[ldap] Re: import password into Active Directory

[Jan-Piet Mens]

> I'd like to know if it is possible to encrypt a user's password in Active
> Directory's format, and then import it into this user's Active Directory
> account ?

You can't "import" a password, at least not via LDAP. What is possible,
is to set a user's password via LDAP over SSL, by replacing the
unicodePwd attribute type. The value must be the user's clear-text
password.

Here's a snippet of Perl code which might help you.

        $pass = "secret";
        map { $npw .= "$_\000" } split(//, "\"$pass\"");

        my $rc = $ldap->modify($dn, replace => { "unicodePwd" => $npw });

Good luck,

        -JP