Security Advisory 20120227

[Juan Quintanilla]

Oh okay, now in the previous version it was not checking for this?  It looks like the ldap is being load balanced since the host name they provided me was fiuldap1.fiu.edu and that must be one of the servers that is behind the load balance.  I will need to get the correct cert.

Thanks! 

___________________
Juan Quintanilla
UTS - Enterprise Group
305-348-6573
jquin014 at fiu.edu
________________________________________
From: users-bounces at shibboleth.net [users-bounces at shibboleth.net] on behalf of Cantor, Scott [cantor.2 at osu.edu]
Sent: Monday, February 27, 2012 4:37 PM
To: Shib Users
Subject: RE: Security Advisory 20120227

> There is no load balancer performing the SSL-offloading on the shibboleth
> server  Below is the cert.

Nope...

> Also found some extra information when I turned on Debug for ldap:
> 16:25:56.858 - DEBUG
> [edu.vt.middleware.ldap.ssl.DefaultHostnameVerifier:123] -   hostname =
> fiuldap1.fiu.edu
> 16:25:56.859 - DEBUG
> [edu.vt.middleware.ldap.ssl.DefaultHostnameVerifier:124] -   cert =
> CN=rhldapc03.fiu.edu, OU=Division of Information Technology, O=Florida
> International University, L=Miami, ST=Alabama, C=US

That is the cert. No wildcard.

-- Scott

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net