Issue with upgrading to 2.3.6
Martin Haase
martin.haase at daasi.de
Wed Mar 7 16:40:10 GMT 2012
Hi Daniel,
comment! :-)
As for login.config, it seems to have digested the addition (well, cannot say whether honored yet):
edu.vt.middleware.ldap.jaas.LdapLoginModule sufficient
host="my.host.domain"
java.naming.ldap.factory.socket="javax.net.ssl.SSLSocketFactory"
[...]
However, attribute-resolver.xml does not like that attribute in <resolver:DataConnector[@type="LDAPDirectory"] />....
How would I go for setting the property you describe for the attribute resolver?
You understand, I am in the process of updating for a bunch of customers to 2.3.6, and if it
turns out that their LDAP cert was not correct I'll definitely need a quick possibility to revert
back to the old behaviour, ideally using solely config and not compiling anything...
Regards,
Martin
Am 29.02.2012 18:24, schrieb Daniel Fisher:
> On Wed, Feb 29, 2012 at 11:51 AM, Chad La Joie <lajoie at shibboleth.net
> <mailto:lajoie at shibboleth.net>> wrote:
>
> That said, there is a way to revert back to the old behavior and I've
> asked Daniel to go ahead and document it on the vtldap site as it's
> something you configure with that library.
>
>
> Here it is:
> http://code.google.com/p/vt-middleware/wiki/vtldapTLS#Hostname_Validation
> Please comment if more explanation is needed.
>
> --Daniel Fisher
>
>
>
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
--
-----------------------------------------------------------------------
Dr. Martin Haase
DAASI International GmbH phone: +49 7071 407109-6
Europaplatz 3 Fax : +49 7071 407109-9
D-72072 Tübingen email: Martin.Haase at DAASI.de
Germany Web : http://www.daasi.de
Directory Applications for Advanced Security and Information Management
-----------------------------------------------------------------------
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120307/4785d070/attachment.html
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2320 bytes
Desc: S/MIME Kryptografische Unterschrift
Url : http://shibboleth.net/pipermail/users/attachments/20120307/4785d070/attachment.bin
More information about the users
mailing list