<div dir="ltr"><div class="gmail_extra"><div class="gmail_quote">On Mon, May 30, 2016 at 3:34 AM, Prashant Bapat <span dir="ltr"><<a href="mailto:prashant@apigee.com" target="_blank">prashant@apigee.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div style="font-family:'trebuchet ms',sans-serif">​Hi Scott,</div><div style="font-family:'trebuchet ms',sans-serif"><br></div><div style="font-family:'trebuchet ms',sans-serif">Can you please point me to a doc on how to use this ? </div></div></blockquote><div><br></div><div>If you're feeling adventurous, you can drop the latest ldaptive snapshot[1] into your IDP and add the following configuration:</div><div><br></div><div>--ldap.properties--</div><div><div>idp.authn.LDAP.returnAttributes=krbPasswordExpiration,krbLoginFailedCount,krbLastPwdChange</div><div><br>--ldap-authn-config.xml--</div><div><!-- add the FreeIPA response handler --></div>







<div><bean id="authenticationResponseHandler" class="org.ldaptive.auth.ext.FreeIPAAuthenticationResponseHandler" /></div><div><!-- add a property to the Authenticator to use the response handler --></div><div>p:authenticationResponseHandlers-ref="authenticationResponseHandler"</div><div><br></div><div>Note that there are several Authenticator objects in that configuration, make sure you modify the one you are using.</div><div><br></div><div>--Daniel Fisher</div><div><br></div></div><div>[1] <a href="https://github.com/vt-middleware/maven-repo/tree/master/org/ldaptive/ldaptive/1.0.8-SNAPSHOT">https://github.com/vt-middleware/maven-repo/tree/master/org/ldaptive/ldaptive/1.0.8-SNAPSHOT</a><br></div><div><br></div></div></div></div>