Class OpenidmAccountStatusNotificationHandler

  • All Implemented Interfaces:
    org.forgerock.opendj.config.server.ConfigurationChangeListener<OpenidmAccountStatusNotificationHandlerCfg>, ServerShutdownListener

    public class OpenidmAccountStatusNotificationHandler
    extends AccountStatusNotificationHandler<OpenidmAccountStatusNotificationHandlerCfg>
    implements org.forgerock.opendj.config.server.ConfigurationChangeListener<OpenidmAccountStatusNotificationHandlerCfg>, ServerShutdownListener
    An account status notification handler that listens to password reset and password change events in order to propagate them to OpenIDM.

    The following information is retained for a change

    • the entry DN
    • the encrypted password
    • the kind of change (PASSWORD_CHANGE, PASSWORD_RESET)
    • optionally, the values of some attributes (for any attribute listed in the "attribute-type" parameter in the config)

    There are two ways the changes can be handled, depending on the 'interval' parameter in the configuration:

    • If interval is set to zero, then the change is sent immediately to OpenIDM using a HTTP POST request
    • If interval is strictly superior to zero, then the change is stored locally (currently in a JE database). At each interval period of time, the changes which are stored locally are read and sent to OpenIDM using a HTTP POST request>

    The communication to OpenIDM can be done in one of three ways:

    • Using HTTP : authentication to OpenIDM is done using BASIC Auth, using the openidm-username and opendidm-password parameter values from the configuration
    • Using HTTPS without SSL client authentication : authentication to OpenIDM is done using BASIC Auth, using the openidm-username and opendidm-password parameter values from the configuration
    • Using HTTPS with SSL client authentication : ssl-cert-nickname parameter value from the configuration is used to retrieve the appropriate client certificate from the provided key manager