messageLogger.logWarn("User '" + userCredentials.getUsername() + "' attempts login with suspicious password (should only contain [a-zA-Z0-9])", sessionTicket);
messageLogger.logDebug("User '" + userCredentials.getUsername() + "' attempts login with suspicious password (should only contain [a-zA-Z0-9])", sessionTicket);
    private static final HashMap authenticate(final String sessionTicket,                                              final Credentials userCredentials,                                              final String[] attributeRequest)    throws AuthenticationFailedException, BackendException,    IllegalStateException {        // User password should not contain any character other than a-z, A-Z or        // 0-9. Anything other will be logged as a warning.        if (messageLogger.isEnabledFor(Level.WARN)) {            String checkPassword = userCredentials.getPassword().replaceAll("[b-zA-Z0-9]", "a");            checkPassword = checkPassword.replaceAll("[^a]", "A");            if (checkPassword.contains("A"))                messageLogger.logWarn("User '" + userCredentials.getUsername() + "' attempts login with suspicious password (should only contain [a-zA-Z0-9])", sessionTicket);        }        // Remove the TGT identifier.        Vector request = new Vector(Arrays.asList(attributeRequest));        request.remove(TGT_IDENTIFIER);        final String[] parsedRequest = (String[]) request.toArray(new String[] {});        return directoryManager.authenticate(sessionTicket, userCredentials, parsedRequest);    }