LDAP :: Change password (encoded password) Problem!

[new_2_java]

Hello everyone,
I am writing a Java program to reset LDAP account password. I know the password should be quoted passwrod and then encoded in UTF-16. I have a question, if someone can confirm please.

I am getting encoded password as follow:

 String oldPassword = "Password1234";
 String newPassword = "Password9999";

 String oldQuotedPassword = "\"" + oldPassword + "\"";  
 byte[] oldUnicodePassword = oldQuotedPassword.getBytes("UTF-16LE");  
 String newQuotedPassword = "\"" + newPassword + "\"";  
 byte[] newUnicodePassword = newQuotedPassword.getBytes("UTF-16LE");

 System.out.println("Old Password: " + new String(oldUnicodePassword));
 System.out.println("New Password: " + oldUnicodePassword);
 System.out.println("Old unicode Password: " + new String(newUnicodePassword));
 System.out.println("Old unicode Password: " + newUnicodePassword);

 ==============================================
 Output: First run
 Old Password: "Password1234"
 New Password: "Password9999"
 Old unicode Password: [B@e015ef 
 New unicode Password: [B@1ce02ae1

 Output: Second run
 Old Password: "Password1234"
 New Password: "Password9999"
 Old unicode Password: [B@5fd9fb 
 New unicode Password: [B@e015ef

 Output: Third run
 Old Password: "Password1234"
 New Password: "Password9999"
 Old unicode Password: [B@e015ef 
 New unicode Password: [B@1c03ae1


 And so on....

Now my question is, why the value of encoded password is deffirent each time program runs? Is it expected? Because I set the password encoded value as my password value in AD, and if it's deffirent each time, I don't think it's gonna work.

Here's how I set password:

ModificationItem[] mod = new ModificationItem[2];
mod[0]= new ModificationItem(DirContext.REMOVE_ATTRIBUTE, new BasicAttribute("univodePwd", oldUnicodePassword));
mod[0]= new ModificationItem(DirContext.ADD_ATTRIBUTE, new BasicAttribute("univodePwd", newUnicodePassword));
ctx.modifyAttributes(myDistinguishedName, mod);

So, when I update the password, I get a success message that password is updated. But when I try to login with new password (Password9999), then I get a login faileur. I can not login with old password (Password1234) either.

My assumption is that the password is reset, but to something else and it's not my new password (Password9999). I am not sure if I get the unicoded password correctly. Please advise...

[new_2_java]

And as a result of this, I am getting the following error:

LDAP: error code 19 - 0000052D: AttrErr: DSID-3190f80, #1:
            0: 0000052D: DSID-3190f80, problem 1005 (CONSTRAIN_ATT_TYPE), data 0. Att 9005a (UnicodePwd)

I believe it has to do with my UnicodePwd value of the password.

Any advise, please?

[new_2_java]

anyone help please?

[Sky Diploma]

 System.out.println("Old Password: " + new String(oldUnicodePassword));
 System.out.println("New Password: " + oldUnicodePassword);
 System.out.println("Old unicode Password: " + new String(newUnicodePassword));
 System.out.println("Old unicode Password: " + newUnicodePassword);

This snippet doesn't match to your output. Have you made any modifications?

[new_2_java]

Yeah sorry for that, it's actually this:

System.out.println("Old Password: " + new String(oldUnicodePassword));
System.out.println("New Password: " + new String(newUnicodePassword);
System.out.println("Old unicode Password: " + oldUnicodePassword);
System.out.println("New unicode Password: " + newUnicodePassword);

[Sky Diploma]

I guess this is because oldUnicodePassword and newUnicodePassword correspond to the location of the byte array and not its value. So everytime you instantiate a byte[] you would get a unique location of storage whenever you call System.out.println(byteArray). Even when the values stored are the same.

If you wish to compare contents, you could convert the byte array into strings or compare each element of Array1 to Array2.

[new_2_java]

Thank you for your reply.
Yes, you are 100% correct! Removing sysout from my code, indeed worked.
thanks.