expiring-password intercept triggering unexpectedly

[Cantor, Scott]

It doesn't log anything really, so debugging it requires Java hands on, or writing some scripting to try and apply the condition to known inputs and test the formatting string to see what it's doing.

The Z may be causing issues because of its status as a time zone signifier, and the parsing can be very tricky.

Lastly one always needs to sanity check the value itself being parsed, and the attribute resolver can log that on DEBUG.

> My reading of the condition is that it should trigger if the expiration date is within the next 14 days.

Think so.

-- Scott