Change Ldap Password

[Anthonio Booysen]

Hi
This is my first question since joinging this site. and was advise by a friend to use this site.

I have question. But first I must say that I test my Ldap connection and I could search for username on Ldap. I now want to changes a userName's password and I am getting the following Errors

Problem resetting password: javax.naming.NamingException: [LDAP: error code 1 - 000020D6: SvcErr: DSID-031006CC, problem 5012 (DIR_ERROR), data 0
remaining name 'CN=userName'. I have established a connection but now wat to change a username in ldap.

I have attached my setpass code

                                                    
package beans;
import java.util.Hashtable;
import javax.naming.*;
import javax.naming.ldap.*;
import javax.naming.directory.*;
 
import java.io.*;
 
public class Setpass {
    public static void main (String[] args)
    {
    
        Hashtable env = new Hashtable();
        String adminName = "admin";
        String adminPassword = "pass";
        String userName = "CN=Username Surname";
        String oldPassword = "passwrod";
        String newPassword = "password";
        String searchBase = "DC=xxxxxxx,DC=net";
        
 
        env.put(Context.INITIAL_CONTEXT_FACTORY,"com.sun.jndi.ldap.LdapCtxFactory");
 
        //set security credentials, note using simple cleartext authentication

        env.put(Context.SECURITY_PRINCIPAL,adminName);
        env.put(Context.SECURITY_CREDENTIALS,adminPassword);
 
        env.put(Context.SECURITY_AUTHENTICATION,"DIGEST-MD5"); //No other SALS worked with me  
                
        //connect to my domain controller
        String ldapURL = "LDAP://xx.xxxxxxx.net:389";
        env.put(Context.PROVIDER_URL,ldapURL);
        
        try {
 
            // Create the initial directory context
            DirContext ctx = new InitialDirContext(env);
        
            //set password is a ldap modfy operation
            ModificationItem[] mods = new ModificationItem[2];
 
            //Replace the "unicdodePwd" attribute with a new value
            //Password must be both Unicode and a quoted string
            String oldQuotedPassword = "\"" + oldPassword + "\"";
            byte[] oldUnicodePassword = oldQuotedPassword.getBytes("UTF-16LE");
            String newQuotedPassword = "\"" + newPassword + "\"";
            byte[] newUnicodePassword = newQuotedPassword.getBytes("UTF-16LE");
        
            mods[0] = new ModificationItem(DirContext.REMOVE_ATTRIBUTE, new BasicAttribute("unicodePwd", oldUnicodePassword));
            mods[1] = new ModificationItem(DirContext.ADD_ATTRIBUTE, new BasicAttribute("unicodePwd", newUnicodePassword));
 
            // Perform the update
            ctx.modifyAttributes(userName + searchBase, mods);
            System.out.println(userName + " " + mods);
        
            System.out.println("Reset Password for: " + userName);  
            ctx.close();

        } 
        catch (NamingException e) {
            System.out.println("Problem resetting password: " + e);
        }
        catch (UnsupportedEncodingException e) {
            System.out.println("Problem encoding password: " + e);
        }
 
    }
 
 
 

[Campbell Ritchie]

Thank you for posting and welcome to JavaRanch

Unfortunately that question is too difficult for beginners, so I shall move it.

[Anthonio Booysen]

Hi

I have made changes to the code and it gave me no errors, but the message on the result page says

>>>CN=Username Surname,OU=Users,OU=Information Technology,OU=Africa Central Office
[Ljavax.naming.directory.ModificationItem;@1a5ab41
Reset Password for: CN=Username Surname

but attrs = BasicAttributes says that there are No attributes

    package beans;

import java.util.Hashtable;
import javax.naming.*;
import javax.naming.directory.*;

import java.io.*;

public class Setpass {
    @SuppressWarnings("unchecked")
    public static void main(String[] args) {

         Hashtable env = new Hashtable();   
        String adminName = "admin";   
        String adminPassword = "pass";   
        String userName = "CN=Username Surname";   
        String oldPassword = "passwrod";   
        String newPassword = "password";   
        String searchBase = "DC=xxxxxxx,DC=net";   

        env.put(Context.INITIAL_CONTEXT_FACTORY,
                "com.sun.jndi.ldap.LdapCtxFactory");

        env.put(Context.SECURITY_AUTHENTICATION, "DIGEST-MD5");
        env.put(Context.SECURITY_PRINCIPAL, adminName);
        env.put(Context.SECURITY_CREDENTIALS, adminPassword);

        env.put(Context.PROVIDER_URL, ldapURL);

        try {

            // Create the initial directory context
            DirContext ctx = new InitialDirContext(env);
            
            


            // Create the search controls
            SearchControls searchCtls = new SearchControls();

            // Specify the search scope
            searchCtls.setSearchScope(SearchControls.SUBTREE_SCOPE);

            // Specify the attributes to return
            String returnedAtts[] = { "cn=Username Surname" };
            searchCtls.setReturningAttributes(returnedAtts);

            String searchFilter = "(&(objectClass=user)(objectClass=person)(sAMAccountName=Username))";
           
            

            
            // Specify the Base for the search
            String searchBase = "DC=xxxxxxx,DC=net";

            // initialize counter to total the results
            int totalResults = 0;

            // Search for objects using the filter
            NamingEnumeration answer = ctx.search(searchBase, searchFilter,
                    searchCtls);

            //while (answer.hasMoreElements()) {
            SearchResult sr = (SearchResult) answer.next();

            totalResults++;

            System.out.println(">>>" + sr.getName());

           // }

            // Replace the "unicdodePwd" attribute with a new value
            // Password must be both Unicode and a quoted string
            String newQuotedPassword = "\"" + newPassword + "\"";
            byte[] newUnicodePassword = newQuotedPassword.getBytes("UTF-16LE");

            // set password is a ldap modfy operation
            ModificationItem[] mods = new ModificationItem[1];
              mods[0] = new ModificationItem(DirContext.REPLACE_ATTRIBUTE,
                    new BasicAttribute("unicodePwd", newUnicodePassword));

            if (mods == null) {
                System.out.println("Mods is empty");

            } else {
                System.out.println(mods);
            }

            // Perform the update
            // ctx.modifyAttributes(userName, mods);
  

            // Check attributes


            Attributes attrs = sr.getAttributes();
            ctx.modifyAttributes(userName, DirContext.REPLACE_ATTRIBUTE, attrs);
              

            System.out.println("Reset Password for: " + userName);
            ctx.close();

        } catch (NamingException e) {
            System.out.println("Problem resetting password: " + e);

        } catch (UnsupportedEncodingException e) {
            System.out.println("Problem encoding password: " + e);
        }

    }

}

[Huong NguyenB]

I've encounted the same problem, please help us to solve it.
Many thanks