IdP 3 - Password Expired

[Daniel Fisher]

On Thu, Jun 30, 2016 at 12:14 PM, James McCartin <jmccartin at loyola.edu>
wrote:

> I also see the following if I turn on trace for net.shibboleth.idp:
>
>
>
> 2016-06-30 12:08:39,410 - TRACE
> [net.shibboleth.idp.authn.impl.ValidateUsernamePasswordAgainstLDAP:137] -
> Profile Action ValidateUsernamePasswordAgainstLDAP: Authentication response
> [org.ldaptive.auth.AuthenticationResponse at 1451698118::authenticationResultCode=AUTHENTICATION_HANDLER_FAILURE,
> ldapEntry=[dn=CN=jmccartin,OU=Loyola,DC=adtest,DC=loyola,DC=edu[]],
> accountState=null, result=false, resultCode=INVALID_CREDENTIALS,
> message=javax.naming.AuthenticationException: [LDAP: error code 49 -
> 80090308: LdapErr: DSID-0C0903D0, comment: AcceptSecurityContext error,
> data 773, v2580 ], controls=null]
>

That appears to be a response from Active Directory, but you've modified
your configuration to support an OpenLDAP ppolicy implementation.

--Daniel Fisher
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160630/5c246df0/attachment.html>