Password expiring warning with AD

[Cantor, Scott]

> Sorry, but I don't understand exactly what you meant by "plus some
> configured password age".
> To be sure, I'd like to ask again:
> Is it possible to obtain password-about-to-expire warning with the provided
> message/event mapping mechanism?
> Could you detail on that? (Or give some references, of course)

I just checked in a much simpler way to deal with this as an intercept based on an arbitrary condition, with an example based on a "passwordExpiration" attribute, which is pretty common.

See IDP-913 and its check-ins if you want to copy it before it eventually shows up in 3.3.

-- Scott