Implement LDAP ppolicy login messages
Nobody has claimed this yet.
Assessment
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Newbie friendliness
- 45/100
- Issue type
- Feature
- Clarity
- Mostly clear
- Activity status
- Stale
- Tech stack
- php
- Domain
- authentication
Research direction
Start by tracing the LDAP authentication flow and locating the module configuration that could enable ppolicy handling. Read PHP's LDAP controls documentation and the bind example, then define how the configurable warning message is surfaced before continuing to the service provider; done means an expiring password warning reaches the user when the option is enabled.
Written by the indexing model from the issue text.
Description
Situation
LDAP as authentication source in SimpleSAMLphp
LDAP password policy overlay
When using ppolicy password aging, no messages are shown when logging in with SimpleSAMLphp.
If the password is almost expired (pwdExpireWarning) a warning is sent by LDAP.
New developments
That warning can be caught as of php 7.3 via the LDAP control LDAP_CONTROL_PASSWORDPOLICYREQUEST.
See php manual pages LDAP controls and Example #1 Bind with ppolicy information
Solution
If ppolicy handling is enabled via new ldap module config, show the message to the user before continuing to the SP. The message shown should be configurable, for example to set a link where users will be able to change their password.
- Dominant language
- PHP
- Stars
- 5
- Forks
- 14
- PR merge metrics
- No merged PRs in 30d
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from simplesamlphp/simplesamlphp-module-ldap
-
Difficulty 5/5 Over a week Newbie friendliness 30/100
-
Difficulty 4/5 3-5 days Newbie friendliness 35/100
simplesamlphp/simplesamlphp-module-ldap#66 · 11 comments ·
-
Difficulty 3/5 1-2 days Newbie friendliness 35/100
simplesamlphp/simplesamlphp-module-ldap#60 · 6 comments ·
-
Difficulty 4/5 3-5 days Newbie friendliness 25/100
simplesamlphp/simplesamlphp-module-ldap#3 · 3 comments ·
All issues in simplesamlphp/simplesamlphp-module-ldap
Similar issues
-
priority: p3
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
googleapis/librarian#7636 ·
-
0. Needs triage bug
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
nextcloud/fulltextsearch#1011 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 84/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
phpstan/phpstan-doctrine#794 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 74/100
Automattic/static-site-importer#1767 ·