用户自主更改LDAP密码的PHP WEB程序

最新推荐文章于 2021-03-24 08:42:33 发布

allway2

最新推荐文章于 2021-03-24 08:42:33 发布

阅读量523

点赞数

本文链接：https://blog.csdn.net/allway2/article/details/109367935

版权

本文供系统管理员参考。它将描述如何使用PHP脚本更改ldap密码。为了使用此PHP脚本，您只需要更改几个参数，并在Fedora 33上进行了测试。

使用PHP脚本更改LDAP密码的步骤

1、确保已正确配置ldap：

2、禁用SELinux

sed -i 's/SELINUX\=enforcing/SELINUX\=disabled/g' /etc/selinux/config
3、将php-ldap软件包安装到apache服务器中：

# yum install php-ldap -y

4、创建changepassword.php文件并将其放入您的apache根目录：

# vi /var/www/html/changepassword.php

修改.php文件中的$ server和$ dn：

<?php

$message = array();

function changePassword($user,$oldPassword,$newPassword,$newPasswordCnf){

global $message;

$server = "localhost";

$dn = "ou=People,dc=example,dc=com";

$userid = $user;

$user = "uid=".$user.",".$dn;

error_reporting(0);

ldap_connect($server);

$con = ldap_connect($server);

ldap_set_option($con, LDAP_OPT_PROTOCOL_VERSION, 3);

// bind anon and find user by uid

$sr = ldap_search($con,$dn,"(uid=*)");

$records = ldap_get_entries($con, $sr);

$message[] = "Username: " . $userid;

//$message[] = "DN: " . $user;

//$message[] = "Current Pass: " . $oldPassword;

//$message[] = "New Pass: " . $newPassword;

/* try to bind as that user */

if (ldap_bind($con, $user, $oldPassword) === false) {

$message[] = "Error E101 - Current Username or Password is wrong.";

return false;

}

if ($newPassword != $newPasswordCnf ) {

$message[] = "Error E102 - Your New passwords do not match! ";

return false;

}

if (strlen($newPassword) < 4 ) {

$message[] = "Error E103 - Your new password is too short! ";

return false;

}

if (!preg_match("/[0-9]/",$newPassword)) {

$message[] = "Error E104 - Your new password must contain at least one digit. ";

return false;

}

if (!preg_match("/[a-zA-Z]/",$newPassword)) {

$message[] = "Error E105 - Your new password must contain at least one letter. ";

return false;

}

if (!preg_match("/[A-Z]/",$newPassword)) {

$message[] = "Error E106 - Your new password must contain at least one uppercase letter. ";

return false;

}

if (!preg_match("/[a-z]/",$newPassword)) {

$message[] = "Error E107 - Your new password must contain at least one lowercase letter. ";

return false;

}

/* change the password finally */

$entry = array();

$entry["userPassword"] = "{SHA}" . base64_encode( pack( "H*", sha1( $newPassword ) ) );

if (ldap_modify($con,$user,$entry) === false){

$message[] = "E200 - Your password cannot be change, please contact the administrator.";

} else {

$message[] = " Your password has been changed. ";

//mail($records[0]["mail"][0],"Password change notice : ".$userid," Your password has just been changed.");

}

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">

<head>

<title>Change your LDAP password</title>

body { font-family: Verdana,Arial,Courier New; font-size: 0.7em; }

input:focus { background-color: #eee; border-color: red; }

th { text-align: right; padding: 0.8em; }

#container { text-align: center; width: 500px; margin: 5% auto; }

ul { text-align: left; list-style-type: square; }

.msg { margin: 0 auto; text-align: center; color: navy; border-top: 1px solid red; border-bottom: 1px solid red; }

</style>

</head>

<body>

<h2>Change your LDAP password</h2>

<ul>

<li> Your new password must be 8 characters long and contain at least one letter and one digit. </li>

</ul>

<form action="<?php print $_SERVER['PHP_SELF']; ?>" name="passwordChange" method="post">

<tr><th>Username:</th><td><input name="username" type="text" size="20" autocomplete="off" /></td></tr>

<tr><th>Old password:</th><td><input name="oldPassword" size="20" type="password" /></td></tr>

<tr><th>New password:</th><td><input name="newPassword1" size="20" type="password" /></td></tr>

<tr><th>New password (again):</th><td><input name="newPassword2" size="20" type="password" /></td></tr>

<button οnclick="$('frm').action='changepassword.php';$('frm').submit();">Cancel</button>

</td></tr>

</table>

</form>

<div class="msg"><?php

if (isset($_POST["submitted"])) {

changePassword($_POST['username'],$_POST['oldPassword'],$_POST['newPassword1'],$_POST['newPassword2']);

foreach ( $message as $one ) { echo "<p>$one</p>"; }

} ?>

</div>

</body>

</html>

5、访问http://server-ip/changepassword.php，进行密码更改。

allway2

关注

0
点赞
踩
0

收藏

觉得还不错? 一键收藏
0
评论
用户自主更改LDAP密码的PHP WEB程序

本文供系统管理员参考。它将描述如何使用PHP脚本更改ldap密码。为了使用此PHP脚本，您只需要更改几个参数，并在Fedora 33上进行了测试。使用PHP脚本更改LDAP密码的步骤1、确保已正确配置ldap：2、禁用SELinuxsed -i 's/SELINUX\=enforcing/SELINUX\=disabled/g' /etc/selinux/config3、将php-ldap软件包安装到apache服务器中：# yum install php-ldap -y4
复制链接

扫一扫