[jira] [Commented] (DIRAPI-361) LDAP Protocol error if password is expiring

["Emmanuel Lécharny (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/DIRAPI-361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17354897#comment-17354897 ] 

Emmanuel Lécharny commented on DIRAPI-361:
------------------------------------------

Q: are you passing the {{PasswordPolicy}} control to the Bind Request ? This is the only way to get back some information about the fact the password has expired:

{code}
...
            BindRequest bindRequest = new BindRequestImpl();
            bindRequest.setDn( userDn );
            bindRequest.setCredentials( "12345" );
            bindRequest.addControl( new PasswordPolicyRequestImpl() );
            bindResponse = userConnection.bind( bindReq3 );
            assertEquals( ResultCodeEnum.INVALID_CREDENTIALS, bindResponse.getLdapResult().getResultCode() );
            respCtrl = getPwdRespCtrl( bindResponse );
            assertEquals( PasswordPolicyErrorEnum.PASSWORD_EXPIRED, respCtrl.getPasswordPolicyError() );
...

{code}

> LDAP Protocol error if password is expiring
> -------------------------------------------
>
>                 Key: DIRAPI-361
>                 URL: https://issues.apache.org/jira/browse/DIRAPI-361
>             Project: Directory Client API
>          Issue Type: Bug
>    Affects Versions: 2.0.1
>         Environment: Java 8
>            Reporter: Marco Cuccato
>            Priority: Critical
>
> An LdapOperationException is raised at bind() if the user has the password expiring (but not expired yet).
> Exception:
> MessageType : BIND_RESPONSE
> Message ID : -1
>  BindResponse
>  Ldap Result
>  Result code : (PROTOCOL_ERROR) protocolError
>  Matched Dn : 'null'
>  Diagnostic message : 'PROTOCOL_ERROR: The server will disconnect!'
>  



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@directory.apache.org
For additional commands, e-mail: dev-help@directory.apache.org