flows and eDirectory auth warnings

[cbaker]

eDirectory and it's associated
org.ldaptive.auth.ext.EDirectoryAuthenticationResponseHandler will come back
with warnings in the AuthenticationResponse.accountState whenever there is a
date set for passwordExpirationTime (which is always in our eDirectory
configuration) and I'm trying to put a conditional into the authn flow that
will only display the expiring password view if the passwordExpiration is in
the past or 5 days or less into the future.  

So I naively tried to just do an if less than inside the
authn/conditions/conditions-flow.xml
...[snip]...
    <action-state id="ValidateUsernamePassword">
        
        
        <transition on="AccountWarning" to="CallExpiringPassword" />
        <transition on="ExpiringPassword" to="DecideOnExpiringPassword" />
        <transition on="ExpiredPassword" to="CallExpiredPassword" />
        <transition on="AccountLocked" to="CallAccountLocked" />
        
        <transition to="DisplayUsernamePasswordPage" />
    </action-state>

    <decision-state id="DecideOnExpiringPassword">
        <if
test="opensamlProfileRequestContext.getSubcontext(T(net.shibboleth.idp.authn.context.AuthenticationContext)).getSubcontext(T(net.shibboleth.idp.authn.context.LDAPResponseContext)).getAuthenticationResponse().getAccountState().getWarning().getExpiration().compareTo(java.util.GregorianCalendar.getInstance())
< 432000000" then="CallExpiringPassword"
else="proceed" />
    </decision-state>
...[snip]...

And as you can guess, I cannot use the < or > signs in webflow.  Whats the
recommended way to go about this?  

Thanks again everyone!



--
View this message in context: http://shibboleth.1660669.n2.nabble.com/flows-and-eDirectory-auth-warnings-tp7626224.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.