LDAP SSL with it's own JKS on IDP?

[Byte Flinger]

Does that mean I'd have to download ldaptive jar and place in Shibboleth's
lib folder for that to work?
On Oct 16, 2013 9:06 PM, "Daniel Fisher" <dfisher at vt.edu> wrote:

> On Tue, Oct 15, 2013 at 3:38 PM, Byte Flinger <byteflinger at gmail.com>wrote:
>
>> Unfortunately it is not an option for me.
>> Is that a limitation of the product? Push comes to shove I could use the
>> java keystore but I'd rather keep it in a separate keystore if possible.
>>
>
> I think your best course of action would be to switch to ldaptive (
> www.ldaptive.org) for the JAAS config.
> While you can do this with vt-ldap, the list of caveats and gotchas is
> more than I would like.
>
> ShibUserPassAuth {
>   org.ldaptive.jaas.LdapLoginModule required
>     ldapUrl="ldap://directory.com"
>     baseDn="ou=people,dc=com"
>     useSSL="true"
>     userFilter="(uid={user})"
>
>   credentialConfig="org.ldaptive.ssl.KeyStoreCredentialConfig{{trustStore=file:/path/to/my/truststore}}";
> };
>
> Let me know if that does what you want.
>
> --Daniel Fisher
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20131016/cf9c5006/attachment.html