Active directory web password reset – Stephen's Space on the Web

This is a simple webform that asks for the username and when you click submit it will generate a random password.
default.htm





FIT Password Reset





  
    FIT Username: 
      
  

    
      

  

	
 

All usage is monitored and logged.






fitPassReset.pl
<br /><br />use CGI;<br />use Win32::OLE;<br />use File::Log;<br /><br />#ADS Vars<br />use constant ADS_PROPERTY_CLEAR => 1;<br />use constant ADS_PROPERTY_UPDATE => 2;<br />use constant ADS_PROPERTY_APPEND => 3;<br />use constant ADS_PROPERTY_DELETE => 4;<br />use constant vbNull => 1;<br />use constant ADS_SECURE_AUTHENTICATION => 1;<br />use constant ADS_USE_ENCRYPTION => 2;<br /><br />print "Content-type: text/html\n\n";<br />$query = new CGI;<br /><br />$Win32::OLE::Warn = 3;<br /><br />$base = "dc=domain,dc=local";<br />$user = $query->param('username');<br /><br />#Full CN of admin user.<br />$adminuser = "cn=admin,cn=Users,dc=domain,dc=local";<br />$adminpass = "AdminPass";<br /><br /><br />#find the User's DN<br />my $connObj = Win32::OLE->new('ADODB.Connection');<br />$connObj->{Provider} = "ADsDSOObject";<br /><br />$connObj->Properties->{'User ID'} = $adminuser;<br />$connObj->Properties->{'Password'} = $adminpass;<br /><br />$connObj->Open;<br />my $commObj = Win32::OLE->new('ADODB.Command');<br /><br />$commObj->{ActiveConnection} = $connObj;<br />$commObj->Properties->{'Page Size'} = 1000;<br /><br />#Get DC<br />my $MyDomain = Win32::OLE->GetObject("LDAP://RootDSE");<br />$MyDC = $MyDomain->Get("dnsHostName");<br /><br />#Generate Ldap Search String<br />#my $query = "<ldap://$mydc/$base>;";<br />my $query = "<ldap://$base>;";<br /><br />$query .= "((cn=$user));";<br />$query .= "distinguishedName,cn;";<br />$query .= "subtree";<br /><br />$commObj->{CommandText} = $query;<br /><br />my $resObj = $commObj->Execute($query); die "Could not query $base: ",$Win32::OLE::LastError,"\n" unless ref $resObj;<br /><br />my $total = 0;<br />while (!($resObj->EOF)) {<br /><br />	$strUserDN = $resObj->Fields("distinguishedName")->value;<br />        $total++; $resObj->MoveNext;<br />        #print $strUserDN;<br />}<br /><br /><br />#Generate random number for password<br />my $random_number = int(rand(300)) + 1000;<br /><br />$objNamespaceLDAP = Win32::OLE->GetObject('LDAP:');<br />$objMyObject = $objNamespaceLDAP->OpenDSObject("LDAP://" .$strUserDN, $adminuser, $adminpass, ADS_USE_ENCRYPTION + ADS_SECURE_AUTHENTICATION);<br />$objMyObject->SetPassword("Fit$random_number");<br />$objMyObject->SetInfo;<br /><br />#my $objUser = Win32::OLE->GetObject("LDAP://" . $strUserDN, "who@what.com",$adminpass,1);<br />#$objUser->SetPassword("Fit$random_number");<br /><br />#expiring the password give an error so we will fix that later.<br />#$objUser->Put("PasswordExpired", 1);<br />#$objUser->SetInfo;<br /><br /><br />#Write to Log<br />my $log = File::Log->new(logFileMode => '>>', dateTimeStamp => 1,);<br />$log->exp("User:$strUserDN, NumberofUsers:$total\n");<br />$log->close();<br /><br /><br />print <<"EOF"; <html><br /><head><br /><title>Thank you</title><br /></head><br /><br /><body><br /><h1>The new password is: </h1><br /><h2>Fit$random_number</h2><br /><br /><p>Return to <br /><a href="default.htm">Home</a>.</p><br /><br /></body><br /></html><br />EOF<br /><br /></pre>
	</div><!-- .entry-content -->

	
	<footer class="entry-footer">
		<span class="posted-on"><span class="screen-reader-text">Posted on </span><a href="https://www.stephenjc.com/2009/01/15/active-directory-web-password-reset/" rel="bookmark"><time class="entry-date published" datetime="2009-01-15T02:56:00-05:00">January 15, 2009</time><time class="updated" datetime="2011-02-04T04:04:37-05:00">February 4, 2011</time></a></span><span class="byline"><span class="author vcard"><span class="screen-reader-text">Author </span><a class="url fn n" href="https://www.stephenjc.com/author/admin/">stephen</a></span></span><span class="cat-links"><span class="screen-reader-text">Categories </span><a href="https://www.stephenjc.com/category/uncategorized/" rel="category tag">Uncategorized</a></span><span class="tags-links"><span class="screen-reader-text">Tags </span><a href="https://www.stephenjc.com/tag/active/" rel="tag">active</a>, <a href="https://www.stephenjc.com/tag/directory/" rel="tag">directory</a>, <a href="https://www.stephenjc.com/tag/password/" rel="tag">password</a>, <a href="https://www.stephenjc.com/tag/perl/" rel="tag">perl</a>, <a href="https://www.stephenjc.com/tag/reset/" rel="tag">reset</a>, <a href="https://www.stephenjc.com/tag/web/" rel="tag">web</a></span>			</footer><!-- .entry-footer -->

</article><!-- #post-7 -->

<div id="comments" class="comments-area">

	
	
		<div id="respond" class="comment-respond">
		<h3 id="reply-title" class="comment-reply-title">Leave a Reply <small><a rel="nofollow" id="cancel-comment-reply-link" href="/2009/01/15/active-directory-web-password-reset/#respond" style="display:none;">Cancel reply</a></small></h3><form action="https://www.stephenjc.com/wp-comments-post.php" method="post" id="commentform" class="comment-form" novalidate><p class="comment-notes"><span id="email-notes">Your email address will not be published.</span> <span class="required-field-message">Required fields are marked <span class="required">*</span></span></p><p class="comment-form-comment"><label for="comment">Comment <span class="required">*</span></label> <textarea id="comment" name="comment" cols="45" rows="8" maxlength="65525" required>
Name * 
Email * 
Website 
 Save my name, email, and website in this browser for the next time I comment.
 

Δ