For 1.0 your best option is to grab a handle to the nexus on initialization of your authenticator.  Use the nexus to lookup the attributes of the user (the entry for the principalDn).  Then you can perform what logic you need to interogate the attributes of the user.
On Dec 14, 2007 10:18 AM, Steven Brendtro <> wrote:
Oh, I forgot to mention... this is for 1.0.x (specifically 1.0.1).


On Dec 14, 2007 8:59 AM, Steven Brendtro < > wrote:
I am coding a custom Authenticator Interface for doing some extra checking before authenticating the DN.  Basically before I authenticate, I want to check that the user (not sure what else to call it) has certain attributes set to specific values.  I've been looking through the API for the past few days and don't understand how to accomplish this.  If possible, I want to get a set of Attributes back to iterate through.

Any suggestions would be most helpful.

Thanks in advance.