Mailing-List: contact api-help@directory.apache.org; run by ezmlm
Precedence: bulk
Reply-To: api@directory.apache.org
Date: Thu, 7 Sep 2017 21:41:25 -0400 (EDT)
From: CRAIG BENNER <craig.benner@psu.edu>
To: api@directory.apache.org
Message-ID: <1442009683.16485977.1504834885751.JavaMail.zimbra@psu.edu>
In-Reply-To: <e9371805-5f82-a42c-cef8-c09960a52629@gmail.com>
References: <473683107.34496.1504447116171.JavaMail.zimbra@psu.edu> <c0a23727-2686-1801-9b75-a3757406021a@evolveum.com> <7a4afa4b-5b66-7787-3730-77bc080a7916@gmail.com> <e9f04855-081f-115e-a25a-5fb67488427f@evolveum.com> <e7c0d091-64ed-c650-14a2-f7d85074d11d@gmail.com> <2140643619.370609.1504565437966.JavaMail.zimbra@psu.edu> <1226264384.1941056.1504815658976.JavaMail.zimbra@psu.edu> <e9371805-5f82-a42c-cef8-c09960a52629@gmail.com>
Subject: Re: Ldap API Custom Controls
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Thread-Topic: Ldap API Custom Controls
Thread-Index: EGFXEvDIVwSH2ujnU44m6I92Az+R/g==
archived-at: Fri, 08 Sep 2017 01:41:41 -0000

I'm working with Chris.

We've tried both coding approaches for setting the control

//        LdapServerPolicyHintsOid hints =3D new LdapServerPolicyHintsOidIm=
pl();
//        hints.setFlags(1);       =20
//        hints.setCritical(true);
//      modRequest.addControl(hints);

--or--
        LdapServerPolicyHintsOidDecorator decCtrl =3D new LdapServerPolicyH=
intsOidDecorator(getReadableLdapConnection().getCodecService());
        modRequest.addControl(decCtrl);

      ModifyResponse modResponse =3D getWriteableLdapConnection().modify(mo=
dRequest);


We are interacting with ActiveDirectory and we are using the ResetPassword =
logic (ModifyRequest Replace logic for uniCodePwd).  We are trying to add h=
onoring of the Password History data by adding the control for policy hints=
 documented on the first email Chris Sent.

It will take some changes to get a wireshark capture, since Password's can =
only be managed over a secure connection.  Hopefully tomorrow I can get you=
 the wireshark capture


Thanks.=20
Craig Benner

----- Original Message -----
From: "Emmanuel L=C3=A9charny" <elecharny@gmail.com>
To: api@directory.apache.org
Sent: Thursday, September 7, 2017 4:51:49 PM
Subject: Re: Ldap API Custom Controls

Le 07/09/2017 =C3=A0 22:20, Chris Pike a =C3=A9crit=C2=A0:
> So I added the controls, but they don't seem to be working. We are gettin=
g a error code 53 (unwilling to preform) when we add the control to our req=
uest, so assuming there is something wrong with the control, but don't know=
 enough about ldap or the library to know what. Any ideas on what to try or=
 what might be wrong?

We need more info to be able to understand what's wrong :
- a capture of the messages being exchanged (wireshark)
- the server you use
>
>
>
> ----- Original Message -----
> From: "Chris Pike" <clp207@psu.edu>
> To: "api" <api@directory.apache.org>
> Sent: Monday, September 4, 2017 6:50:37 PM
> Subject: Re: Ldap API Custom Controls
>
> Thanks for the suggestions and code examples. I'll work on adding this ne=
w control and let you know if I have any issues.
>
> ~Chris Pike
>
>
>
> ----- Original Message -----
> From: "Emmanuel L=C3=A9charny" <elecharny@gmail.com>
> To: "api" <api@directory.apache.org>
> Sent: Monday, September 4, 2017 3:46:49 AM
> Subject: Re: Ldap API Custom Controls
>
> Le 04/09/2017 =C3=A0 09:16, Radovan Semancik a =C3=A9crit=C2=A0:
>> On 09/04/2017 09:02 AM, Emmanuel L=C3=A9charny wrote:
>>> Actually, the tricky part is the grammar, which is a state engine
>>> description.
>> Oh, that is usually not that difficult either. Most of those "custom"
>> controls are very simple. Just a couple of fields. Complex data
>> structures seem to be very rare. If you start with existing control
>> that is somehow similar it is not difficult to implement a new control.
> FTR, the code I provided yesterday night in one of my previous mail took
> me around 30 mins, all included. For a more complex control, like
> syncrepl, that would have takne a bit more time, mainly because you want
> to add unit tests to cover teh various cases.
>
> Now, I think that we should provide a bit of documentation about how to
> implement a control...
>

--=20
Emmanuel Lecharny

Symas.com
directory.apache.org