OpenLDAP Password Policy account state handling.

[Cantor, Scott]

On 12/14/16, 10:48 AM, "users on behalf of O'Dowd, Josh" <users-bounces at shibboleth.net on behalf of Josh.O'Dowd at mso.umt.edu> wrote:

> Thanks for your help, as the pwdMustChange/pwdReset ppolicy is an important option we would like to implement.

You could just do all this with the MFA flow and avoid all this complexity. Just my opinion; I definitely can't help with advanced LDAP options.

If the form is displaying, then of course it failed and there has to be event or exception that triggered the redisplay, and either of those would be logged. I don't think it's possible for this to happen silently unless something has been done to change the flow definition in some way.

-- Scott