<div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div>Thank you! <br></div><div><br></div><div>I turned on ldap debug logging.<br></div><div><br></div>2018-11-05 15:55:31,908 - DEBUG [org.ldaptive.provider.jndi.NamingExceptionUtils:358] - [6F22B93098FE921E1EC3B8DDFC18D1EB] - [127.0.0.1] - naming exception class javax.naming.OperationNotSupportedException is ambiguous, maps to multiple result codes: [UNAVAILABLE_CRITICAL_EXTENSION, UNWILLING_TO_PERFORM]<br><div><br></div><div>In 'password-authn-config.xml', updated:<br></div><div><br></div><div><entry key="AccountLocked"><br> <list><br> <value>AccountLocked</value><br> <span style="color:rgb(255,153,0)"><value>UNWILLING_TO_PERFORM</value><br> <value>UNAVAILABLE_CRITICAL_EXTENSION</value></span><br> <value>Clients credentials have been revoked</value><br> </list><br> </entry></div><div><br></div><div>However, still receiving following message: <span class="gmail-login_error">Login Failure:
javax.naming.OperationNotSupportedException: [LDAP: error code 53 -
Account inactivated. Contact system administrator.]</span> </div><div><br></div><div>Could this be due to the 'naming exception class javax.naming.OperationNotSupportedException is ambiguous,'?<br></div></div></div></div></div></div></div></div></div></div></div></div></div></div><br><div class="gmail_quote"><div dir="ltr">On Mon, Nov 5, 2018 at 1:26 PM Cantor, Scott <<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">> We want to replace it to 'Account is Inactivated. Contact Help Desk at<br>
> <a href="http://www.foodbar.com" rel="noreferrer" target="_blank">www.foodbar.com</a> <<a href="http://www.foodbar.com" rel="noreferrer" target="_blank">http://www.foodbar.com</a>> '. Is there a pre-existing flow<br>
> that is generating above message, and I can subjugate to new message?<br>
<br>
The defaults are:<br>
<br>
The shibboleth.authn.Password.ClassifiedMessageMap bean translates LDAP error string into classified event.<br>
<br>
The views/login-error.vm file has examples for extracting a classified event if it exists and turning it into a user message:<br>
<br>
#set ($eventId = $authenticationErrorContext.getClassifiedErrors().iterator().next())<br>
#set ($eventKey = $springMacroRequestContext.getMessage("$eventId", "login"))<br>
#set ($message = $springMacroRequestContext.getMessage("${eventKey}.message", "Login Failure: $eventId"))<br>
<br>
All the default messages are in system/messages/messages.properties and are overrideable in messages/messages.properties.<br>
<br>
If a message maps to AccountLocked, the default message is " Your account is locked." and that's what gets displayed. If it's not being displayed, you just didn't map the relevant LDAP error message or a subset of it to the AccountLocked event name in the message maps that I'm talking about. And if you want to change the message, look at the system message file and override the message property you want to replace in your own message file.<br>
<br>
In practice it's a couple of simple additions to two files and restart.<br>
<br>
-- Scott<br>
<br>
-- <br>
For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg" rel="noreferrer" target="_blank">https://wiki.shibboleth.net/confluence/x/coFAAg</a><br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.net</a><br>
</blockquote></div>