Managing expiring password

[Aurélien Blachet]

Hi,

I'm trying to configure the expiring password intercept feature in the file conf/intercept/expiring-password-intercept-config.xml as described in this link https://wiki.shibboleth.net/confluence/display/IDP30/ExpiringPasswordInterceptConfiguration.

My IDP is connected to an openLDAP. I configured attribute-resolver.xml so the IdP can retrieve  the attribute « pwdChangedTime ». I also configured expiring-password-intercept-config.xml to evaluate this attribute.

Here is my configuration :

    <bean id="shibboleth.expiring-password.Condition" class="net.shibboleth.idp.profile.logic.BVDateAttributePredicate"
            c:attribute="pwdChangedTime" p:resultIfMissing="false">
        <constructor-arg name="formatter">
            <bean class="org.joda.time.format.DateTimeFormat" factory-method="forPattern" c:_0="yyyyMMddHHmmss'Z'" />
        </constructor-arg>
        <property name="systemTimeOffset">
            <bean class="org.joda.time.Duration" factory-method="standardDays" c:_0="-1" />
        </property>
    </bean>

I saved the configuration and restarted the IdP (tomcat service).

I  tested the feature and i got nothing. It looks like it is not activated.

Did i miss something ? does anyone have an idea on how to enable this feature ?

Thank you
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170330/6e480f9a/attachment.html>