authentication failure reasons in IdP logs

[Kevin Foote]

On Jun 19, 2014, at 2:17 PM, David Bantz <dabantz at alaska.edu> wrote:

> I appreciate the references to details Kevin, but as my post indicated, I’m OK with the 
> ‘normal’ failure code 49 from AD as indicating an invalid submitted password.  I’d like
> to understand the failures that are NOT that, with mysterious (to me) indicators in the IdP logs of
> 
> 	"Inappropriate authentication" and 
> 	
> 	"Cannot authenticate dn”

So yea my info was a stepping point .. mainly to say that AD returns quite an array of LDAP 49 variants. 
Which, it most likely does for the other valid LDAP errors you mentioned as well 48 (Inappropriate authentication) etc.. 

--------
thanks
 kevin.foote