ldifde usage
Hello,How to use ldifde to set password for user account?Thanks!
January 27th, 2010 7:15pm
I can be done with ldifde, but you must specify the Base64 encoding of the password. The syntax for the ldif file is similar to below:
dn: cn=Jim Smith,ou=West,dc=MyDomain,dc=com
changetype: modify
replace: unicodePwd
unicodePwd::IgB4AFoAeQAkADEAMwAyACMAcQAhACIA
-
Note you use the unicodePwd attribute, and use two colons instead of one to indicate the value is Base64 encoded. See this kb article:http://support.microsoft.com/kb/263991Also, you must specify the SSL port, so the ldifde command would be similar to:ldifde -i -f ChgPwd.ldf -t 636where ChgPwd.ldf is the ldif file. To convert a password into the corresponding Base64 encoded string, you can use the example VBScript program PwdToBase64.vbs linked on this page:http://www.rlmueller.net/Base64.htmThe special program is needed because the string value (the password) must be unicode and be enclosed in quotes before encoded. Also, note that SSL/TLS encryption must be configured on the DC for this to work.Richard MuellerMVP ADSI
Free Windows Admin Tool Kit Click here and download it now
January 27th, 2010 9:53pm