Net::LDAP::Extra::AD(3) User Contributed Perl Documentation Net::LDAP::Extra::AD(3)

Net::LDAP::Extra::AD -- AD convenience methods

use Net::LDAP::Extra qw(AD);
$ldap = Net::LDAP->new( ... );
...
if ($ldap->is_AD || $ldap->is_ADAM) {
  $ldap->change_ADpassword($dn, $old_password, $new_password);
}

Net::LDAP::Extra::AD tries to spare users the necessity to reinvent the wheel again and again in order to correctly encode password strings so that they can be used in AD password change operations.

To do so, it provides the following methods:

Tell if the LDAP server queried is an Active Directory Domain Controller.

As the check is done by querying the root DSE of the directory, it works without being bound to the directory.

Tell if the LDAP server queried is running AD LDS (Active Directory Lightweight Directory Services), previously known as ADAM (Active Directory Application Mode).

As the check is done by querying the root DSE of the directory, it works without being bound to the directory.

Change the password of the account given by DN from its old value OLD_PASSWORD to the new value NEW_PASSWORD.

This method requires encrypted connections.

Reset the password of the account given by DN to the value given in NEW_PASSWORD. OPTIONS is a list of key/value pairs. The following keys are recognized:
If TRUE, the affected user is required to change the password at next login.

For this method to work, the caller needs to be bound to AD with sufficient permissions, and the connection needs to be encrypted.

Peter Marschall <peter@adpm.de<gt>

Copyright (c) 2012 Peter Marschall. All rights reserved. This program is free software; you can redistribute it and/or modify it under the same terms as Perl itself.

2024-09-01 perl v5.40.0