[python-ldap] password change for multivalued userpasssword

[Michael Ströder]

Demicoli Darren at MITA wrote:
> When changing a user password using the passwd_s() function, the old password
> can be specified.  Now since the userpassword attribute is a multivalued
> attribute, I was assuming that for an ldap entry with multiple passwords, if
> the old password is specified in the passwd_s(), this would change only that
> particular password. However, if this is done, all the user passwords are
> removed and only the entry for the new password remains.
> 
> Is this limitation coming from python-ldap or from the directory server exop?

It's entirely up to the LDAP server how it handles Password Modify Extended
operation.

BTW: Having multiple values in attribute 'userPassword' is a very bad idea anyway.

Ciao, Michael.


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3883 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://mail.python.org/pipermail/python-ldap/attachments/20120918/2ec6a73d/attachment.bin>