Presentation
Self Service Password is a PHP application that allows users to change their password in an LDAP directory.
The application can be used on standard LDAPv3 directories (OpenLDAP, OpenDS, ApacheDS, Sun Oracle DSEE, Novell, etc.) and also on Active Directory.
It has the following features:
Samba mode to change Samba passwords
Active directory mode
Local password policy:
Minimum/maximum length
Forbidden characters
Upper, Lower, Digit or Special characters counters
Reuse old password check
Password same as login
Complexity (different class of characters)
Help messages
Reset by questions
Reset by mail challenge (token sent by mail)
Reset by SMS (trough external Email 2 SMS service or SMS API)
Change SSH Key in LDAP directory
Captcha (built-in)
Mail notification after password change
Hook script before and after password change
Prerequisite
PHP (7 or later)
PHP extensions required:
php-curl (haveibeenpwned api)
php-gd (captcha)
php-filter
php-ldap
php-mbstring (reset mail)
php-openssl (token crypt, probably built-in)
Smarty 3
strong cryptography functions available (for random_compat, PHP 7 or libsodium or /dev/urandom readable or php-mcrypt extension installed)
valid PHP mail server configuration (reset mail)
valid PHP session configuration (reset mail)
Documentation
