Re: Enabling Password Policy Messages via Extended Controls in OpenLDAP

[Howard Chu <hyc@symas.com>]

Shawn McKinney wrote:
> Greetings,
>
> Is there a configuration step that must take place
> before LDAP client can read server generated messages
> via extended controls?
>
> I need to read password policy warning messages that
> may occur whenever a user binds to directory.
>
> Specifically, I am trying to read messages
> relating to the password policy overlay module control
> messages.
>
> When I enter search command for any supported
> controls, I come up empty.  Here is the command I use:
>
> ldapsearch -x -D "cn=Manager,dc=somewhere,dc=com" -w
> pword -b 'dc=somewhere, dc=com' -s SUB -h localhost -p
> 389 "objectclass=*" supportedcontrol +
>
>   
The list of supportedControls is in the rootDSE.

ldapsearch -x -b "" -s base -H ldap:// +

--
 -- Howard Chu
 Chief Architect, Symas Corp.  http://www.symas.com
 Director, Highland Sun        http://highlandsun.com/hyc
 OpenLDAP Core Team            http://www.openldap.org/project/