Re: response controls

[Dieter KlÃnter <dieter@dkluenter.de>]

Am Tue, 15 Apr 2014 12:02:27 +0200
schrieb Huub Sepers <h.sepers@portbase.com>:

> Hi,
> 
>  
> 
> We use openLdap as our user identity store for our SSO solution which
> is openAM.
> 
>  
> 
> We want to implement a password expiration strategy.
> 
> Therefore we have to configure openLdap to return a signal for events
> like:
> 
> -          password about to expire
> 
> -          password expired
> 
> -          ....
> 
>  
> 
> The openAM code (java) anticipates "controls" for this purpose.
> 
>  
> 
> Questions:
> 
> -          How to configure openLdap to return a control when a
> password is about to expire.
> 
> -          Which java Ldap api should be used to process such a
> control.

http://tools.ietf.org/html/draft-behera-ldap-password-policy-10
man slapo-ppolicy(5)

-Dieter

-- 
Dieter KlÃnter | Systemberatung
http://sys4.de
GPG Key ID: E9ED159B
53Â37'09,95"N
10Â08'02,42"E