LDAPWiki: Active Directory and Passwords

Overview#

Some detailed information on Active Directory and Passwords

Microsoft Active Directory uses the UnicodePwd instead of the more common userPassword unless you have Enable UserPassword in Microsoft Active Directory.

Overview
Setting and Changing Microsoft Active Directory Passwords
AD Password Filters[1]
Windows Default Password Policy
Some Active Directory and Passwords Examples
DirXML Password Flow From Active Directory to eDirectory
A different Approach
Enable UserPassword in Microsoft Active Directory
How passwords are used in Windows
More Information

Setting and Changing Microsoft Active Directory Passwords #

Some details on Setting and Changing Microsoft Active Directory Passwords.

AD Password Filters [1]#

Password filters provide a way for you to implement password policy and change notification. Passfilt.dll is Microsoft's implementation of a password filter.

Windows Default Password Policy #

A default password filter ships with Windows Default Password Policy.

Some Active Directory and Passwords Examples #

"Password Hook

" is a Window Password Filter DLL that sends any Windows password changes to a script/program, stored in the registry by a configuration utility. The DLL is effectively a generic windows password filter.

The Active Directory SHA-1 hex password filter|http://code.google.com/p/sha1hexfltr/] is a password filter stores that password in SHA-1 hash in an attribute in Microsoft Active Directory. (Link no longer available)

DirXML Password Flow From Active Directory to eDirectory #

We describe the DirXML Password Flow From Active Directory to eDirectory along with some troubleshooting tips.

A different Approach#

SUN/Oracle came up with a different method to allow password synchronization with Active Directions that they call, On-Demand Password Synchronization.