Password expiring warning with AD

[Rich Graves]

"Scott Cantor" <cantor.2 at osu.edu> wrote:
> I just checked in a much simpler way to deal with this as an intercept based on an arbitrary
> condition, with an example based on a "passwordExpiration" attribute, which is pretty common.
> See IDP-913 and its check-ins if you want to copy it before it eventually shows up in 3.3.

Yes, that does look simpler, and the already-notified cookie is very nice. My head hurts trying to parse AD pwdLastSet but it works with a contrived static YYMMdd attribute.

I also got this... I guess 'resultIfMissing' is another upcoming 3.3 feature? It "works" if I remove the property.

org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'shibboleth.expiring-password.Condition' defined in file [/home/rgraves/shibboleth-idp/system/flows/intercept/../../../conf/intercept/expiring-password-intercept-config.xml]: Error setting property values; nested exception is org.springframework.beans.NotWritablePropertyException: Invalid property 'resultIfMissing' of bean class [net.shibboleth.idp.profile.logic.DateAttributePredicate]: Bean property 'resultIfMissing' is not writable or has an invalid setter method. Does the parameter type of the setter match the return type of the getter?