In ADAM, if admin sets pwdLastSet = 0 , why response control is NULL inspite of bind throws NamingException?

I am setting pwdLastSet = 0 for user in ADAM. So while bind operation, I am getting following Exception which is correct as I am resetting password of that user by setting pwdLastSet = 0

javax.naming.AuthenticationException: [LDAP: error code 49 - 8009030C: LdapErr: DSID-0C090311, comment: AcceptSecurityContext error, data 20ee, vece

But after this when I tried to getResponseControl(), it is returning me NULL. What is the reason ? I am expecting that it should return PasswordExpirationControl.

Can anybody help out how to resolve this ?

Solution

I would assume an error as you did receive.

javax.naming.AuthenticationException: [LDAP: error code 49 - 8009030C: LdapErr: DSID-0C090311, comment: AcceptSecurityContext error, data 20ee, vece

This message occurs only when one of the following scenarios is true:

The account password is expired.
The account is locked out.
The account password must be changed.

There was also a ADAM 1.1 with Service Pack 1 specific bug, but from what you have provided, I do not think it applies. -jim