Password expiring warning with AD

[Daniel Fisher]

On Sat, Feb 6, 2016 at 2:34 AM, joller lee <joller.lee at gmail.com> wrote:

> Sorry, but I don't understand exactly what you meant by "plus some
> configured password age".
> To be sure, I'd like to ask again:
> Is it possible to obtain password-about-to-expire warning with the
> provided message/event mapping mechanism?
> Could you detail on that? (Or give some references, of course)
>

You'll need to edit ldap-authn-config.xml. Update the Acti
veDirectoryAuthenticationResponseHandler to include a password age and
provide an entry resolver that can resolve the pwdLastSet attribute. I've
updated the wiki to include an example:

https://wiki.shibboleth.net/confluence/display/IDP30/LDAPAuthnConfiguration#LDAPAuthnConfiguration-Usinganentryresolvertogeneratepasswordexpirationwarnings

Let me know if that works for you.

--Daniel Fisher
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160210/3c81d24f/attachment.html>