v4.1.0 Expiring Password Intercept

[Brian Biggs]

Hi,

I'm having issues getting the formatString for the password expire date to
match. I'm hoping someone here can offer some help with creating a pattern
that will match.

I'm getting this in the logs:

2021-04-19 10:57:59,426 - XXX.XXX.XXX.XXX - WARN
[net.shibboleth.idp.profile.logic.DateAttributePredicate:208] -
2030-12-31T08:00:00Z is not a valid date for the configured date parser
java.time.DateTimeException: Unable to obtain Instant from
TemporalAccessor: {},ISO resolved to 2030-12-31T08:00 of type
java.time.format.Parsed
at java.base/java.time.Instant.from(Instant.java:378)
Caused by: java.time.temporal.UnsupportedTemporalTypeException: Unsupported
field: InstantSeconds
at java.base/java.time.format.Parsed.getLong(Parsed.java:203)

And in expiring-password-intercept-config.xml I have:

<bean id="shibboleth.expiring-password.Condition"
  class="net.shibboleth.idp.profile.logic.DateAttributePredicate"
  c:attribute="passwordExpiration"
  c:formatString="yyyy-MM-dd'T'HH:mm:ss'Z'"
  p:resultIfMissing="true"
  p:offset="-P10D" />

Any help much appreciated.
Thanks,
-Brian
-- 
Lead Identity Mgmt/Systems Integration
Information Technology
Sonoma State University
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20210419/8c1f4233/attachment.htm>