Active directory web password reset | Stephen's Space on the Web

Home

Active directory web password reset

On January 15, 2009, in Uncategorized, by admin

This is a simple webform that asks for the username and when you click submit it will generate a random password.

default.htm







 
 

FIT Username:  
  

 

 


  







All usage is monitored and logged.




fitPassReset.pl

use CGI;use Win32::OLE;use File::Log;

#ADS Varsuse constant ADS_PROPERTY_CLEAR => 1;use constant ADS_PROPERTY_UPDATE => 2;use constant ADS_PROPERTY_APPEND => 3;use constant ADS_PROPERTY_DELETE => 4;use constant vbNull => 1;use constant ADS_SECURE_AUTHENTICATION => 1;use constant ADS_USE_ENCRYPTION => 2;

print "Content-type: text/html\n\n";$query = new CGI;

$Win32::OLE::Warn = 3;

$base = "dc=domain,dc=local";$user = $query->param('username');

#Full CN of admin user.$adminuser = "cn=admin,cn=Users,dc=domain,dc=local";$adminpass = "AdminPass";

#find the User's DNmy $connObj = Win32::OLE->new('ADODB.Connection');$connObj->{Provider} = "ADsDSOObject";

$connObj->Properties->{'User ID'} = $adminuser;$connObj->Properties->{'Password'} = $adminpass;

$connObj->Open;my $commObj = Win32::OLE->new('ADODB.Command');

$commObj->{ActiveConnection} = $connObj;$commObj->Properties->{'Page Size'} = 1000;

#Get DCmy $MyDomain = Win32::OLE->GetObject("LDAP://RootDSE");$MyDC = $MyDomain->Get("dnsHostName");

#Generate Ldap Search String#my $query = "<ldap://$mydc/$base>;";my $query = "<ldap://$base>;";

$query .= "((cn=$user));";$query .= "distinguishedName,cn;";$query .= "subtree";

$commObj->{CommandText} = $query;

my $resObj = $commObj->Execute($query); die "Could not query $base: ",$Win32::OLE::LastError,"\n" unless ref $resObj;

my $total = 0;while (!($resObj->EOF)) {

	$strUserDN = $resObj->Fields("distinguishedName")->value;        $total++; $resObj->MoveNext;        #print $strUserDN;}

#Generate random number for passwordmy $random_number = int(rand(300)) + 1000;

$objNamespaceLDAP = Win32::OLE->GetObject('LDAP:');$objMyObject = $objNamespaceLDAP->OpenDSObject("LDAP://" .$strUserDN, $adminuser, $adminpass, ADS_USE_ENCRYPTION + ADS_SECURE_AUTHENTICATION);$objMyObject->SetPassword("Fit$random_number");$objMyObject->SetInfo;

#my $objUser = Win32::OLE->GetObject("LDAP://" . $strUserDN, "<span class="mh-email">w<a href='http://www.google.com/recaptcha/mailhide/d?k=01LiF0qVtB3XdJLGBSZiRw2Q==&c=4nYsKVn5t_cBX478mGMfiw==' onclick="window.open('http://www.google.com/recaptcha/mailhide/d?k=01LiF0qVtB3XdJLGBSZiRw2Q==&c=4nYsKVn5t_cBX478mGMfiw==', '', 'toolbar=0,scrollbars=0,location=0,statusbar=0,menubar=0,resizable=0,width=500,height=300'); return false;" title="Reveal this e-mail address">...</a>@what.com</span>",$adminpass,1);#$objUser->SetPassword("Fit$random_number");

#expiring the password give an error so we will fix that later.#$objUser->Put("PasswordExpired", 1);#$objUser->SetInfo;

#Write to Logmy $log = File::Log->new(logFileMode => '>>', dateTimeStamp => 1,);$log->exp("User:$strUserDN, NumberofUsers:$total\n");$log->close();

print <<"EOF"; <html><head>

</head>

<body>
<h1>The new password is: </h1>


<h2>Fit$random_number</h2>

Return to <a href="default.htm">Home</a>.

