> suitably abstracted [...] change step itself FWIW My plan is to use Ldaptive's "Password Modify", but I understand the need for abstraction. Tom http://www.ldaptive.org/docs/guide/operations/extended/passwordmodify.html