Eric Nichols wrote:
unicodepwd is a pretty unique attribute.
3. An Add does work (just an add, no delete)

So are you saying I need to remove the delete? Something like:

$mesg = $ldap->modify($dn, changes => [
        add     => [ unicodePwd => $newUniPW ],
]);

If this is the case why does the LDAP FAQ indicate I need the add and delete?

Also the LDAP connection MUST be SSL.  Active Directory will not accept
password changes over insecure connections.

Would not my connection string:

my $ldap = Net::LDAP->new("ldaps://$host") or die("$@");

make a SSL connection. Note the ldaps:// in the host parameter. It seems to connect fine if I use the userPrincipalName. I would assume if the SSL was a problem I would not be able to connect with either DN or UPN.

I appreciate your input.

Eric

Reply via email to