Certificate practices using IdP with MS AD LDAP

[Daniel Fisher]

On Mon, Jun 24, 2013 at 7:01 PM, David Bantz <dabantz at alaska.edu> wrote:

>
> On Wed, 24 Apr 2013, at 10:45 , Daniel Fisher <dfisher at vt.edu> wrote:
>
> If you're using LDAP for authentication you would configure the JAAS
> module as well:
> sslSocketFactory="{trustCertificates=file:/path/to/my/trust.crt}"
>
>
> Using failover redundancy like
>
> edu.vt.middleware.ldap.jaas.LdapLoginModule sufficient
> ldapUrl="ldap://adua01.ua.ad.alaska.edu:3269
> ldap://adua02.ua.ad.alaska.edu:3269"
> …
>
> can I - if so how would I - indicate different certificates for each
> server?
>

I can't think of a way to indicate different certificates in the same
configuration. (without writing your own SSLSocketFactory...) Did you try
placing both certificates in the same file?

--Daniel Fisher
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130625/871567e8/attachment.html