From 1f94c4b9244d0cd4421d4426ee94a76f1e4845d9 Mon Sep 17 00:00:00 2001
From: Roland Gruber <post@rolandgruber.de>
Date: Thu, 11 Dec 2014 20:00:58 +0000
Subject: [PATCH] do not display AD technical error message

---
 lam/lib/account.inc | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/lam/lib/account.inc b/lam/lib/account.inc
index 22b00609..1de3737c 100644
--- a/lam/lib/account.inc
+++ b/lam/lib/account.inc
@@ -1221,7 +1221,8 @@ function getDefaultLDAPErrorString($server) {
 	$extError = htmlspecialchars(getExtendedLDAPErrorMessage($server));
 	// Active Directory message translations
 	if ((strpos($extError, 'DSID-031A120C') !== false) && (strpos($extError, '5003') !== false)) {
-		$extError = _('Your password does not meet the password strength qualifications. Please retry with another one.') . '<br><br>' . $extError;
+		logNewMessage(LOG_DEBUG, 'Password change failed because of ' . $extError);
+		$extError = _('Your password does not meet the password strength qualifications. Please retry with another one.');
 	}
 	$message = _('LDAP error, server says:') . ' ' . ldap_error($server);
 	if (!empty($extError)) {