To follow up, the error returned by oracle ldap is:

authenticationResultCode=AUTHENTICATION_HANDLER_FAILURE, 
resultCode=INSUFFICIENT_ACCESS_RIGHTS, matchedDN=, diagnosticMessage=The 
request control with Object Identifier (OID) "1.3.6.1.4.1.42.2.27.8.5.1" 
cannot be used due to insufficient access rights, referralURLs=[], 
messageID=3, controls=[]]

and all logins fail. 

-psv
On Friday, January 7, 2022 at 10:30:45 PM UTC-6 Pablo Vidaurri wrote:

> For this method in LdapUtils, can a property be wrapped around the  
> setAuthenticationControls 
> call? I do not have permission to query for the OID 
> "1.3.6.1.4.1.42.2.27.8.5.1" 
> object that ldaptive request during user credential validation. I had to 
> comment out that line for my deployment but I do not want to have to 
> maintain this file.
>
>
>
> private static SimpleBindAuthenticationHandler 
> getBindAuthenticationHandler(final ConnectionFactory factory) {
>
> val handler = new SimpleBindAuthenticationHandler(factory);
> // wrap this line around a config property
> *handler.setAuthenticationControls(new PasswordPolicyControl());*
>
> return handler;
>
> }
>
>
> Thanks.
> -psv
>
>
>

-- 
You received this message because you are subscribed to the Google Groups "CAS 
Developer" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-dev/185afe8a-0f6f-4d7e-b40a-f1c7ebbd3f10n%40apereo.org.

Reply via email to