IdP v2.3.6 MSI Released

[Chad La Joie]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

The MSI ("quickinstall") distribution of IdP v2.3.6 is now available
at the normal download location[1].

This release, by default, enables the use of startTLS for authentication
and looking up attributes from AD.  We have confirmed that the version
of AD shipped with Windows Server 2003 and above support startTLS while
the version shipped with Windows Server 2000 does not support startTLS
but does support LDAPS, a less preferred alternative.

Neither LDAPS nor startTLS were the default options in prior MSI
releases.  We strongly recommend at this point that people check their
login configuration[2] and attribute resolver configuration to ensure
that startTLS or LDAPS, as appropriate for your version of AD, is enabled.

For information on using startTLS or LDAPS in your login configuration,
refer to the document "Configuring the IdP for Username/Password
Authentication"[4].  For information on using startTLS or LDAPS in your
attribute resolver configuration, refer to the document "LDAP Data
Connector"[5].  You may also want to refer to the document "LDAP Server
Issues"[6] which provides information on the ports number to use.

[1] http://shibboleth.net/downloads/identity-provider/latest
[2] /Program Files/Internet2/Shib2IdP/conf/login.config
[3] /Program Files/Internet2/Shib2IdP/conf/attribute-resolver.xml
[4] https://wiki.shibboleth.net/confluence/display/SHIB2/IdPAuthUserPass
[5]
https://wiki.shibboleth.net/confluence/display/SHIB2/ResolverLDAPDataConnector
[6] https://wiki.shibboleth.net/confluence/display/SHIB2/LdapServerIssues


- -- 
Chad La Joie
www.itumi.biz
trusted identities, delivered
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQIcBAEBAgAGBQJPTjjnAAoJEKCzywnSs3NTAkUP/25RltMcdAkY6DE6HsCxKflz
u49br3tYCoScrh193E7pxC4criyrcV23oCAHShvRRb7MsbLIBmNzZmVx6umbLSjP
5xXUYMJmKi90dgPsIwpC+3/la8TaMRnqmtlwEBn2fbpXSiLJYRiZWPxMmOQFAtwc
8EgLNB2FIHKG7BYqDb9QtdGcK1AQ5/tNbZAXm+bv7G1EFAFtEv1svuLtQq+twAFl
OFEykPj1E7XxRbhUgQrk+F/ppaYzmiqTleJsOMvQASdmdW2ae94S65MCvJOkmHUB
1WyZMlDsIQ9k6bWL0j/0lxmM5WB8JbvTR5MGewAQ4Z1YPelGKAd1PBX5hdnDiclO
820TJcnabIaHR2qMuvK26PaMWPGC349GVQuP6Iog1ptOflNcy2XjML6aTNBBCVGV
ZvhH4QjDJik32pXgF8Yf3H7vjYPKX8uXNPT/fyOByQCQCBF9Qn4t7FvckhleRTI6
8eM0oLCmJOGyHEOGGeSGbIJBQnVykxcxLV5VrZGHnNVFMtJ1/nTbSacVSaKTX00g
6umeX5tdrVjNpbGOdSCiWG4oW+gIKJgnrN2/89GXUURrg01daqmUkq1EO8nnXMGp
Ktc4lwlDd3JPSN3S3tZpaQrmN60Afm8Epb86xSajLlgv3q6hgyvM7z7T3fa8W2vW
zyGWteAMG2uOj99qBCX+
=W/bn
-----END PGP SIGNATURE-----