Change password flow ?

[Tom Zeller]

> [snip]

Okay.

WIP sketch of states/steps :

+ conditional business logic
+ lockout ? (e.g. too many attempts)
+ log/audit intent to change password
+ change password
++ validate request (e.g. pwd complexity rules)
++ execute request (default to Ldaptive)
++ handle response
+++ handle error
+++ return something/reroute on success
+ audit
+ notify (e.g. via email to user)
+ increment counters/metrics (e.g. for lockout)

Not familiar enough with JAAS to understand what you mean regarding
the series of beans, but it makes me think of multiple "change
password" steps from the above sketch.

Tom