PHP - Manual: ldap_mod_replace

2024-11-13

ldap_mod_replace

(PHP 4, PHP 5, PHP 7, PHP 8)

ldap_mod_replace — Replace attribute values with new ones

说明

ldap_mod_replace(
    LDAP\Connection $ldap,
    string $dn,
    array $entry,
    ?array $controls = null
): bool

Replaces one or more attributes from the specified dn. It may also add or remove attributes.

参数

ldap: 通过 ldap_connect() 返回的 LDAP\Connection 实例。
dn: The distinguished name of an LDAP entity.
entry: An associative array listing the attributes to replace. Sending an empty array as value will remove the attribute, while sending an attribute not existing yet on this entry will add it.
controls: Array of LDAP Controls to send with the request.

返回值

成功时返回 true，或者在失败时返回 false。

更新日志

版本	说明
8.1.0	现在 `ldap` 参数接受 LDAP\Connection 实例，之前接受资源(resource)。
8.0.0	`controls` is nullable now; previously, it defaulted to `[]`.
7.3	Support for `controls` added

注释

注意: 此函数可安全用于二进制对象。

参见

ldap_mod_replace_ext() - Replace attribute values with new ones
ldap_mod_del() - Delete attribute values from current attributes
ldap_mod_add() - Add attribute values to current attributes
ldap_modify_batch() - Batch and execute modifications on an LDAP entry

add a note

User Contributed Notes 14 notes

down

chris at mr2madness dot com ¶

14 years ago


You can use arrays for multiple attributes example:


<?php

$entry[mail] = array("example@example.com","example2@example.com");

$results = ldap_mod_add($ldapConnID,$dn, $entry);

?>

or as i did for creating anew user:

<?php

$adduserAD["objectClass"] = array("top","person","organizationalPerson","user");

?>

down

mike dot rosile at interzonegames dot com ¶

14 years ago


Here is some great information from the OpenLDAP FAQs regarding changing a userPassword attribute with PHP:

http://www.openldap.org/faq/data/cache/347.html

$userpassword = "{SHA}" . base64_encode( pack( "H*", sha1( $pass ) ) );

down

Anonymous ¶

10 years ago


this can not be used to change a password on an AD server that requires you to send the old and new password.

in order to do this use on shuts an sever make an admin-account that allows to change other ppl pw without suppling the old password first.

down

JoshuaStarr at aelana dot com ¶

20 years ago


To modify an attribute with a single value: 

  $entry[mail] = "newmail@aelana.com"; 

  $results = ldap_mod_add($ldapConnID,$dn, $entry); 


To modify an attribute with multiple values: 

  $entry[mail][] = "newmail@aelana.com"; 

  $entry[mail][] = "altnewmail@aelana.com"; 

  $results = ldap_mod_add($ldapConnID,$dn, $entry);


To modify multiple attributes

  $entry[mail][] = "newmail@aelana.com"; 

  $entry[mail][] = "altnewmail@aelana.com"; 

  $entry[c]      = "US";

  $results = ldap_mod_add($ldapConnID,$dn, $entry);

down

ondrej at sury dot cz ¶

20 years ago


in openldap 2.0.x you can use method with mod_del/mod_add only if the attribute have defined EQUALITY rule.

down

oyvindmo at initio dot no ¶

21 years ago


ldap_mod_replace() and ldap_modify() are _exactly_ the same.  So, the comment that ldap_mod_replace() "performs the modification at the attribute level as opposed to the object level", has no root in reality.

down

dynamik ¶

9 years ago


Using this function to 'replace' an Active Directory password requires the "Reset Password" security permission as opposed to the "Change Password" permission (which is assigned by default to SELF)

down

frederic dot jacquot at insa-lyon dot fr ¶

18 years ago


Changing a user password in Active Directory.
Securely connect (using ldaps) to the Active Directory and bind using an administrator account.

