[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: ldappasswd returns ldap_parse_result: Decoding error (-4)



Hi Carsten,

AD does not allow the password to be set using ldappasswd.

Instead you have to modify an attribute called unicodePwd
whose value needs to be encoded specially.

IIRC you may find more information on this topic in the mailing lists archives
and of yourse at MS.

Hope it helps
Peter

On Saturday, 29. October 2005 23:07, you wrote:
> Hi all,
> I want to set the password of an user on a windows 2k active directory
> server. I use this command:
>
> ldappasswd -h 192.168.2.196 -x -v -s "abc" -W -d 10 -D
> CN=Administrator,CN=Users,DC=michaeli-gymnasium,DC=de
> CN=carsten,OU=G_Admins,OU=MGM,DC=michaeli-gymnasium,DC=de
>
> The result, skipping the first part ;) :
>
> ldap_read: want=8, got=8
>   0000:  30 84 00 00 00 10 02 01                            0.......
> ldap_read: want=14, got=14
>   0000:  01 61 84 00 00 00 07 0a  01 00 04 00 04 00         .a............
> request 1 done
>   0000:  30 62 02 01 02 77 5d 80  17 31 2e 33 2e 36 2e 31  
> 0b...w]..1.3.6.1 0010:  2e 34 2e 31 2e 34 32 30  33 2e 31 2e 31 31 2e 31  
> .4.1.4203.1.11.1 0020:  81 42 30 40 80 39 43 4e  3d 63 61 72 73 74 65 6e  
> .B0@.9CN=carsten 0030:  2c 4f 55 3d 47 5f 41 64  6d 69 6e 73 2c 4f 55 3d  
> ,OU=G_Admins,OU= 0040:  4d 47 4d 2c 44 43 3d 6d  69 63 68 61 65 6c 69 2d  
> MGM,DC=michaeli- 0050:  67 79 6d 6e 61 73 69 75  6d 2c 44 43 3d 64 65 82  
> gymnasium,DC=de. 0060:  03 61 62 63                                       
> .abc
> ldap_write: want=100, written=100
>   0000:  30 62 02 01 02 77 5d 80  17 31 2e 33 2e 36 2e 31  
> 0b...w]..1.3.6.1 0010:  2e 34 2e 31 2e 34 32 30  33 2e 31 2e 31 31 2e 31  
> .4.1.4203.1.11.1 0020:  81 42 30 40 80 39 43 4e  3d 63 61 72 73 74 65 6e  
> .B0@.9CN=carsten 0030:  2c 4f 55 3d 47 5f 41 64  6d 69 6e 73 2c 4f 55 3d  
> ,OU=G_Admins,OU= 0040:  4d 47 4d 2c 44 43 3d 6d  69 63 68 61 65 6c 69 2d  
> MGM,DC=michaeli- 0050:  67 79 6d 6e 61 73 69 75  6d 2c 44 43 3d 64 65 82  
> gymnasium,DC=de. 0060:  03 61 62 63                                       
> .abc
> ldap_read: want=8, got=8
>   0000:  30 84 00 00 00 16 02 01                            0.......
> ldap_read: want=20, got=20
>   0000:  02 78 84 00 00 00 0d 30  84 00 00 00 07 0a 01 02  
> .x.....0........ 0010:  04 00 04 00                                       
> ....
> request 2 done
> ldap_parse_result: Decoding error (-4)
>
> I'm pretty much a n00b to the whole ldap/ad stuff, so if my problem is
> just silly, I'm sorry... But I hope you can help me :)
>
> Bye,
> Carsten

-- 
Peter Marschall
eMail: peter@adpm.de