Error Codes from LDAP / Microsoft Active Directory authentication

Tue May 21 10:10:21 EDT 2013

On Tue, 21 May 2013, Yusuf Tran wrote:

> The goal is to give students specific directions on the IDP login page based on the error codes.

You can do this by fielding the sub error code that MSAD sends along
with the Ldap Error 49

In my IdP I bubble the error code back up to the js level and field it
there.. I'm sure you can do it earlier in the servlet or IdP but js was
easy to see / do.

Here are some MS sub codes.. that ride along with the Ldap Error 49 when
using the vt-ldap module..

(775) account locked

(701) account expired

(532) password expired

(52e) invalid credentials

(533) account disabled

HTH.. let me know if you need more.

------
thanks
  kevin.foote