password expiration intercept code example request

[John C. Pfeifer]

In our configs, I’ve replaced the expiring-password intercept with the warning intercept (since there are addition warnings that I have needed to define). My condition bean is

    <bean id="umd.expiring-password.Condition" parent="shibboleth.Conditions.NOT">
        <constructor-arg>
            <bean class="net.shibboleth.idp.profile.logic.DateAttributePredicate"
                  c:attribute="umPasswordExpireDate" c:formatString="yyyyMMddHHmmssX"
                  p:useUnfilteredAttributes="true"
                  p:resultIfMissing="true" p:offset="-P6D" />
        </constructor-arg>
    </bean>


//
John Pfeifer
Division of Information Technology
University of Maryland, College Park

> On Jan 6, 2023, at 11:33 AM, Lee Foltz via users <users at shibboleth.net> wrote:
> 
> Thanks for the update Scott, it is on our to-do list to rewrite that interceptor code on our end.
> 
> On Fri, Jan 6, 2023 at 11:13 AM Cantor, Scott <cantor.2 at osu.edu <mailto:cantor.2 at osu.edu>> wrote:
> > We are running idp_version: 4. 2. 1 and jdk_version: 11. 0. 17 and it still works
> > as expected. I am sure we might need to update this at some point as I also
> > thought it was going to be deprecated.
> 
> It's already been deprecated, but we can't warn on joda-time calls, only on our methods where we reference joda-time objects.
> 
> V5 will not include joda-time or any APIs that use it, but that doesn't mean others can't inject it into the war (but you shouldn’t, the project itself is literally deprecated).
> 
> There's no real reason to use it now if you're building something new, just translate things to Java classes.
> 
> -- Scott
> 
> 
> 
> 
> 
> -- 
> Lee Foltz
> Oakland University - UTS
> Senior Identity and Access Management Engineer
>  
> 248-370-2675
> -- 
> For Consortium Member technical support, see https://shibboleth.atlassian.net/wiki/x/ZYEpPw
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20230106/df53c959/attachment.htm>