In this example, $userDn contains the dn of the user I want to modify, and $ad is the Active Directory ldaps connection)

$newPassword = "MyPassword";
$newPassword = "\"" . $newPassword . "\"";
$len = strlen($newPassword);
for ($i = 0; $i < $len; $i++)
        $newPassw .= "{$newPassword{$i}}\000";
$newPassword = $newPassw;
$userdata["unicodepwd"] = $newPassword;
$result = ldap_mod_replace($ad, $userDn, $userdata);
if ($result) echo "User modified!" ;
else echo "There was a problem!";

I found it hard to get a proper encoding for the unicodepwd attribute so this piece of code might help you ;-)

down

yife at myrice-ltd dot com ¶

21 years ago


if i want to replace the special attribute but i don't replace other attribute ,i just use "ldap_mod_del" and "ldap_mod_add" ,the function seems to that

down

-1

aaronfulton at softhome dot net ¶

15 years ago


Before you modify values in your ldap directory, first make sure that you have permission to do so.  In openldap adding the following acl in slap.conf will allow the user to modify their own userpassword.

access to attr=userPassword
        by self write
        by anonymous auth
        by * none

down

-1

erwann at zeflip dot com ¶

15 years ago


If you do not wish to set up SSL on your active directory, and you are running on Windows, you can use COM and ADSI to set the new password for a user, or to active a user:

<?PHP
// to set a user password
  // server is the ldap server
  // newuser_dn is the full dn of the user you want to modify
  // newuser_password is the password you wish to set for the user

    $ADSI = new COM("LDAP:");
    $user = $ADSI->OpenDSObject("LDAP://".$server."/".$newuser_dn, $adminuser, $adminpassword, 1);
    $user->SetPassword($newuser_password);
    $user->SetInfo();

// to activate a user
    $ADSI = new COM("LDAP:");
    $user = $ADSI->OpenDSObject("LDAP://".$server."/".$newuser_dn, $adminuser, $adminpassword, 1);
    $user->AccountDisabled = false;
    $user->SetInfo();

?>

down

-1

plex909 ¶

13 years ago


Here's an easy way to encode AD "unicodepwd" values from linux... 


Download and install recode... 

http://www.gnu.org/software/recode/recode.html


Then write something like this...

<?php

function ADUnicodePwdValue($plain_txt_value)

{

    return str_replace("\n", "", shell_exec("echo -n '\"" . $plain_txt_value . "\"' | recode latin1..utf-16le/base64"));

}


$user["unicodepwd"] = ADUnicodePwdValue("my_password");


?>



[EDITOR thiago NOTE: The following text was sent by boyvanderlaak at gmail dot com as an important complement]


if you do not have access to your linux box but have Multibyte String enabled you could try the following for AD 2008:


<?php

$info["unicodePwd"] = mb_convert_encoding('"' . $newPassword . '"', 'utf-16le');

?>

down

-1

giodev at panozzo dot it ¶

2 years ago


An bettter method to create the unicodePwd Active Directory LDAP field from PHP is:

$unicodePwd = iconv("UTF-8", "UTF-16LE", "\"".$password."\"");

It works when $password is coming from a UTF-8 page. If your $password is not utf-8, change the 1st parameter of iconv.

down

-2

Anonymous ¶

19 years ago


Sometime,we cannot replace ldap_mod_replace  function  with ldap_mod_del function and ldap_mod_add fuction .We  don't have permission to delete an attribute but  we can replace it.

add a note

官方地址：https://www.php.net/manual/en/function.ldap-mod-replace.php

有任何技术问题请点击这里网站运营推广招聘

IT PHP 编程语言 Linux 开发编程科技 Elasticsearch HTML/CSS/XML 网络 JAVA NoSQL 数据库面试 C/C++ Golang Git 算法操作系统正则表达式 Redis 互联网 MySql JavaScript 运维软件国际架构设计 Mac OS TCP/IP Excel Vim Windows Socket Oracle VR MongoDB Python 运营 MemCache 商业硬件电子娱乐设计 nginx 摄影游戏 WordPress HTTP 团建数码电器

php7 安装fileinfo扩展 preg_split — 通过一个正则表达式分隔字符串 php位值,解决 PHP 中 usort 在值相同时改变原始位置的问题 [PHP] inet_pton/inet_ntop IP地址转换函数 array_multisort() 多字段排序 PHPMailer设置utf8 PHPMailer字符集CharSet ADORecordSet对象 adodb手册 PHP 8.1 [鸟哥]PHP_INT_MIN 和 -9223372036854775808 opcache预加载 Composer的Packagist资源 mysql面试题 [鸟哥]PHP FFI详解 - 一种全新的PHP扩展方式 PHP7添加redis扩展 PHP mkdir()写出来的权限与mode值不符合 Packagist / Composer 中国全量镜像 PHP获取指定函数定义在哪个文件中及行号支持php7的性能采集扩展 adodb连接mysql多个数据库的问题

略微加速

PHP官方手册 - 互联网笔记

ldap_mod_replace

说明

参数

返回值

更新日志

注释

参见

User Contributed Notes 14 notes