LDAP Password Modify Extended Operation (was: ANN: python-ldap-2.0.3)

Jens Vagelpohl jens at dataflake.org
Thu Oct 7 07:41:51 CEST 2004


>> Question: Is the Password Modify Extended Operation a generally 
>> supported LDAP operation or is it only on a few server 
>> implementations (I know OpenLDAP has it)?
>
> You can find out by looking at attribute supportedExtension in the 
> RootDSE. The OID 1.3.6.1.4.1.1466.20037 as attribute value indicates 
> that the LDAP server supports Password Modify Extended Operation. Note 
> that this attribute might be subject to access control.
>
> Currently the only LDAP server I know of which supports this is 
> OpenLDAP.
>
>> I'm trying to gauge whether this should be the default under-the-hood 
>> way of changing passwords from my own Zope-related products.
>
> Probably not.

Thanks Michael. Looks like for my code it's still more viable to 
"hand-encode" passwords than to test for and utilize the extended 
operation.

jens

---------------

Jens Vagelpohl			jens at zetwork.com
Software Engineer			Zope - done medium rare
Zetwork GmbH				http://www.zetwork.com/






More information about the python-ldap mailing list