Reset Password Fail in AD, ADLDS or ADAM

When reset password using System.DirectoryServices.Protocols APIs, it failed with exception type DirectoryOperationException.  DirectoryOperationException.Response.ErrorMessage contains following string "problem 5012 (DIR_ERROR)".

If the AD, ADLDS or ADAM connection is not SSL enabled, by default the password string must be encrypted.  That's why above exception is thrown when reset password on non-SSL connection.

In order to work around this issue while not have to enable SSL connection, abbribute "dSHeuristics" needs to be set to 0000000001001 to allow clear text password being sent.