In order for pam_ldap to be capable of changing a user’s password in Active Directory, the
pam_password parameter must be set to

A.
win

B.
ldap

C.
ad

D.
active_directory