Articlename:  Passwortwechsel bei LDAP-User
Keywords:     python ldap user password change
Date:         20.08.2007, 13:30
Views:        683
Categoryname: LDAP
----------------------------------------

Mit diesem kurzen Skript ist es möglich, das Passwort eines LDAP-Users zu ändern.
Erforderlich dazu ist die Python-LDAP-Lib.


------- Code -------

import ldap, sha, sys, string
from base64 import encodestring

if len(sys.argv) is not 4:
    print 'usage: username oldpass newpass'
    sys.exit()

host = 'ldap.mydomain.tld'

base = 'ou=people,dc=mydomain,dc=tld'
who = 'uid=%s, %s' % (sys.argv[1], base)
oldpass = sys.argv[2]
new_pw = sys.argv[3]


l = ldap.open(host)
job = l.bind(who, oldpass, ldap.AUTH_SIMPLE)

try:
    l.result(job)
except:
    print "wrong user/pw"
    sys.exit()

sha_digest = sha.new(new_pw).digest()
encoded_pw = '{SHA}' + string.strip(encodestring(sha_digest))

mod_list = ((ldap.MOD_REPLACE, 'userPassword', encoded_pw),)

l.modify(who, mod_list)

print "password successfully changed"

------- End-Code -------