Password expiring warning with AD

joller lee joller.lee at gmail.com
Mon Feb 15 21:34:22 EST 2016


On Tue, Feb 16, 2016 at 9:41 AM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 2/15/16, 8:25 PM, "users on behalf of joller lee" <
> users-bounces at shibboleth.net on behalf of joller.lee at gmail.com> wrote:
>
>
> >I believe it's possible to fulfill my need with a scripted predicate in
> expiring-password-intercept-config.xml solely, but I don't know how to do
> it presently.
>
> I think maybe you could just use the existing example as is, you would
> just specify the right parsing format, attribute name, and slide the
> evaluation window to account for the fact that it's 180 days off of the
> actual expiration time.
>
> -- Scott
>

My problem lies in the parsing of pwdLastSet, not the difference between
pwdLastSet and passwordExpiration.
Is it possible to parse it without script or a custom DateTimeFormatter?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160216/c39f5c10/attachment.html>


More information about the users mailing list