Setup AD password change page using PHP over LDAPS

To setup AD password change page using PHP over LDAPS use:

Verify that connection to AD server over LDAPS is working as described at Setup AD to respond to LDAP queries over LDAPS protocol
git clone https://github.com/canbican/ad-change-pass
yum -y install php-ldap
Download HTML Purifier from http://htmlpurifier.org/ and copy internal contents of extracted "lib" folder to ad-change folder.
Comment line 901 of HTMLPurifier/Config.php using // php comment option

Update ad-change/functions.php to have

if (isset($info[0]["lockoutTime"]))
$isLocked = $info[0]["lockoutTime"];
else
$isLocked = 0;

in place of

$isLocked = $info[0]["lockoutTime"];

Note that both old and new passwords might work for 15min after changing password.

Anonymous