Can a Shibboleth IdP release the internal LDAP attribute "pwdChangedTime" to a Shibboleth SP?

Marco Malavolti marco.malavolti at garr.it
Fri Sep 20 03:37:55 EDT 2013


Hi to all,

today I would understand if there is a solution for a Shibboleth IdP to 
send the internal LDAP attribute "pwdChangedTime", included into 
ppolicy.schema <http://www.zytrax.com/books/ldap/ape/ppolicy.html>, to a 
Shibboleth SP.

This attribute may be used from a Shibboleth SP to decide if an user 
uses an expired password for its resource or not.

Can anybody help me, please?

Thank you so much for your great job!

Regards,
Marco
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130920/432ebdfa/attachment.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3235 bytes
Desc: Firma crittografica S/MIME
Url : http://shibboleth.net/pipermail/users/attachments/20130920/432ebdfa/attachment.bin 


More information about the users mailing list