Description:
------------
To change an Active Directory password over LDAP requires either SSL, 
TLS or LDAP_OPT_ENCRYPT (which in turn requires Kerberos)

You can change the password without SSL (which is no easy feat to 
install SSL on a domain controller) using LDAP_OPT_ENCRYPT but it seems 
to that ldap_set_option does not support this constant.



Reproduce code:
---------------
ldap_set_option($cn, LDAP_OPT_ENCRYPT, 1);
ldap_mod_replace($cn, $dn, array('unicodePwd'=>$unicodePassword));

Expected result:
----------------
Password changed in AD

Actual result:
--------------
Server is unwilling to perform as it requires SSL or encryption