</body></html>EOF
</pre>
						<div class="clear"></div>	
													
						<div class="clear"></div>
					</div>	
				</div>
												
								
			
<div class="hl"></div>
	<div class="post-footer">
					<div class="left">
									
			</div>
			<div class="right">
					<a href="http://www.facebook.com/sharer.php?u=http://www.stephenjc.com/2009/01/15/active-directory-web-password-reset/&t=Active directory web password reset" title="Share on Facebook" rel="nofollow" target="_blank"><img src="http://www.stephenjc.com/wp-content/themes/iblog/images/icons/ico-facebook.png" alt="Facebook" /></a> 
					<a href="http://twitter.com/home/?status=Active directory web password reset%20http://www.stephenjc.com/2009/01/15/active-directory-web-password-reset/" title="Share on Twitter" rel="nofollow" target="_blank"><img src="http://www.stephenjc.com/wp-content/themes/iblog/images/icons/ico-twitter.png" alt="Twitter" /></a> 
					<a href="http://del.icio.us/post?url=http://www.stephenjc.com/2009/01/15/active-directory-web-password-reset/&title=Active directory web password reset" title="Share on Delicious" rel="nofollow" target="_blank"><img src="http://www.stephenjc.com/wp-content/themes/iblog/images/icons/ico-del.png" alt="Delicious" /></a>					<a href="http://www.mixx.com/submit?page_url=http://www.stephenjc.com/2009/01/15/active-directory-web-password-reset/" title="Share on Mixx" rel="nofollow" target="_blank"><img src="http://www.stephenjc.com/wp-content/themes/iblog/images/icons/ico-mixx.png" alt="Mixx" /></a> 					<a href="http://www.stumbleupon.com/submit?url=http://www.stephenjc.com/2009/01/15/active-directory-web-password-reset/&title=Active directory web password reset" title="Share on StumbleUpon" rel="nofollow" target="_blank"><img src="http://www.stephenjc.com/wp-content/themes/iblog/images/icons/ico-stumble.png" alt="StumbleUpon" /></a> 					<a href="http://digg.com/submit?phase=2&url=http://www.stephenjc.com/2009/01/15/active-directory-web-password-reset/&title=Active directory web password reset" title="Share on Digg" rel="nofollow" target="_blank"><img src="http://www.stephenjc.com/wp-content/themes/iblog/images/icons/ico-digg.png" alt="Digg" /></a>				
			</div>
				<br class="fix" />
		
	</div>		</div><!--post -->

	</div>
	
			<div class="tags">
			Tagged with: <a href="http://www.stephenjc.com/tag/active/" rel="tag">active</a> • <a href="http://www.stephenjc.com/tag/directory/" rel="tag">directory</a> • <a href="http://www.stephenjc.com/tag/password/" rel="tag">password</a> • <a href="http://www.stephenjc.com/tag/perl/" rel="tag">perl</a> • <a href="http://www.stephenjc.com/tag/reset/" rel="tag">reset</a> • <a href="http://www.stephenjc.com/tag/web/" rel="tag">web</a> 
		</div>
		
	<div class="clear"></div>
	
				
						
			<div class="postwrap commentswrap ">	
			<div class="hentry">		
				<div class="copy"> 
<div id="comments">
	
	
	
									<div id="respond">
				<h3 id="reply-title">Leave a Reply <small><a rel="nofollow" id="cancel-comment-reply-link" href="/2009/01/15/active-directory-web-password-reset/#respond" style="display:none;">Cancel reply</a></small></h3>
									<form action="http://www.stephenjc.com/wp-comments-post.php" method="post" id="commentform">
																			<p class="comment-notes">Your email address will not be published. Required fields are marked <span class="required">*</span></p>							<p class="comment-form-author"><label for="author">Name</label> <span class="required">*</span><input id="author" name="author" type="text" value="" size="30" aria-required='true' /></p>
<p class="comment-form-email"><label for="email">Email</label> <span class="required">*</span><input id="email" name="email" type="text" value="" size="30" aria-required='true' /></p>
<p class="comment-form-url"><label for="url">Website</label><input id="url" name="url" type="text" value="" size="30" /></p>
												<p class="comment-form-comment"><label for="comment">Comment</label><textarea id="comment" name="comment" cols="45" rows="8" aria-required="true">
						You may use these HTML tags and attributes:  <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

iBlog by PageLines