Date: 11-04-2022

The ldappasswd command is used for updating the userPassword on person-type entries. ldappasswd sends a Password Modify control so that the password is hashed before storing and also triggers password policy checks if policies are in place and enforced.

Because ldappasswd forces password hashing, it is safer than simply updating a password using the ldapmodify command.

ldappasswd Examples

These examples use the “ldap:///” URI for the host (localhost, unencrypted). This should be changed to “ldaps://<uri>” to perform these functions to servers over the network.

Update User Password

Update a user's password using simple bind as admin and prompting for the old and new password:

ldappasswd -xH ldap:/// -D <adminDN> -WAS "<userDN>"

Self-serve Password Update

A user can change their own password using simple bind as themself and prompting for the old and new password:

ldappasswd -xH ldap:/// -D "<userDN>" -WAS "<userDN>"

For more information please see the ldappasswd Man Page.