setting passwords via LDAPS

  • Thread starter Thread starter rohit mehta
  • Start date Start date
R

rohit mehta

Hi, I have written a perl script to set Active Directory 2003 passwords
via LDAP-SSL (using Net::LDAPS). It works when run as administrator.
The administrator can change his own or another user's password
successfully.

However, when I try to run this as a regular domain user (to set that
domain user's password), I get the error:
00002098: SecErr: DSID-03150A45, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0

I have the Change Password permission checked in the Active Directory
Users and Computers MMC. Is anything else required to make this work?

Please let me know if you need any more information, or if you would
like to see my perl script.

Would appreciate any advice/assistance,

Rohit Kumar Mehta
University of Connecticut
Computer Systems Manager
 
To change the password (instead of reset the password), you must remove the
old password with a delete op and add the new one with an add op in the same
LDAP modify operation. This means you must have the old password. This is
what you are allowed to do when you have change password permission.

Joe K.
 
Back
Top