Module password_write 

Structs

UnsettledWrites 🔒

Targets whose last write got no answer, mapped to the start of the attempt that sent it, so a later attempt doesn’t inherit the entry.

Traits

PasswordWriter 🔒

The directory operations the write needs, so apply_password_write can be tested without a domain controller.

Functions

apply_password_write 🔒

A permanent rejection means the write didn’t land, unless an earlier write in this attempt got no answer and may have. Only then is the effect settled by binding as the account with the new password, since every failed bind counts towards locking the account out.

effect_from_probe 🔒

Only invalidCredentials proves the write didn’t land; any other answer says nothing. A locked out or disabled account also answers invalidCredentials, so it reads as not applied.

encode_unicode_pwd 🔒

The unicodePwd value: the password in double quotes, as UTF-16LE with no byte-order mark.