Updating this thread so that this may be useful to others: A. Started Using ApacheDS - https://directory.apache.org/apacheds/ as LDAP Server on windows machine. B. Delegated all the password policy constraints to ApacheDS. The apache DS can be administered via Apache Directory Studio and didn't do any implementation of custom code for implementing the same thing in JDBC. C. CAS worked wonderfully with LDAP authentication - including password update in LDAP at the time of password expiry etc.
Thank you On Monday, 21 September 2020 at 19:57:25 UTC+5:30 ro...@mun.ca wrote: > I believe that the JDBC password policy settings are in the database > authentication settings: > > > > > https://apereo.github.io/cas/6.2.x/configuration/Configuration-Properties.html#database-authentication > > > > Specifically > > > > # cas.authn.jdbc.query[0].field-expired= > > # cas.authn.jdbc.query[0].field-disabled= > > > > Where both queries determine if an account is expired or disabled. > > > > I am not certain, but I think you need a separate system, other than CAS, > to expire and disable accounts in JDBC. > > > > > > *From:* cas-...@apereo.org <cas-...@apereo.org> *On Behalf Of *Ritesh > Tripathi > *Sent:* Sunday, September 20, 2020 12:50 PM > *To:* CAS Community <cas-...@apereo.org> > *Subject:* [cas-user] Cas 6.2 - Implmentation of Custom Password Policy > for JDBC Authentication > > > > Hello All, > > > > We have a requirement that *"after 5 unsuccessful login attempts - we > need to lock the account for a day for the said user."* > > > > We are having a JDBC Authentication. > > > > We were just curious if anyone has implemented custom password policy > using groovy scripts or some other method for requirements as above. > > > > The CAS documentation - seems to be specific for LDAP and other cases. Was > not able to get more information on JDBC. > > > > > https://apereo.github.io/cas/6.2.x/configuration/Configuration-Properties-Common.html#password-policy-settings > > > > Will the groovy script method as given in above documentation link work > for JDBC as well ? Any comments or points to implement the above type and > similar requirements. > > > > Best Regards > > R > > -- > - Website: https://apereo.github.io/cas > - Gitter Chatroom: https://gitter.im/apereo/cas > - List Guidelines: https://goo.gl/1VRrw7 > - Contributions: https://goo.gl/mh7qDG > --- > You received this message because you are subscribed to the Google Groups > "CAS Community" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to cas-user+u...@apereo.org. > To view this discussion on the web visit > https://groups.google.com/a/apereo.org/d/msgid/cas-user/33d653bb-392c-457e-9d4b-b86785e2b26cn%40apereo.org > > <https://groups.google.com/a/apereo.org/d/msgid/cas-user/33d653bb-392c-457e-9d4b-b86785e2b26cn%40apereo.org?utm_medium=email&utm_source=footer> > . > -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscr...@apereo.org. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/a4c08667-96d7-403b-9111-af04bacea890n%40apereo.org.
