {
      // use the generated password to bind
      $bind = ldap_bind($ds, "cn=root, o=My Company, c=US", $genpw);
    }

    // set the password back to "secret"
    ldap_exop_passwd($ds, "cn=root, o=My Company, c=US", $genpw, "secret");

    ldap_close($ds);
} else {
    echo "Unable to connect to LDAP server";
}
?>

ldap_exop``ldap_parse_exop