Error Codes from LDAP / Microsoft Active Directory authentication

[Yusuf Tran]

Hi Guys,

I've been doing some R&D online over the last few days and am trying to find a way to detect the Microsoft Active Directory (AD) error codes, such that I can detect when an account is disabled, locked, or just can't authenticate.

Have read and tried emulating various guides with no success:

Refs

http://support.microsoft.com/kb/155012
https://bugs.internet2.edu/jira/browse/SIDP-368
http://shibboleth.1660669.n2.nabble.com/Displaying-LDAP-login-errors-on-login-page-td7414097.html


The goal is to give students specific directions on the IDP login page based on the error codes.

Redhat 6.4 - Shibboleth IDP - 2.3.8
Windows Server 2008 R2 - AD

Is there a clear cut way to enable this or a guide compatible with 2.3.8?

Regards
Yusuf