Replaced password encoding scheme
Replaced password encoding scheme

Got the idea from Example #5 at php.net/manual/en/function.ldap-modify-batch.php, seems to be working fine.

BTW: ldap_modify_batch has potential to eliminate the need for an admin-user in config.php, but still requires fairly recent PHP.
canbican/ad-change-pass,canbican/ad-change-pass