Should the bind procedure be changed to fail if the password must be changed because of being reset when there is no password policy control?
Yes.
And succeed, with the warning, if the control is present?
No.
I'd be tempted to say even then it should fail,
I agree.
but I'm not sure if clients like JNDI would be able to handle a control on a failure.
I wouldn't care.
Or at least this concern discussed, possibly with the recommendation that servers should provide a means to chose this behavior?
Ciao, Michael.
_______________________________________________ Ldapext mailing list Ldapext@ietf.org https://www1.ietf.org/mailman/listinfo/ldapext