ldaptive and openldap password policy

[Daniel Fisher]

On Tue, Jun 25, 2013 at 4:55 AM, Francesco Malvezzi <
francesco.malvezzi at unimore.it> wrote:

> Hi all,
>
> I have just noticed that the great ldaptive ldap library allows handling
> password expiration policies 1) with just a few lines in login.config:
>
> ShibUserPassAuth {
>
>     org.ldaptive.jaas.LdapLoginModule sufficient
>     ldapUrl="ldap://ldap1.test.it:389"
>     baseDn="ou=people,dc=test,dc=it"
>     bindDn="cn=idp,ou=agents,dc=test,dc=it"
>     bindCredential="secret"
>     useStartTLS="true"
>     authenticationControls="org.ldaptive.control.PasswordPolicyControl"
>
>
> authenticationResponseHandlers="org.ldaptive.auth.ext.PasswordPolicyAuthenticationResponseHandler"
>     userFilter="(uid={user})";
> }
>
> With ldaptive in jaas, login.jsp page receives a LoginException message
> with the password policy informations ready for parsing.
>
> No need for a custom authenticationHandler.
>
> This solves for us a tricky problem with the openldap password policy
> overlay.
>
> Do you see something against this solution (apart from the need to add a
> jar in lib)?
>

No issues that I can think of, you should be able to drop the jar in and
use it. As Peter said, a contribution to the wiki would be great.

--Daniel Fisher
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130625/f0a1e0a5/attachment.html