Question

I’m syncing users from an external system into ours. I need to set the user’s password in our Active Directory.

I am only provided SHA1’s of the external user’s passwords and setPassword will hash whatever I is input.

• Is setting the User’s unicodePwd the actual hash field?
  • If so, can I just set it to the provided hash?
  • If not, how/can I set the hash being stored by Active-Directory?

Answer 1

As far as I understand you can’t set unicodePwd to the actual hash field. You can use the userPasswd as you want for your own check but it’s not used bys Active-Directory.