Password Self-serve Active Directory via LAMP environment

Question

I would like to be able to change active directory passwords via a Linux/Apache based webpage. This would be a self serve web page for the user. I have SSL-LDAP setup on the Active Directory to make this happen. Is there any project or code out there that will do this?

I've looked at this phpadadmin and I cannot get it to work. I think this is for IIS/php/mySQL

Another thing to note is I would like the user to authenticate to change their own password. The product/service should not need a privileged account to run.

Thanks Keith

Active Directory uses some sort of proprietary hashing. I dropped a similar project, unable to find a solution. — Andrioid, Aug 30 '09 at 08:10

score 2 · Accepted Answer · answered Aug 25 '09 at 17:36

2

I don't know of any pre-built solutions, but you could pretty easily create a web page which shells out and executes 'adtool'.

See a nice overview here:

http://www.ghacks.net/2009/08/02/manage-your-active-directory-from-linux-with-adtool/

answered Aug 25 '09 at 17:36

Gummy

86
1

score 2 · Answer 2 · answered Aug 31 '09 at 05:06

2

phpadadmin is just a wrapper for adLDAP. http://adldap.sourceforge.net/

Both of which require the php-ldap extension be installed.

answered Aug 31 '09 at 05:06

txyoji

375
6
13

score 1 · Answer 3 · answered Apr 11 '11 at 09:53

1

The LDAP Tool Box Self Service Password does exactly this. And it is open source!

answered Apr 11 '11 at 09:53

Clément OUDOT

21
1

score 1 · Answer 4 · answered Sep 23 '12 at 16:57

1

From the LDAP toolbox Self Service Password docs for Active Directory: Due to PHP LDAP API limitations, changing password as user is not possible. You need to change it as manager.

answered Sep 23 '12 at 16:57

Walter Horowitz

11
1

Editing your answer to add a link to those docs would be helpful. – pjmorse Sep 23 '12 at 17:38

score 1 · Answer 5 · answered Aug 24 '09 at 18:16

1

Check out some of the PERL Win32:OLE modules or just any LDAP module for that matter. I once wrote a perl CGI web app for doing the same thing using the Win32:OLE module but AD is just LDAP.

answered Aug 24 '09 at 18:16

score 1 · Answer 6 · answered Aug 30 '09 at 05:17

1

For a paid solution, myPassword from Namescape handles this pretty nicely.

answered Aug 30 '09 at 05:17

Matt Hanson

1,672
1
23
33

Looks like this is a webpage solution. However, this does not fulfill my requirements. I'm looking for something that runs in a Linux/Apache environment. – keithosu Aug 30 '09 at 20:10

score 1 · Answer 7 · answered Aug 31 '09 at 05:31

1

checkout this link, it should be possible to get phpldapadmin to tie in with an Active Directory server to get the job done.

answered Aug 31 '09 at 05:31

DisabledLeopard

802
6
9

score 0 · Answer 8 · answered Jan 07 '10 at 03:53

CorendalDirectory is FREE and a pretty sophisticated LAMP and Web-based AD management tool.

It has the self-service password changing you are looking for and even user and group template based object creation, too.

score 0 · Answer 9 · answered Mar 12 '10 at 13:46

0

Self-service password from the LTB-project is a simple open source PHP application to allow users to change their own password on any LDAP server. It is compatible with AD.

answered Mar 12 '10 at 13:46

Jonathan Clarke

1,657
2
11
25

Password Self-serve Active Directory via LAMP environment

9 Answers9