Add a verify password extended request

Added client-side support for a new verify password extended request
that may be used in the Ping Identity Directory Server to determine
whether a provided password is correct for a given user without
performing any other password policy processing.  This extended
operation may only be used under a limited set of circumstances.

docs/ldap-oid-reference.html

@@ -3540,6 +3540,11 @@ <h2>LDAP OID Reference</h2>
                   <td>Purge Retired Inter-Server Certificates Extended Operation</td>
                   <td>Ping Identity Directory Server</td>
                 </tr>
+                <tr>
+                  <td>1.3.6.1.4.1.30221.2.6.72</td>
+                  <td>Verify Password Extended Request</td>
+                  <td>Ping Identity Directory Server</td>
+                </tr>
                 <tr>
                   <td>1.3.6.1.4.1.30221.2.10.3.1</td>
                   <td><tt>access-control-disabled</tt> Administrative Alert</td>

docs/release-notes.html

@@ -69,6 +69,15 @@ <h3>Version 7.0.1</h3>
                   <br><br>
                 </li>
 
+                <li>
+                  Added client-side support for a new verify password extended request that may be
+                  used in the Ping Identity Directory Server to determine whether a provided
+                  password is correct for a given user without performing any other password policy
+                  processing.  This extended operation may only be used under a limited set of
+                  circumstances.
+                  <br><br>
+                </li>
+
                 <li>
                   Updated the OID registry to include records for a number of collation matching
                   rules.

messages/unboundid-ldapsdk-unboundid-extop.properties

@@ -932,3 +932,16 @@ ERR_TB_DECODE_UNRECOGNIZED_TYPE=Unable to decode an encoded trust behavior \
 ERR_REPLACE_CERT_RESULT_CANNOT_DECODE_VALUE=An error occurred while \
   attempting to decode the value of the replace certificate extended result:  \
   {0}
+ERR_VERIFY_PASSWORD_REQUEST_NO_VALUE=Unable to decode the provided extended \
+  request as a verify password request because the provided request does not \
+  have a value.
+ERR_VERIFY_PASSWORD_REQUEST_CANNOT_DECODE_VALUE=Unable to decode the provided \
+  extended request as a verify password request because an error occurred \
+  while attempting to decode the value for the request.
+ERR_VERIFY_PASSWORD_REQUEST_MISSING_FIELD=Unable to decode the provided \
+  extended request as a verify password request because the request value \
+  is missing the required ''{0}'' field.
+ERR_VERIFY_PASSWORD_REQUEST_EMPTY_FIELD=Unable to decode the provided \
+  extended request as a verify password request because the request value \
+  has an empty ''{0}'' field.
+INFO_EXTENDED_REQUEST_NAME_VERIFY_PASSWORD=Verify Password Extended Request

resource/oid-registry.json

@@ -702,6 +702,7 @@
 { "oid":"1.3.6.1.4.1.30221.2.6.69", "name":"Replace Inter-Server Certificate", "type":"Extended Operation", "origin":"Ping Identity Directory Server" }
 { "oid":"1.3.6.1.4.1.30221.2.6.70", "name":"Purge Retired Listener Certificates", "type":"Extended Operation", "origin":"Ping Identity Directory Server" }
 { "oid":"1.3.6.1.4.1.30221.2.6.71", "name":"Purge Retired Inter-Server Certificates", "type":"Extended Operation", "origin":"Ping Identity Directory Server" }
+{ "oid":"1.3.6.1.4.1.30221.2.6.72", "name":"Verify Password", "type":"Extended Request", "origin":"Ping Identity Directory Server" }
 { "oid":"1.3.6.1.4.1.30221.2.10.3.1", "name":"access-control-disabled", "type":"Administrative Alert", "origin":"Ping Identity Directory Server" }
 { "oid":"1.3.6.1.4.1.30221.2.10.3.2", "name":"access-control-enabled", "type":"Administrative Alert", "origin":"Ping Identity Directory Server" }
 { "oid":"1.3.6.1.4.1.30221.2.10.3.3", "name":"access-control-parse-failure", "type":"Administrative Alert", "origin":"Ping Identity Directory Server" }

src/com/unboundid/ldap/listener/InMemoryRequestHandler.java

@@ -2984,6 +2984,8 @@ public LDAPMessage processModifyDNRequest(final int messageID,
 
     try (WriteLock writeLock = readWriteLock.lockWrite())
     {
+      writeLock.avoidCompilerWarning();
+
       // Process the provided request controls.
       final Map<String,Control> controlMap;
       try