ApacheDS Configuration : Bind Error Messages

[Sunil Kalahasti <kv...@hotmail.com>]

Hello every one,


I am trying to provide user friendly authentication error messages.


It seems like for all authentication issues, ApacheDS throws common error code with 49, Invalid Credentials.


Could anyone please let me know if there is a way to enable user friendly bind error messages like Account Locked, Password Expired etc? Thanks in advance.


Thanks & Regards,
Sunil

Re: ApacheDS Configuration : Bind Error Messages

[Emmanuel Lécharny <el...@gmail.com>]

Le 09/11/2017 à 03:40, Sunil Kalahasti a écrit :
> Hello every one,
>
>
> I am trying to provide user friendly authentication error messages.
>
>
> It seems like for all authentication issues, ApacheDS throws common error code with 49, Invalid Credentials.
>
>
> Could anyone please let me know if there is a way to enable user friendly bind error messages like Account Locked, Password Expired etc? Thanks in advance.

Those kind of information can be get by using the PasswordPolicy control
when binding. The response will contain the control with the associated
error message, which can be one of :

       error   [1] ENUMERATED {
           passwordExpired             (0),
           accountLocked               (1),
           changeAfterReset            (2),
           passwordModNotAllowed       (3),
           mustSupplyOldPassword       (4),
           insufficientPasswordQuality (5),
           passwordTooShort            (6),
           passwordTooYoung            (7),
           passwordInHistory           (8) } OPTIONAL }

-- 
Emmanuel Lecharny

Symas.com
directory.apache.org