Password expiring warning with AD

[joller lee]

On Wed, Feb 10, 2016 at 10:23 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> > Yes, that does look simpler, and the already-notified cookie is very
> nice. My
> > head hurts trying to parse AD pwdLastSet but it works with a contrived
> static
> > YYMMdd attribute.
>
> I was a little surprised joda-time didn't have a parser built in for that,
> I think we'll have to eventually add something to the predicate class.
>
> -- Scott


I ended up making it with scripted attribute resolution to obtain a
suitable passwordExpiration string, with help of FileTimeValueTranscoder.
Thank you all.

By the way, if this method will be the way to go in 3.3.0, will the
original condition/expiring-password subflow kept in the future release?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160215/c0523e3a/attachment.html>