Certificate practices using IdP with MS AD LDAP

[Daniel Fisher]

On Tue, Jun 25, 2013 at 9:32 AM, Glenn Wearen <glenn.wearen at heanet.ie>wrote:

> I hit this issue a few weeks ago, I tried switching off SSL hostname
> checks but ended up having to switch to plain ldap as  the IdP (or the vt
> ldap library) assumed that the cert offered on AD server 1 should also be
> trusted on AD server 2 and rejects the cert offered by AD server 2.
> I should have logged a bug but didn't.
>
>
Please file a bug: https://issues.shibboleth.net/jira/browse/SIDP
That configuration should be supported.

--Daniel Fisher
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130625/bae67c08/attachment.html