[DIRSERVER-1676] Provide a set of error codes along with an AuthenticationException to indicate its root cause.

• Type: Improvement
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 2.0.0-M4
• Fix Version/s: 2.0.0-M16
• Component/s: core
• Labels: apacheds
• Environment: 64bit Windows, using 32 bit jvm to support wrapper.dll
• Assignee: Kiran Ayyagari
• Reporter: Carlo Accorsi
• Created: 10/Nov/11 17:55
• Updated: 24/Feb/14 16:14
• Resolved: 24/Feb/14 16:14

Description

There may be more cases to consider but when a user supplies an incorrect password or the account is locked,
a javax.naming.AuthenticationException is thrown. Currently comparing the strings returned by ex.getMessage() is
the only way to determine which event occurred.

[LDAP: error code 49 - INVALID_CREDENTIALS: Bind failed: ERR_229 Cannot authenticate user uid=xyz,o=corp]
[LDAP: error code 49 - INVALID_CREDENTIALS: Bind failed: account was permanently locked]