IDPv4 LDAP account state

[Cantor, Scott]

On 2/16/21, 3:16 PM, "users on behalf of Andrew Jason Morgan" <users-bounces at shibboleth.net on behalf of morgan at oregonstate.edu> wrote:

>    After setting up some tests and cranking up the logging, I found that all I needed to do was set
> idp.authn.LDAP.usePasswordPolicy=true.  This flag adds the PasswordPolicyAuthenticationRequestHandler() and
> PasswordPolicyAuthenticationResponseHandler() handlers to the Authenticator.  I didn't need to modify beans to add the
> handlers.

That's good, thanks. I think it's pretty directory-specific unfortunately but good to know it can work at least. The idea was to try and auto-wire as much as possible with simple flags, it's just not maintainable to expose all those objects nor would anybody want to see them.

I guess it would be good to maintain a list of the systems it seems to work for.

-- Scott