Can I reset the password for my account present in AD LDS through Drupal 8 website password reset form

Drupal version – 8

I am using the Drupal LDAP module to establish connection in between Drupal 8 website and the windows server 2012 AD LDS.
Drupal LDAP -- https://www.drupal.org/project/ldap (version : 8.x-3.0-alpha2)

I have followed instructions below to setup the connection in between D8 and the windows AD LDS
https://www.drupal.org/node/1302032
https://www.drupal.org/node/1053748
https://www.drupal.org/node/1685352

Following functionalities are working fine.

  1. Go to Drupal login page, enter login credentials (Login ID and Password present in LDS)
    1. A new user record will be created if he/she is accessing the site for the first time
    2. User will be logged in if the record is already present in the Drupal 8 DB
  2. Now logout the user, delete the same record from the LDS
  3. Try logging in again with the same credentials, Drupal site will complain saying there is no record.

I want to know if the following can be done

  1. If I do not know the password for my account in LDS, Can I register from the Drupal 8 register page to retrieve my password or to create a new password
  2. If I know the password for my account, Can I still change my LDS password through Drupal 8 password change form

--
Thank you
Prashanth

Comments

plingamn created an issue. See original summary.

plingamn’s picture

Issue summary: View changes
timwood’s picture

Issue summary: View changes

Issue formatting.

plingamn’s picture

Issue summary: View changes
plingamn’s picture

Issue summary: View changes
timwood’s picture

Version: 8.x-3.x-dev » 8.x-3.0-alpha2

Changed version in version field.

grahl’s picture

Priority: Major » Normal

Hi

As long as you have mixed authentication enabled you should be able to use Drupal's authentication as well as LDAP side-by-side and the match is opportunistic, i.e., if you use the password reset function for a user he or she can receive a new password and it doesn't have to match your AD.

Also, you should be able to update your user's data in the directory as long as you have configured the relevant field mapping under "Provisioning to LDAP", though I personally don't have such a setup running.

plingamn’s picture

Hello grahl,

Thank you very much for the insight .. Will work on the field mapping under "Provisioning to LDAP" and see if something can be done.

I really appreciate all your help ..

--
Thank you
Prashanth

timwood’s picture

Hey grahl,
So does that mean that this LDAP suite of modules doesn't support LDAP password management/maintenance at all while in exclusive mode?

I thought the old D6 implementation, using the https://www.drupal.org/project/ldap_integration module supported password manage in the LDAP, but we may have created custom code to do that.

Thanks

grahl’s picture

Will respond next week

plingamn’s picture

Hello grahl,

Any update on the AD password update from the ldap module

--
Thanks
Prashanth

grahl’s picture

Status: Active » Fixed

Hi timwood

Yes, at the moment you'd need to write custom code. Here's the documentation for exclusive mode in Drupal 7 on which 8 is based:
Only LDAP Authentication is allowed except for user 1. If selected, (1) reset password links will be replaced with links to ldap end user documentation below. (2) The reset password form will be left available at user/password for user 1; but no links to it will be provided to anonymous users. (3) Password fields in user profile form will be removed except for user 1.

So it seems this was out-of-scope at least since 7.x-2.x. However, you can probably take a look at the password reset form and without too much effort build a form that triggers a user data update if the mail token is valid.

Marking as fixed since the primary and secondary questions on password synchronization are answered. Should there remain an issue with syncing the password field to LDAP, please open a bug.

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.

plingamn’s picture

Thanks a lot grahl,

Sorry for the late response.
I have started writing custom code for password reset. Will open a new bug in case if I am stuck some where else.

I really appreciate all your help..

--
Best
Prashanth