Eric Nichols wrote:
unicodepwd is a pretty unique attribute.
3. An Add does work (just an add, no delete)
So are you saying I need to remove the delete? Something like:
$mesg = $ldap->modify($dn, changes => [
add => [ unicodePwd => $newUniPW ],
]);
If this is the case why does the LDAP FAQ indicate I need the add and
delete?
Also the LDAP connection MUST be SSL. Active Directory will not accept
password changes over insecure connections.
Would not my connection string:
my $ldap = Net::LDAP->new("ldaps://$host") or die("$@");
make a SSL connection. Note the ldaps:// in the host parameter. It seems
to connect fine if I use the userPrincipalName. I would assume if the
SSL was a problem I would not be able to connect with either DN or UPN.
I appreciate your input.
Eric