IDPv4 LDAP account state

[Andrew Jason Morgan]

After setting up some tests and cranking up the logging, I found that all I needed to do was set idp.authn.LDAP.usePasswordPolicy=true.  This flag adds the PasswordPolicyAuthenticationRequestHandler() and PasswordPolicyAuthenticationResponseHandler() handlers to the Authenticator.  I didn't need to modify beans to add the handlers.

I'm using ODSEE, and it doesn't provide any static attributes that I can query for the password expiration time, etc, so the password policy control is the only way.

Thanks,
Andy

________________________________
From: users <users-bounces at shibboleth.net> on behalf of Cantor, Scott <cantor.2 at osu.edu>
Sent: Thursday, February 11, 2021 3:02 PM
To: Shib Users <users at shibboleth.net>
Subject: Re: IDPv4 LDAP account state

[This email originated from outside of OSU. Use caution with links and attachments.]

On 2/11/21, 5:51 PM, "users on behalf of Andrew Jason Morgan" <users-bounces at shibboleth.net on behalf of morgan at oregonstate.edu> wrote:

>    Can I simply set idp.authn.LDAP.usePasswordPolicy=true

Theoretically but no idea if it works, I guess it seems to have not worked for some. For expiring password warnings only, I just urge using the interceptor flow instead and reading the expiration out of the directory where possible.

-- Scott


--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20210216/a7b65280/attachment.htm>