<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div class="">Hey guys,</div>
<div class=""><br class="">
</div>
<div class="">Following up on this conversation that took place a couple of months back: <a href="http://lists.jboss.org/pipermail/keycloak-dev/2015-September/005286.html" class="">http://lists.jboss.org/pipermail/keycloak-dev/2015-September/005286.html</a>.
I just had a chance to try the proposed approach of implementing a custom authentication provider that checks the pwdLastSet attribute and sets the update password required action. I believe that this may not be quite as easy as was suggested due to the fact
that authentication fails with the default LDAP Federation Provider before a custom execution in the login flow has a chance to check the attribute and set the required action. It seems I would need to implement a custom LDAP Federation Provider that considers
authentication successful when the exception referenced in <a href="https://issues.jboss.org/browse/KEYCLOAK-1744" class="">https://issues.jboss.org/browse/KEYCLOAK-1744</a> is thrown, but also add the required action for updating the password. Is there an
easy way to do that or something that I’m missing? Otherwise, I’d be willing to work on a contribution for this issue if you’re willing to have logic that is specific to AD?</div>
<div class=""><br class="">
</div>
<div class="">Thanks,</div>
<br class="">
<div apple-content-edited="true" class="">
<div class="">
<div style="font-family: Arial, Helvetica, sans-serif; font-size: 13px;" class="">
Cory Snyder</div>
<div style="font-family: Arial, Helvetica, sans-serif; font-size: 11px; color: rgb(153, 153, 153);" class="">
software engineer</div>
<div style="font-family: Arial, Helvetica, sans-serif; font-size: 11px;" class="">
<span style="font-weight: bold; color: rgb(11, 164, 232);" class="">USA</span> <span style="color: rgb(153, 153, 153);" class="">+1.419.731.3479 </span><span style="font-weight: bold; color: rgb(11, 164, 232);" class=""> UK </span><span style="color: rgb(153, 153, 153);" class="">+44.20.7096.0149 </span>
<a href="http://www.iland.com/" style="font-weight: bold; color: rgb(11, 164, 232); text-decoration: none;" class="">iland.com</a> </div>
</div>
</div>
<br class="">
</body>
</html>