There is a need for users at my job to create accounts and manage passwords. Since we are bringing online a new Sun One LDAP server for personal use, we have no GUI tools for the end user. Building on our Ruby experience we looked there for help with web tools. There is a method to change userPassword attribute in Ruby (thanks Ollivier Robert):

You need to hash the password:

—–
e_password = “{SHA}” + encode64(Digest::SHA1.new(password).digest).chomp
—–

then generate the modification:

—–
# Do the modification
#
reset = [
LDAP.mod(LDAP::LDAP_MOD_REPLACE, "userPassword", [e_password]),
]

conn.bind(USER, PASS) do
begin
conn.modify(”uid=#{login},#{BASE}”, reset)
rescue LDAP::ResultError => msg
puts “Can’t change password: ” + msg
exit 0
rescue LDAP::Error => errcode
puts “Can’t change password: ” + LDAP.err2string(errcode)
exit 0
end
end

Load the Ruby-ldap module and off you go. All there is needed now is an interface for input. Soon we will rule the world…

Last Modified : Monday, November 12th, 2007, 7:59 pm Filed under : coding TAG(s) : coding Navigate : Previous post / Next post

Related Stuff