Le 05/09/2018 à 17:17, João Gaspar a écrit :
> Hello,
> 
> Is it possible to develop and use my own password validator class to enforce 
> password policy? 

Sure you can. You need to extend the Authenticator interface, and extend
teh server configuration to tell it that this new authenticator should
be loaded at startup. Here is an example :

dn:
ads-authenticatorid=myauthenticator,ou=authenticators,ads-interceptorId=authenticationInterceptor,ou=interceptors,ads-directoryServiceId=default,ou=config
ads-authenticatorid: myauthenticator
objectclass: top
objectclass: ads-base
objectClass: ads-authenticator
objectClass: ads-authenticatorImpl
ads-authenticatorClass:
org.apache.directory.server.core.authn.MyAuthenticator
ads-baseDn:
ads-enabled: FALSE

Of course, your authenticator should be stored in a jar that is in the
classpath, so that it can be dynamically loaded.


-- 
Emmanuel Lecharny

Symas.com
directory.apache.org

Attachment: pEpkey.asc
Description: application/pgp-keys

Reply via email to