IDP v3 - OpenLDAP password policy - forcing password reset

[Emilio Penna]

update: a little workaround if the administrator wants to force a
password change, and prevent idp login until the user changes it:

in ldap.propertites:

idp.authn.LDAP.userFilter = (&(uid={user})(!(pwdReset=*)))

regards
Emilio


El 22/05/2015 a las 12:58 a.m., Daniel Fisher escribió:
> On Wed, May 20, 2015 at 5:38 PM, Daniel Fisher <dfisher at vt.edu
> <mailto:dfisher at vt.edu>> wrote:
> 
>     Our design made some assumptions that perhaps need to be revisited.
>     Most notably that warnings are associated with login success and
>     errors are associated with login failures. I need to think about
>     this use case some more, but more configuration knobs to drive
>     different flows may be in order.
> 
> 
> Filed this issue: https://issues.shibboleth.net/jira/browse/IDP-728
> 
> --Daniel Fisher
>  
> 
>