Which OpenLDAP client command can be used to change the password for an LDAP entry?
(Specify ONLY the command without any path or parameters.)
Correct Answer:
ldappasswd
Explanation:
The ldappasswd command is an OpenLDAP client tool that can be used to change the password for an LDAP entry. It can be used to change the password of the user who is binding to the LDAP server, or the password of another user if the bind user has sufficient privileges. The ldappasswd command requires the user to specify the LDAP server location, the bind DN and password, the old password, and the new password. The old and new passwords can be given on the command line, through prompts, or from files. The ldappasswd command can also use SASL authentication mechanisms instead of simple authentication. The ldappasswd command follows the general syntax of:
ldappasswd [options] [user]
where user is the DN of the entry whose password is to be changed. If omitted, the bind DN is used.
References:
LPIC-2 Exam 202 Objectives, Objective 207.3: LDAP Operations
How To Change Account Passwords on an OpenLDAP Server, DigitalOcean
ldappasswd: change the password of an LDAP entry, openldap-clients Manual Page How To Change an OpenLDAP Password, Tyler's Guides