simple-ldap-client/resetPassword.js

'use strict'
const ldap = require('ldapjs')
const ldapChanges = require('./changes')
const utils = require('./utils')

function resetPassword ({adminDn, adminPassword, newPassword, userDn, upn, username, email}) {
  return new Promise((resolve, reject) => {
    // console.log('starting LDAP password reset')
    // validate input
    if (
      (!userDn || userDn === '') &&
      (!upn || upn === '') &&
      (!username || username === '') &&
      (!email || email === '')
    ) {
      // inform the user of the error of their ways
      return reject('userDn, upn, username, or email is required')
    }
    // continue validating input
    if (!newPassword || newPassword === '') {
      // inform the user of the error of their ways
      return reject('newPassword is required')
    }
    // create client connection
    const client = this.getClient()
    // login to LDAP
    client.bind(adminDn, adminPassword, async (err) => {
      // console.log('ldap client bind')
      if (err) {
        console.log(err)
        client.destroy()
        return reject(err)
      }
      // set up changes to replace user password
      const changes = [ldapChanges.replacePassword(newPassword)]
      // figure out which filter to use to identify the user
      let filter
      if (username) {
        filter = '(sAMAccountName=' + username + ')'
      } else if (email) {
        filter = '(mail=' + email + ')'
      } else if (upn) {
        filter = '(userPrincipalName=' + upn + ')'
      } else if (userDn) {
        filter = '(distinguishedName=' + userDn + ')'
      }
      // find user by filter
      const opts = {
        filter,
        scope: 'sub',
        attributes: ['objectGUID']
      }

      try {
        const user = await utils.applyChanges.call(this, client, this.baseDn, opts, changes)
        // console.log('Password reset for ' + user.dn)
        client.destroy()
        resolve(user)
      } catch (e) {
        client.destroy()
        reject(e)
      }
    })
  })
}

module.exports = resetPassword