Re: ldp Constraints Violation in modifying password



Constraint violation on a pwd modify operation usually means that you either
didn't specify the password in the right syntax or violated password policy.

To do password "reset" with ldp, you do a single replace operation on the
unicodePwd attribute. The value is specified as unicode and must the
plaintext password in quotation marks. Ldp has a special syntax to make
this easy:

\UNI:"Password1"

assuming you wanted a password of password1.

If that doesn't work, you are violating password policy.

You'll get "unwilling to perform" if you attempt the modification on an
unsecure channel. Note that you don't need SSL for the secure channel with
AD 2003+ and any LDAP client OS of XP or higher. You can bind with secure
auth an select "encrypt traffic after bind" (or whatever the checkbox is
called).

If you want to do a password "change", do a delete and an add operation with
the delete having the old password value and the add having the new one.
Use the same syntax as above to specify the value.

HTH,

Joe K.

--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services Programming"
http://www.directoryprogramming.net
--
"jflash" <jflash@xxxxxxxxxx> wrote in message
news:1181228658.940923.212280@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hello,
I'm trying to change the password of an Active Directory user using
ldp.exe. This is the output returned

***Call Modify...
ldap_modify_ext_s(ld, 'CN=Davide Pelosi,OU=efsa,DC=scuola,DC=local',
[1] attrs, SvrCtrls, ClntCtrls);
Error: Modify: Constraints Violation. <19>

Ldp connects in ssl mode and binds correctly with the administrator
account but it is impossible to change password
using modify and replace or delete-add couple.

Thenks for your hel,
Davide



.



Relevant Pages

  • Re: Week number with DatePart syntax, and Server...
    ... I had to use the Datepart syntax. ...     Sub WeekNumJRS'' Tdy is CDate in; Y W D out ... ' To let it return the name of a month, specify 2 digits: ...
    (microsoft.public.scripting.vbscript)
  • Re: warn about implicit SAVE?
    ... like it was with the comparable code in f77. ... different syntax). ... Making the variable usaved doesn't achieve can turn a valid program into ... Perhaps you could specify that his would also happen, ...
    (comp.lang.fortran)
  • Re: neural networks output problem
    ... (syntax of this command varies trough different versions of matlab, at least the first part, but I guess that's not the problem) ... Your syntax is incorrect for either version. ... You didn't specify what version of the Toolbox you are using. ... Your output activation function should either be the default ...
    (comp.soft-sys.matlab)
  • Re: Changing Default Names
    ... In fact the syntax you have here will not work, ... >>create a Default under a different owner and test it ... >>>That bug has nothing to do with your problem. ...
    (microsoft.public.sqlserver.server)