• 设为首页
  • 点击收藏
  • 手机版
    手机扫一扫访问
    迪恩网络手机版
  • 关注官方公众号
    微信扫一扫关注
    迪恩网络公众号
登陆 注册
描述文字

用户自主更改LDAP密码的PHP WEB程序

原作者: [db:作者] 来自: [db:来源] 收藏 邀请

本文供系​​统管理员参考。它将描述如何使用PHP脚本更改ldap密码。为了使用此PHP脚本，您只需要更改几个参数，并在Fedora 33上进行了测试。

使用PHP脚本更改LDAP密码的步骤

1、确保已正确配置ldap：

2、禁用SELinux

sed -i 's/SELINUX\=enforcing/SELINUX\=disabled/g' /etc/selinux/config
3、将php-ldap软件包安装到apache服务器中：

# yum install php-ldap -y

4、创建changepassword.php文件并将其放入您的apache根目录：

# vi /var/www/html/changepassword.php

修改.php文件中的$ server和$ dn：

<?php

$message = array();

 

function changePassword($user,$oldPassword,$newPassword,$newPasswordCnf){

  global $message;

 

  $server = "localhost";

  $dn = "ou=People,dc=example,dc=com";

  $userid = $user;

 

  $user = "uid=".$user.",".$dn;

  error_reporting(0);

  ldap_connect($server);

  $con = ldap_connect($server);

  ldap_set_option($con, LDAP_OPT_PROTOCOL_VERSION, 3);

 

  // bind anon and find user by uid

  $sr = ldap_search($con,$dn,"(uid=*)");

  $records = ldap_get_entries($con, $sr);

 

  $message[] = "Username: " . $userid;

  //$message[] = "DN: " . $user;

  //$message[] = "Current Pass: " . $oldPassword;

  //$message[] = "New Pass: " . $newPassword;

 

  /* try to bind as that user */

  if (ldap_bind($con, $user, $oldPassword) === false) {

    $message[] = "Error E101 - Current Username or Password is wrong.";

    return false;

  }

  if ($newPassword != $newPasswordCnf ) {

    $message[] = "Error E102 - Your New passwords do not match! ";

    return false;

  }

  if (strlen($newPassword) < 4 ) {

    $message[] = "Error E103 - Your new password is too short! ";

    return false;

  }

  if (!preg_match("/[0-9]/",$newPassword)) {

    $message[] = "Error E104 - Your new password must contain at least one digit. ";

    return false;

  }

  if (!preg_match("/[a-zA-Z]/",$newPassword)) {

    $message[] = "Error E105 - Your new password must contain at least one letter. ";

    return false;

  }

  if (!preg_match("/[A-Z]/",$newPassword)) {

    $message[] = "Error E106 - Your new password must contain at least one uppercase letter. ";

    return false;

  }

  if (!preg_match("/[a-z]/",$newPassword)) {

    $message[] = "Error E107 - Your new password must contain at least one lowercase letter. ";

    return false;

  }

 

  /* change the password finally */

  $entry = array();

  $entry["userPassword"] = "{SHA}" . base64_encode( pack( "H*", sha1( $newPassword ) ) );

 

  if (ldap_modify($con,$user,$entry) === false){

    $message[] = "E200 - Your password cannot be change, please contact the administrator.";

  } else {

    $message[] = " Your password has been changed. ";

    //mail($records[0]["mail"][0],"Password change notice : ".$userid," Your password has just been changed.");

  }

}

 

?>

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">

<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>

  <title>Change your LDAP password</title>

  <style type="text/css">

  body { font-family: Verdana,Arial,Courier New; font-size: 0.7em;  }

  input:focus { background-color: #eee; border-color: red; }

  th { text-align: right; padding: 0.8em; }

  #container { text-align: center; width: 500px; margin: 5% auto; }

  ul { text-align: left; list-style-type: square; }

  .msg { margin: 0 auto; text-align: center; color: navy;  border-top: 1px solid red;  border-bottom: 1px solid red;  }

  </style>

  <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>

</head>

<body>

  <div id="container">

    <h2>Change your LDAP password</h2>

<ul>

  <li> Your new password must be 8 characters long and contain at least one letter and one digit. </li>

</ul>

    <form action="<?php print $_SERVER['PHP_SELF']; ?>" name="passwordChange" method="post">

      <table style="width: 400px; margin: 0 auto;">

        <tr><th>Username:</th><td><input name="username" type="text" size="20" autocomplete="off" /></td></tr>

        <tr><th>Old password:</th><td><input name="oldPassword" size="20" type="password" /></td></tr>

        <tr><th>New password:</th><td><input name="newPassword1" size="20" type="password" /></td></tr>

        <tr><th>New password (again):</th><td><input name="newPassword2" size="20" type="password" /></td></tr>

        <tr><td colspan="2" style="text-align: center;" >

          <input name="submitted" type="submit" value="Change Password"/>

          <button οnclick="$('frm').action='changepassword.php';$('frm').submit();">Cancel</button>

        </td></tr>

      </table>

    </form>

    <div class="msg"><?php

      if (isset($_POST["submitted"])) {

        changePassword($_POST['username'],$_POST['oldPassword'],$_POST['newPassword1'],$_POST['newPassword2']);

        foreach ( $message as $one ) { echo "<p>$one</p>"; }

      } ?>

    </div>

  </div>

</body>

</html>

 

5、访问http://server-ip/changepassword.php，进行密码更改。

 

鲜花
握手
雷人
路过
鸡蛋
该文章已有0人参与评论

请发表评论

全部评论

专题导读
More+
上一篇：
PHP for Linux之xml2-config这个文件没找到发布时间：2022-07-10
下一篇：
php--判断是否是手机端发布时间：2022-07-10
热门推荐
More+
热门话题
More+
阅读排行榜

扫描微信二维码

查看手机版网站

随时了解更新最新资讯

139-2527-9053

在线客服（服务时间 9:00～18:00）

在线QQ客服
地址：深圳市南山区西丽大学城创智工业园
电邮：jeky_zhao#qq.com
移动电话：139-2527-9053

Powered by 互联科技 X3.4© 2001-2213 极客世界.|Sitemap