FreeIPA - Password Expiration

[Prashant Bapat]

Thanks Daniel.

Tried it but got into runtime exceptions. I guess I will have to wait for
the next version.

--Prashant

On 31 May 2016 at 19:45, Daniel Fisher <dfisher at vt.edu> wrote:

> On Mon, May 30, 2016 at 3:34 AM, Prashant Bapat <prashant at apigee.com>
> wrote:
>
>> ​Hi Scott,
>>
>> Can you please point me to a doc on how to use this ?
>>
>
> If you're feeling adventurous, you can drop the latest ldaptive
> snapshot[1] into your IDP and add the following configuration:
>
> --ldap.properties--
>
> idp.authn.LDAP.returnAttributes=krbPasswordExpiration,krbLoginFailedCount,krbLastPwdChange
>
> --ldap-authn-config.xml--
> <!-- add the FreeIPA response handler -->
> <bean id="authenticationResponseHandler"
> class="org.ldaptive.auth.ext.FreeIPAAuthenticationResponseHandler" />
> <!-- add a property to the Authenticator to use the response handler -->
> p:authenticationResponseHandlers-ref="authenticationResponseHandler"
>
> Note that there are several Authenticator objects in that configuration,
> make sure you modify the one you are using.
>
> --Daniel Fisher
>
> [1]
> https://github.com/vt-middleware/maven-repo/tree/master/org/ldaptive/ldaptive/1.0.8-SNAPSHOT
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160602/3ab7835b/attachment.html>