Re: response controls

Am Tue, 15 Apr 2014 12:02:27 +0200 schrieb Huub Sepers h.sepers@portbase.com:

Hi,

We use openLdap as our user identity store for our SSO solution which is openAM.

We want to implement a password expiration strategy.

Therefore we have to configure openLdap to return a signal for events like:

•      password about to expire
  
  

•      password expired
  
  

•      ....
  
  
  
  

The openAM code (java) anticipates "controls" for this purpose.

Questions:

•      How to configure openLdap to return a control when a
  

password is about to expire.

•      Which java Ldap api should be used to process such a
  

control.

http://tools.ietf.org/html/draft-behera-ldap-password-policy-10 man slapo-ppolicy(5)

-Dieter