Issue with upgrading to 2.3.6

Martin Haase martin.haase at daasi.de
Wed Mar 7 16:40:10 GMT 2012


Hi Daniel,

comment! :-)

As for login.config, it seems to have digested the addition (well, cannot say whether honored yet):

edu.vt.middleware.ldap.jaas.LdapLoginModule sufficient
	host="my.host.domain"
	java.naming.ldap.factory.socket="javax.net.ssl.SSLSocketFactory"
	[...]

However, attribute-resolver.xml does not like that attribute in <resolver:DataConnector[@type="LDAPDirectory"] />....
How would I go for setting the property you describe for the attribute resolver? 

You understand, I am in the process of updating for a bunch of customers to 2.3.6, and if it 
turns out that their LDAP cert was not correct I'll definitely need a quick possibility to revert 
back to the old behaviour, ideally using solely config and not compiling anything...

Regards,
Martin



Am 29.02.2012 18:24, schrieb Daniel Fisher:
> On Wed, Feb 29, 2012 at 11:51 AM, Chad La Joie <lajoie at shibboleth.net
> <mailto:lajoie at shibboleth.net>> wrote:
>
>     That said, there is a way to revert back to the old behavior and I've
>     asked Daniel to go ahead and document it on the vtldap site as it's
>     something you configure with that library.
>
>
> Here it is:
> http://code.google.com/p/vt-middleware/wiki/vtldapTLS#Hostname_Validation
> Please comment if more explanation is needed.
>
> --Daniel Fisher
>
>
>
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

-- 
-----------------------------------------------------------------------
Dr. Martin Haase
DAASI International GmbH                   phone:     +49 7071 407109-6
Europaplatz 3                              Fax  :     +49 7071 407109-9
D-72072 Tübingen                           email: Martin.Haase at DAASI.de
Germany                                    Web  :   http://www.daasi.de

Directory Applications for Advanced Security and Information Management
-----------------------------------------------------------------------

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120307/4785d070/attachment.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2320 bytes
Desc: S/MIME Kryptografische Unterschrift
Url : http://shibboleth.net/pipermail/users/attachments/20120307/4785d070/attachment.bin 


More information about the users mailing list