Ldap – Descriptive “constraint violation” when using passwd

ldap

Is it possible to inform the user of slightly more than just "constraint violation" when they attempt to change their password?

Something like "password must be 7 or more characters", instead of leaving them guessing?

OpenDJ

Best Answer

What is your LDAP server ?

Err 19, LDAP_CONSTRAINT_VIOLATION - Indicates that the attribute value specified in a modify, add, or modify DN operation violates constraints placed on the attribute. The constraint can be one of size or content (string only, no binary).

Most of the LDAP server already provide enough information about missing piece in password or attribute. Could you check 389 Directory server or RHDS. A sample from 389-ds is

[17/Aug/2012:22:24:59 +0000] conn=85 op=14 RESULT err=19 tag=103 nentries=0 etime=0
[17/Aug/2012:22:24:59 +0000] conn=85 op=14 MOD dn="uid=redhat,ou=Users,dc=example,dc=com", within password minimum age