LDAP Error Code Messaging

Lille M lillemacdoe at gmail.com
Mon Nov 5 16:07:32 EST 2018


I always appreciate your replies. Thank you.

For our 389-DS LDAP --- when an account has 'nsAccountLock = true' --- the
following message appears.

Login Failure: javax.naming.OperationNotSupportedException: [LDAP: error
code 53 - Account inactivated. Contact system administrator.]

We want to replace it to 'Account is Inactivated. Contact Help Desk at
www.foodbar.com'.  Is there a pre-existing flow that is generating above
message, and I can subjugate to new message?

I guess I am trying to find a shorter-cut. May not be available but thought
to ask.

On Mon, Nov 5, 2018 at 12:47 PM Cantor, Scott <cantor.2 at osu.edu> wrote:

> >       How do we change messaging for LDAP error codes (non-AD)?
>
> Normally by adding messages or substrings of the messages to the various
> maps in the password-authn-config file that assign various
> conditions/events to the messages. The maps are backwards, sort of, the
> keys are the events/conditions and the values are the messages to apply the
> event to.
>
>
> https://wiki.shibboleth.net/confluence/display/IDP30/PasswordAuthnConfiguration#PasswordAuthnConfiguration-ErrorsandWarnings
>
> -- Scott
>
> --
> For Consortium Member technical support, see
> https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20181105/5633f3f7/attachment.html>


More information about the users mailing list