StartTLS problem

[Rastko Isajev]

Thank you all

yes, it is quite clear for me the purpose of this cert. The only question
is, should I added to that one custom JKS store and what is or where to
find pass for it ?

Than you very much


On Fri, Mar 1, 2013 at 11:47 AM, Peter Schober
<peter.schober at univie.ac.at>wrote:

> * Ortner Nikolaus <N.Ortner at fh-kaernten.at> [2013-03-01 11:40]:
> > > 2.) I have tried another solution. I have created certificate,
> installed into LDAP
> > > JKS store, set on LDAP 389 connection handler usage of StartTLS. Then
> I have
> > > added that certificate into java central keystore - C:\Program
> > > Files\Java\jdk1.6.0_37\jre\lib\security\cacerts. Then I got another
> error :
> >
> > Don't get confused - it's the LDAP-certificate you have to add to
> > the keystore at your IdP (so that the IdP can connect to the LDAP
> > and do the authentication/attribute-query things).
>
> Yes. But again I'd only add the issuer (and any intermediaries) of the
> LDAP server's certificate to the IdP's trust store, otherwise you'd
> have to track and re-add the LDAP server's cert each time it changes
> (assuming subject != issuer, otherwise it's moot of course).
> -peter
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>



-- 
Kind regards,

 <http://www.calliduscloud.com/>










<https://sites.google.com/a/calliduscloud.com/callidus-signature-site/sig/Bar.jpg?attredirects=0>






Rastko Isajev
*Software Developer*

D: +381-11-785-6561
http://www.calliduscloud.com

 <http://www.linkedin.com/company/calliduscloud>
<http://twitter.com/calliduscloud>
  <http://www.youtube.com/calliduscloudvideos>
<http://www.facebook.com/callidussoftware>
  <http://plus.google.com/u/0/s/calliduscloud>
<http://www.calliduscloud.com/category/salespulseblog/>

-- 
[image: CallidusCloud Connections]<http://www.calliduscloudconnections.com/> CallidusCloud 
Connections, Las Vegas, May 5-7, 2013, REGISTER NOW<http://www.calliduscloudconnections.com/register.html>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130301/f65937db/attachment-0001.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/png
Size: 447 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/users/attachments/20130301/f65937db/attachment-0007.png 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/png
Size: 7069 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/users/attachments/20130301/f65937db/attachment-0008.png 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/png
Size: 632 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/users/attachments/20130301/f65937db/attachment-0009.png 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/jpeg
Size: 286 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/users/attachments/20130301/f65937db/attachment-0001.jpe 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/png
Size: 545 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/users/attachments/20130301/f65937db/attachment-0010.png 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/png
Size: 456 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/users/attachments/20130301/f65937db/attachment-0011.png 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/png
Size: 472 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/users/attachments/20130301/f65937db/attachment-0012.png 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/png
Size: 620 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/users/attachments/20130301/f65937db/attachment-0013.png