modification must be an Attribute about node-ldapjs

[jsumners]

I'm sorry, but I cannot tell you anything about the configuration of your LDAP server. I am closing this because we have covered all of the issues that pertain to usage of the ldapjs library.

[jsumners]

I think this is a duplicate of #865. Please use English for issue reports.

[RayllanSouza]

OK sorry. Even after performing the "duplicate" procedures I still get the error. I don't know where the error is

[jsumners]

I do not understand what you mean by "the duplicate procedures". What changes did you make to the code sample you provided that still result in the error?

[RayllanSouza]

Sorry for the "duplicate procedures", it's just that I don't communicate very well using English, I made the change incorrectly, but now after making the change I get a new error.
He follows:

C:\Users\rayllan.souza\Desktop\ldapjs\node_modules\@ldapjs\dn\lib\utils\parse-string\read-attribute-value.js:34
    throw Error('attribute value does not start with equals sign')
    ^

Error: attribute value does not start with equals sign
    at readAttributeValue (C:\Users\rayllan.souza\Desktop\ldapjs\node_modules\@ldapjs\dn\lib\utils\parse-string\read-attribute-value.js:34:11)
    at readAttributePair (C:\Users\rayllan.souza\Desktop\ldapjs\node_modules\@ldapjs\dn\lib\utils\parse-string\read-attribute-pair.js:62:27)
    at parseString (C:\Users\rayllan.souza\Desktop\ldapjs\node_modules\@ldapjs\dn\lib\utils\parse-string\index.js:66:32)
    at DN.fromString (C:\Users\rayllan.souza\Desktop\ldapjs\node_modules\@ldapjs\dn\lib\dn.js:331:18)
    at ensureDN (C:\Users\rayllan.souza\Desktop\ldapjs\node_modules\ldapjs\lib\client\client.js:85:15)
    at Client.modify (C:\Users\rayllan.souza\Desktop\ldapjs\node_modules\ldapjs\lib\client\client.js:473:13)
    at C:\Users\rayllan.souza\Desktop\ldapjs\index.js:30:21
    at Client.callbackWrapper (C:\Users\rayllan.souza\Desktop\ldapjs\node_modules\ldapjs\lib\client\client.js:296:5)
    at Client.emit (node:events:511:28)
    at Socket.onResult (C:\Users\rayllan.souza\Desktop\ldapjs\node_modules\ldapjs\lib\client\client.js:812:14)

Code:

    return new Promise((resolve, reject) => {
 
     try {
      ldapClient.bind("usuarioADM", "senhaADM", err => {
         if (err) {
           reject(err);
         }
 
         ldapClient.modify(user, [
           new ldap.Change({
             operation: 'replace',
             modification: {
              type: "unicodePwd",
              values: [encodePassword(newpassword)]
             }
           })
         ], (error) => {
           if (error) {
             reject(error);
           } else {
             resolve('Successfully password modified.');
           }
         });
       })
      }catch (error) {
       console.error(error);
       reject(error);
 
      }
    })

[jsumners]

What is encodePassword? Does it return a string? What is the value of user? Is it a DN string pointing to the entity to be changed?

Please see

node-ldapjs/test/client.test.js

Lines 661 to 683 in f289008

	tap.test('modify array success', function (t) {
	const changes = [
	new Change({
	operation: 'Replace',
	modification: new Attribute({
	type: 'cn',
	values: ['test']
	})
	}),
	new Change({
	operation: 'Delete',
	modification: new Attribute({
	type: 'sn'
	})
	})
	]
	t.context.client.modify('cn=modify, ' + SUFFIX, changes, function (err, res) {
	t.error(err)
	t.ok(res)
	t.equal(res.status, 0)
	t.end()
	})
	})

[RayllanSouza]

What is encodePassword?
R: Yes, return string;
What is the value of user?
R: Yes, return cn=user

After checking the code you sent I was able to review some things I was doing wrong, but now I get the error "Invalid Credentials" on the bind method even with the correct username and password

[jsumners]

Your example shows a simple username and password combination. Standard LDAP servers require the "username" be a DN string pointing to the user entity in the directory.

[RayllanSouza]

Ok, I added the correct line and the error is gone. Operations error only occurs now, can you tell me if it can be user permission in the domain? I'm trying to create a tool that resets the password of a third-party user, this user who has the name "reset" was given permission to change the password of other users only, he does not have administrator permissions.