LDAP allow authentication for "account expired" error codes

[Peter Schober]

Cantor, Scott via users <users at shibboleth.net> [2025-05-06 23:38 CEST]:
> By that time, it's already failed.

In slightly other words: The LDAP return code in these case is 49
"invalid credentials", https://www.rfc-editor.org/rfc/rfc4511#section-4.1.9
i.e., the server rejected the bind request.
Everything else is here merely decoration of that result, cf.
https://ldapwiki.com/wiki/Wiki.jsp?page=Common%20Active%20Directory%20Bind%20Errors

(via https://www.ldaptive.org/docs/guide/authentication/accountstate
but the link to the ldapwiki there is broken).

HTH,
-peter