using a chain cert with LDAP connector?

[Liam Hoekenga]

I'm trying to use access a LDAP server that's protected with one of
the InCommon CA certs, which is a chain cert.

I've tried both the InCommon CA cert, and the AddTrustExternalCA root cert..

        <dc:StartTLSTrustCredential xsi:type="sec:X509Filesystem"
id="InCommonCA.Credential">
            <sec:Certificate>
                /usr/local/mcomm/etc/pki/tls/certs/AddTrustExternalCARoot.pem
            </sec:Certificate>
        </dc:StartTLSTrustCredential>

and with both, I get..

Exception in thread "main"
org.springframework.beans.factory.BeanCreationException: Error
creating bean with name 'shibboleth.AttributeResolver': Invocation of
init method failed; nested exception is
edu.internet2.middleware.shibboleth.common.service.ServiceException:
Configuration was not loaded for shibboleth.AttributeResolver service,
error creating components.

It works if I point back to an LDAP server that's protected by an internal CA.

Can you use chain certs with the LDAP connector?

Liam