simple-ldap-client/changes.js

const ldap = require('ldapjs')

function encodePassword (password) {
  var newPassword = ''
  password = "\"" + password + "\""
  for(var i = 0; i < password.length; i++){
    newPassword += String.fromCharCode( password.charCodeAt(i) & 0xFF,(password.charCodeAt(i) >>> 8) & 0xFF)
  }
  return newPassword
}

//some useful constants from lmaccess.h used for setting LDAP user attributes
const UF_ACCOUNTDISABLE = 0x0002
const UF_PASSWD_NOTREQD = 0x0020
const UF_PASSWD_CANT_CHANGE = 0x0040
const UF_NORMAL_ACCOUNT = 0x0200
const UF_DONT_EXPIRE_PASSWD = 0x10000
const UF_PASSWORD_EXPIRED = 0x800000

module.exports = {
  replacePassword (password) {
    return new ldap.Change({
      operation: 'replace',
      modification: {
        unicodePwd: encodePassword(password)
      }
    })
  },
  deletePassword(password) {
    return new ldap.Change({
      operation: 'delete',
      modification: {
        unicodePwd: encodePassword(password)
      }
    })
  },
  addPassword(password) {
    return new ldap.Change({
      operation: 'add',
      modification: {
        unicodePwd: encodePassword(password)
      }
    })
  },
  enableUser() {
    return new ldap.Change({
      operation: 'replace',
      modification: {
        userAccountControl: String(UF_NORMAL_ACCOUNT)
      }
    })
  },
  disableUser() {
    return new ldap.Change({
      operation: 'replace',
      modification: {
        userAccountControl: String(UF_ACCOUNTDISABLE)
      }
    })
  }
}