FreeIPA - Password Expiration

[Prashant Bapat]

Hi Scott,

Resurrecting this thread!

This is regarding the new Intercept flow for password expiry you were
mentioning sometime back.

http://svn.shibboleth.net/view/java-identity-provider?view=revision&revision=8085

On a 3.2.1 installation I was able to copy the files and get it working.
IdP now warns the user before password expiry as defined by below section
in conf/intercept/expiring-password-intercept-config.xml.

        <property name="systemTimeOffset">
            <bean class="org.joda.time.Duration"
factory-method="standardDays" c:_0="-10" />
        </property>

I had to comment out this part

p:resultIfMissing="true"


This works before the user's password expires. What happens after the
expiry time is that the user is still shown the "Your password will be
expiring soon!" page and allowed to login after 20 seconds.

Is there a way to deny login if the password expiry timestamp is in the
past ?

Thanks.
--Prashant

On 3 June 2016 at 09:05, Prashant Bapat <prashant at apigee.com> wrote:

> Hi Scott,
>
> Yes. I understand. What I meant by the next version is the intercept flow
> that you had earlier posted about.
>
> Thanks.
> --Prashant
>
> On 2 June 2016 at 19:03, Cantor, Scott <cantor.2 at osu.edu> wrote:
>
>> > Tried it but got into runtime exceptions. I guess I will have to wait
>> for the
>> > next version.
>>
>> What Daniel's talking about doesn't rely on the next version.
>>
>> -- Scott
>>
>> --
>> To unsubscribe from this list send an email to
>> users-unsubscribe at shibboleth.net
>>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160706/05b7a352/attachment-0001.html>