Kerberos and AD

[GrumpyMailImporter]

Will Kerberos authentication work for changing Active Directory passwords or does LDAPS with certificates need to be used?

[coudot]

The product currently only support LDAP protocol to change passwords

[GrumpyMailImporter]

Kerberos is mentioned in the LDAP connection setup documentation though?

[coudot]

Indeed, you use Kerberos to authenticate, to avoid storing the service account password in the configuration file. Kerberos cannot be used to update the password.

[GrumpyMailImporter]

Right, so if Kerberos is used as the authentication method, then users should be able to use the portal to change their AD password?

[GrumpyMailImporter]

What I'd like to do is change Active Directory passwords without having to install certificates. Would using Kerberos achieve that goal or would certificates with secure LDAP still be required?

[coudot]

Installing CA certificate is easy.

Again, you can't use Kerberos to change passwords, so forget this option, unless you code it by yourself.