Package org.bremersee.spring.security.ldaptive.authentication

Interface AccountControlEvaluator

All Known Implementing Classes:

ActiveDirectoryAccountControlEvaluator, NoAccountControlEvaluator

public interface AccountControlEvaluator

The interface Account control evaluator.

Author:

Christian Bremer

Method Summary

Modifier and Type	Method	Description
boolean	isAccountNonExpired(org.ldaptive.LdapEntry ldapEntry)	Indicates whether the user's account has expired.
boolean	isAccountNonLocked(org.ldaptive.LdapEntry ldapEntry)	Indicates whether the user is locked or unlocked.
boolean	isCredentialsNonExpired(org.ldaptive.LdapEntry ldapEntry)	Indicates whether the user's credentials (password) has expired.
boolean	isEnabled(org.ldaptive.LdapEntry ldapEntry)	Indicates whether the user is enabled or disabled.

Method Details

isAccountNonExpired

boolean isAccountNonExpired(org.ldaptive.LdapEntry ldapEntry)

Indicates whether the user's account has expired. An expired account cannot be authenticated.

Parameters:

ldapEntry - the ldap entry

Returns:

true if the user's account is valid (ie non-expired), false if no longer valid (ie expired)

isAccountNonLocked

boolean isAccountNonLocked(org.ldaptive.LdapEntry ldapEntry)

Indicates whether the user is locked or unlocked. A locked user cannot be authenticated.

Parameters:

ldapEntry - the ldap entry

Returns:

true if the user is not locked, false otherwise

isCredentialsNonExpired

boolean isCredentialsNonExpired(org.ldaptive.LdapEntry ldapEntry)

Indicates whether the user's credentials (password) has expired. Expired credentials prevent authentication.

Parameters:

ldapEntry - the ldap entry

Returns:

true if the user's credentials are valid (ie non-expired), false if no longer valid (ie expired)

isEnabled

boolean isEnabled(org.ldaptive.LdapEntry ldapEntry)

Indicates whether the user is enabled or disabled. A disabled user cannot be authenticated.

Parameters:

ldapEntry - the ldap entry

Returns:

true if the user is enabled, false otherwise