Note that there are some explanatory texts on larger screens.

plurals
  1. PO
    primarykey
    data
    text
    <p>My comments above apply to the generic LDAP API, but I had forgotten something major. You need to investigate the request and response controls specified in <a href="http://tools.ietf.org/html/draft-behera-ldap-password-policy-10" rel="nofollow">http://tools.ietf.org/html/draft-behera-ldap-password-policy-10</a>. This does work in OpenLDAP but I can't say whether it is supported by Active Directory. I have Java JNDI code that supports it which you are welcome to. The PasswordPolicyResponseControl can return the following:</p> <pre><code>/** Warning codes. */ public enum Warning { /** Password expiration warning.*/ timeBeforeExpiration, /** Grace logins warning.*/ graceAuthNsRemaining, none; } /** Error codes. */ public enum Error { /** The password has expired.*/ passwordExpired, /** * The account has been locked, either by an administrator * or as a result of too many failed login attempts. */ accountLocked, /** * The password has been reset by an administrator and must be changed immediately. */ changeAfterReset, /** * The password policy does not permit the user to change his password. */ passwordModNotAllowed, /** * The password policy requires the old password to be supplied * when changing passwords. * This indicates a programming error in the client. */ mustSupplyOldPassword, /** * The new password has failed the quality check. */ insufficientPasswordQuality, /** * The new password is too short. */ passwordTooShort, /** * The current password is too new to change yet. */ passwordTooYoung, /** * The password policy specifies keeping a password history * and the new password is already in it. */ passwordInHistory, /** * Error parsing the response control. * This indicates a programming error either in this * class or in the LDAP server. */ unparseableResponseControl, /** * No additional information. * This can be seen e.g. when the user simply logs * in with the wrong password. */ none; }; </code></pre>
    singulars
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    plurals
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. VO
      singulars
      1. This table or related slice is empty.
    2. VO
      singulars
      1. This table or related slice is empty.
    3. VO
      singulars
      1. This table or related slice is empty.
    1. This table or related slice is empty.
 

Querying!

 
Guidance

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload