Change LDAP password remotely
reddit / selfhosted

----------------------------------------------------------------------
jack_of_caruggi · 2023-12-27 13:41

what is a secure way to permit remote change for Active Directory from
outside of office, with a Web interface?

I already know is not a best practise :) but I'm curious to evaluate
some ideas

​

thanks

----------------------------------------------------------------------
bufandatl · 2023-12-27 14:15

Why shouldn’t it be best practice. But using LDAPs for in SSL
encrypted LDAP and via a VPN you should be just as secure as if
someone in office changes their AD/LDAP password. It even will be
double encrypted once through SSL and second through the VPN tunnel.

In the company I work for over 10k employees do this all the time.
Without it remote work wouldn’t be possible.

----------------------------------------------------------------------
Dizzybro · 2023-12-27 14:17

Password write-back with the microsoft self service tool;

​

https://learn.microsoft.com/en-
us/entra/identity/authentication/concept-sspr-writeback

----------------------------------------------------------------------
jack_of_caruggi · 2023-12-27 14:17

sorry, I add now via web... I forgot :( sorry

----------------------------------------------------------------------
ElevenNotes · 2023-12-27 18:44

Is the webserver under your control? If yes, simple LDAP via SSL, if
not, a VPN connection and still using LDAP SSL.