Issue with upgrading to 2.3.6

[Martin Haase]

Thanks Chad, I must have missed that region of the docs. Works perfectly!
Cheers,
Martin

PS: Turning off SSL is not an option, as the customers might only have ldaps port open...


Am 07.03.2012 17:46, schrieb Chad La Joie:
> Well, you could just turn of SSL, since that's what you're effectively doing.
>
> Alternatively you could refer to the documentation which says how to
> set properties on the underlying LDAP library:
> https://wiki.shibboleth.net/confluence/display/SHIB2/ResolverLDAPDataConnector
>
> On Wed, Mar 7, 2012 at 11:40, Martin Haase <martin.haase at daasi.de> wrote:
>> Hi Daniel,
>>
>> comment! :-)
>>
>> As for login.config, it seems to have digested the addition (well, cannot
>> say whether honored yet):
>>
>> edu.vt.middleware.ldap.jaas.LdapLoginModule sufficient
>> 	host="my.host.domain"
>> 	java.naming.ldap.factory.socket="javax.net.ssl.SSLSocketFactory"
>> 	[...]
>>
>> However, attribute-resolver.xml does not like that attribute in
>> <resolver:DataConnector[@type="LDAPDirectory"] />....
>> How would I go for setting the property you describe for the attribute
>> resolver?
>>
>> You understand, I am in the process of updating for a bunch of customers to
>> 2.3.6, and if it
>> turns out that their LDAP cert was not correct I'll definitely need a quick
>> possibility to revert
>> back to the old behaviour, ideally using solely config and not compiling
>> anything...
>>
>> Regards,
>> Martin
>>
>>
>>
>> Am 29.02.2012 18:24, schrieb Daniel Fisher:
>>
>> On Wed, Feb 29, 2012 at 11:51 AM, Chad La Joie <lajoie at shibboleth.net>
>> wrote:
>>> That said, there is a way to revert back to the old behavior and I've
>>> asked Daniel to go ahead and document it on the vtldap site as it's
>>> something you configure with that library.
>>
>> Here it is:
>> http://code.google.com/p/vt-middleware/wiki/vtldapTLS#Hostname_Validation
>> Please comment if more explanation is needed.
>>
>> --Daniel Fisher
>>
>>
>>
>> --
>> To unsubscribe from this list send an email to
>> users-unsubscribe at shibboleth.net
>>
>>
>> --
>> -----------------------------------------------------------------------
>> Dr. Martin Haase
>> DAASI International GmbH                   phone:     +49 7071 407109-6
>> Europaplatz 3                              Fax  :     +49 7071 407109-9
>> D-72072 Tübingen                           email: Martin.Haase at DAASI.de
>> Germany                                    Web  :   http://www.daasi.de
>>
>> Directory Applications for Advanced Security and Information Management
>> -----------------------------------------------------------------------
>>
>>
>> --
>> To unsubscribe from this list send an email to
>> users-unsubscribe at shibboleth.net
>
>

-- 
-----------------------------------------------------------------------
Dr. Martin Haase
DAASI International GmbH                   phone:     +49 7071 407109-6
Europaplatz 3                              Fax  :     +49 7071 407109-9
D-72072 Tübingen                           email: Martin.Haase at DAASI.de
Germany                                    Web  :   http://www.daasi.de

Directory Applications for Advanced Security and Information Management
-----------------------------------------------------------------------


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2320 bytes
Desc: S/MIME Kryptografische Unterschrift
Url : http://shibboleth.net/pipermail/users/attachments/20120307/d72df5f7/attachment.bin