Mailing-List: contact users-help@directory.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@directory.apache.org
Received-SPF: pass (athena.apache.org: domain of ayyagarikiran@gmail.com
 designates 209.85.210.174 as permitted sender)
MIME-Version: 1.0
Sender: ayyagarikiran@gmail.com
In-Reply-To: <51265C2B.1020904@gmail.com>
References: 
 <CAJwLGfag5R_9Zq8T70W0jQ0nfPTvSSxpZLvnPh-0HbQayLTwpQ@mail.gmail.com>
	<51261A6D.8080202@gmail.com>
	<CAJwLGfaP3FZL=D-yyBuH0o-fs6vnd+OkexBCXTfCz9s+SQH=ng@mail.gmail.com>
	<CABzFU-e4bO9BZXS4ew8DNN98ECbggzfGNFrzRHPjBNGTr55xUA@mail.gmail.com>
	<51264902.1020508@gmail.com>
	<CABzFU-eALtdkaDBGOqvYuTqMcdqwc7LK3DybcnkXjem5RStm8w@mail.gmail.com>
	<512649FA.7020709@gmail.com>
	<CABzFU-cn0xVzAmcQgL_Dat8f2kQis7XQ9rPy7+xCNmkO9r821A@mail.gmail.com>
	<51265C2B.1020904@gmail.com>
Date: Thu, 21 Feb 2013 23:24:16 +0530
Message-ID: 
 <CABzFU-dAMLAUmrmBwyyKOMDp=cn0ixFXKanGL5v3=e5Af-PKVA@mail.gmail.com>
Subject: Re: Extending Authentication for Bind
From: Kiran Ayyagari <kayyagari@apache.org>
To: users@directory.apache.org, elecharny@apache.org
Content-Type: multipart/alternative; boundary=14dae9340cfb6e88a404d63fc3ee

--14dae9340cfb6e88a404d63fc3ee
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

On Thu, Feb 21, 2013 at 11:10 PM, Emmanuel L=E9charny <elecharny@gmail.com>=
wrote:

> Le 2/21/13 5:25 PM, Kiran Ayyagari a =E9crit :
> > don't think we have such a support right now do we? is that looping of
> > authenticators makes this a possibility?
>
> I see that the Authenticator interface provide a checkPwdPolicy() method =
:
>
>     /**
>      *  performs checks on the given entry based on the specified
> password policy configuration
>      *
>      * @param userEntry the user entry to be checked for authentication
>      * @throws PasswordPolicyException
>      */
>     void checkPwdPolicy( Entry userEntry ) throws LdapException;
>
> Why can't we do all the passwordPolicy checks in the authenticator,
> instead of the interceptor ?
>
> The only pb is that we need the user entry at this point, but couldn't
> we pass the BindContext, so for the checkPwdPolicy() to fetch the entry
> from the DS instead ?
>
> Does it make sense ?
>
> password policy is enforced not only during authentication but also after
authentication and while doing modify operation

>
> --
> Regards,
> Cordialement,
> Emmanuel L=E9charny
> www.iktek.com
>
>


--=20
Kiran Ayyagari
http://keydap.com

--14dae9340cfb6e88a404d63fc3ee--