PHP, LDAP and Active Directory

[jesus_hairdo]

I am currently investigating the possibility of using Active Directory to store all personal information about our employees.

I am wanting to administor as much as possible using PHP+LDAP on a linux+apache server.

I have figured out how to do most of the actions i need to do, the main problems i don't have sorted so far are those connected with user accounts, the user attributes/properties in particular are:

attribute 'accountExpires' - this is reported as a LARGE INTEGER, containing seconds since 00:00:00 January 1, 1970.

setting the user's password,

how to enable a 'disabled' user account,

Group membership - i can set group memberships with the exception of the 'Primary Group'

Can anyone shed any light on these questions??
Or point me in the direction of any on-line resources which may help??

Thanks,

Jamie

[kubla]

setting the user's password,

On the system level?

If so, you can use the perl routine "crypt" to hash the password before passing it to useradd.

Or am I missing the object of what you're trying to do?

ie:

$password=perl -e 'print crypt( '$password', "ab" )';
useradd -m $username -p$password

[jesus_hairdo]

When i mean setting a user's password, i meant setting a Windows Active Directory User's password using LDAP.

to clarify all of the questions are relating to Active Directory & LDAP.

Thanks anyway,

Jamie