I'm trying to determine under what scenarios LDAPS would refuse to allow a modify request. My understanding is that as long as the client is connecting via SSL, the request would be allowed.
I'm using PHP to attempt to modify user passwords. I've gotten past all of the syntax and formatting issues, but now I'm up against the "Server is unwilling to perform" message. Initially, I was ignoring the SSL certificate and thought that was the problem. Now I'm accepting the certificate and still getting the error.
Before I go much farther, I need to know how the Windows 2008 R2 domain controller looks at the modify request and see what, if anything else, it is requiring.