Skip to content
Snippets Groups Projects
Commit 6a2d4ab6 authored by Stephan Renatus's avatar Stephan Renatus
Browse files

connectors/ldap: treat 'constraint violation' on bind as bad credentials


Some directory servers (I think it's Oracle) return

    Constraint Violation: Exceed password retry limit. Account locked.

when attempting to login too many times. While constraint violation can
mean many things, we're checking this as an error on BIND, so it's
more likely that something like this has happened than any other thing.

Hence, we should treat it as an "incorrect password" situation, not an
internal error.

It would of course be preferrable to surface more information about this
precise error (and similar ones), but I think this is beyond this small
change.

Signed-off-by: default avatarStephan Renatus <srenatus@chef.io>
parent 3bbc2c0b
No related branches found
No related tags found
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment