dex/connector
Stephan Renatus 6a2d4ab6b4 connectors/ldap: treat 'constraint violation' on bind as bad credentials
Some directory servers (I think it's Oracle) return

    Constraint Violation: Exceed password retry limit. Account locked.

when attempting to login too many times. While constraint violation can
mean many things, we're checking this as an error on BIND, so it's
more likely that something like this has happened than any other thing.

Hence, we should treat it as an "incorrect password" situation, not an
internal error.

It would of course be preferrable to surface more information about this
precise error (and similar ones), but I think this is beyond this small
change.

Signed-off-by: Stephan Renatus <srenatus@chef.io>
2018-09-05 10:03:17 +02:00
..
authproxy authproxy: update docs and set a userID 2017-10-26 10:47:16 -07:00
github fix typo 2018-05-10 11:55:11 +08:00
gitlab fix default baseURL for gitlab connector 2018-08-28 19:05:30 +02:00
ldap connectors/ldap: treat 'constraint violation' on bind as bad credentials 2018-09-05 10:03:17 +02:00
linkedin connector/linkedin: implement RefreshConnector interface 2017-10-27 12:54:28 +03:00
microsoft connector/microsoft: add support for groups 2017-11-23 17:01:34 +03:00
mock password connectors: allow overriding the username attribute (password prompt) 2017-11-09 09:30:03 +01:00
oidc connector/oidc: remove test that talks to the internet 2017-10-27 13:40:50 -07:00
saml saml: add tests case covering tampered NameID field (comment) 2018-02-28 08:42:17 +01:00
connector.go password connectors: allow overriding the username attribute (password prompt) 2017-11-09 09:30:03 +01:00