We are new to LDAP server.
We were able to configure the ldap server with password policies such as
- account lock out
- Wrong Password
- Password expired
- 5 times wrong authentication
- New password cannot be old password (Password History 5)
However we have an issue, For all validations thrown, LDAP server does not throw district validations. We want distinct validations.
For example, To show different messages depending upon number of consecutive failed authentication. Also if any account is locked recognizable flag required to display message that account has been locked.
How to recognize them distinctively??
We need to set a GUI on LDAP which prompts appropriate messages on for given validation or flag. Hint.: Logs are saved when validations generated.
Proposed: While saving log if we can also give/broadcast appropriate validation