LDAP Error Code Messaging

[Lille M]

If possible can I leverage the existing "AccountLocked = account-locked"
for error below? The messaging will be same for both.


2018-11-05 13:13:54,054 - INFO
[net.shibboleth.idp.authn.impl.ValidateUsernamePasswordAgainstLDAP:166] -
[FCF6D2397F513888B5003ABF1B21D4B8] - [127.0.0.1] - Profile Action
ValidateUsernamePasswordAgainstLDAP: Login by 'lisa' failed
2018-11-05 13:13:54,055 - WARN
[net.shibboleth.idp.authn.impl.ValidateUsernamePasswordAgainstLDAP:192] -
[FCF6D2397F513888B5003ABF1B21D4B8] - [127.0.0.1] - Profile Action
ValidateUsernamePasswordAgainstLDAP: Login by lisa produced exception
org.ldaptive.LdapException: javax.naming.OperationNotSupportedException:
[LDAP: error code 53 - Account inactivated. Contact system administrator.]
    at
net.shibboleth.idp.authn.impl.ValidateUsernamePasswordAgainstLDAP.doExecute(ValidateUsernamePasswordAgainstLDAP.java:187)

On Mon, Nov 5, 2018 at 1:07 PM Lille M <lillemacdoe at gmail.com> wrote:

> I always appreciate your replies. Thank you.
>
> For our 389-DS LDAP --- when an account has 'nsAccountLock = true' ---
> the following message appears.
>
> Login Failure: javax.naming.OperationNotSupportedException: [LDAP: error
> code 53 - Account inactivated. Contact system administrator.]
>
> We want to replace it to 'Account is Inactivated. Contact Help Desk at
> www.foodbar.com'.  Is there a pre-existing flow that is generating above
> message, and I can subjugate to new message?
>
> I guess I am trying to find a shorter-cut. May not be available but
> thought to ask.
>
> On Mon, Nov 5, 2018 at 12:47 PM Cantor, Scott <cantor.2 at osu.edu> wrote:
>
>> >       How do we change messaging for LDAP error codes (non-AD)?
>>
>> Normally by adding messages or substrings of the messages to the various
>> maps in the password-authn-config file that assign various
>> conditions/events to the messages. The maps are backwards, sort of, the
>> keys are the events/conditions and the values are the messages to apply the
>> event to.
>>
>>
>> https://wiki.shibboleth.net/confluence/display/IDP30/PasswordAuthnConfiguration#PasswordAuthnConfiguration-ErrorsandWarnings
>>
>> -- Scott
>>
>> --
>> For Consortium Member technical support, see
>> https://wiki.shibboleth.net/confluence/x/coFAAg
>> To unsubscribe from this list send an email to
>> users-unsubscribe at shibboleth.net
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20181105/df319f11/attachment.html>