<div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;"><div><div class="h5">> Am I missing something? Anyone else have a cleaner way<br>
> of determining that it's a grace period login?<br>
</div></div>I think it should return the pwexpired control. But according to this<br>
<a href="http://tools.ietf.org/html/draft-behera-ldap-password-policy-10#section-7.4" target="_blank">http://tools.ietf.org/html/draft-behera-ldap-password-policy-10#section-7.4</a><br>
you should be able to determine how many grace logins are remaining?<br>
<div class="im"><font class="Apple-style-span" color="#888888"><font class="Apple-style-span" color="#000000"><br></font></font></div></blockquote><div><br></div><div> Ok so I changed my code to request the passwordPolicy on bind and after lots of fun trying to figure out how to parse BER it does return the grace logins remaining during the grace period which is better than manually searching and figuring it out on my own but hopefully my bug will get fixed at some point.</div>
<div><br></div><div>Thanks,</div><div><br></div><div>Aaron Hagopian</div></div>