Spring shorthand, again

[Nate Klingenstein]

The combination of the default e.g. shibboleth-identity-provider-3.2.1/conf/ldap.properties with the following comments in it:

## Connection properties ##
idp.authn.LDAP.ldapURL                          = ldap://localhost:10389
#idp.authn.LDAP.useStartTLS                     = true
#idp.authn.LDAP.useSSL                          = false

and the shorthand Spring that does default it to true if that property is not set in e.g. shibboleth-identity-provider-3.2.1/conf/attribute-resolver-ldap.xml 

        useStartTLS="%{idp.attribute.resolver.LDAP.useStartTLS:true}”

appears to be catching a lot of people off guard, and it’s not really obvious how to debug it if you don’t know Spring or the IdP well.

I had asked about it awhile ago, but I’d like to just mention it one more time to see if there are any other votes here.  For me, it would be valuable to either get more boilerplate into the comments in ldap.properties(“will default to useStartTLS; read Wiki here for more”) or make the defaults really obvious.  I don’t know how to better highlight this in logging without being annoying.