FreeIPA - Password Expiration

[Cantor, Scott]

> I guess I'm going to completely drop the idea of handing expired passwords
> on IdP side using intercept flow. From what I can gather it should be handled
> by the LDAP server itself.

I think I'm safe in saying that.

> In any case, if I may add, this has not been a wasted effort. Now I feel I have
> much better handle on the IdP and its inner workings.

Ok, I guess that's not entirely wasted effort.

I should have just asked, but you asked about expiring password warnings so that was what I assumed you were trying to build.

-- Scott