IDP Login Delay Question

[Cantor, Scott]

On 3/25/14, 11:28 AM, "Joseph Lucia" <jlucia at cysd.k12.pa.us> wrote:

>I think I found my delay, but not sure what is causing it. This is from
>the debug logs, is this normal delay? It seems to be the Set hostname
>verifier for ldaps.

No, that's not normal. I'd be more inclined to think it's something to do
with the certificate. I'm not familiar with that code, but perhaps
something in the cert like a CRL endpoint is triggering something inside
Java. The symptom certainly fits the common case of a client hitting a
cert, and following a dead LDAP or HTTPS CRL extension.

-- Scott

>11:19:55.608 - DEBUG
>[edu.vt.middleware.ldap.handler.DefaultConnectionHandler:128] - Set
>hostname verifier for ldaps
>11:20:00.630 - DEBUG
>[edu.vt.middleware.ldap.ssl.AggregateTrustManager:75] - invoking
>checkServerTrusted for sun.security.ssl.X509TrustManagerImpl at 2f73b909
>11:20:00.643 - DEBUG
>[edu.vt.middleware.ldap.ssl.AggregateTrustManager:75] - invoking
>checkServerTrusted for
>edu.vt.middleware.ldap.ssl.HostnameVerifyingTrustManager at 33d40863