Shib IDP's LDAPS attribute resolution and SSLv3

[Cantor, Scott]

On 10/15/14, 3:56 PM, "Cantor, Scott" <cantor.2 at osu.edu> wrote:

>On 10/15/14, 3:30 PM, "Wessel, Keith" <kwessel at illinois.edu> wrote:
>
>>Hi, all,
>> 
>>Our AD folks just turned off SSLv3 support on our AD LDAPS service. Shib
>>didn¹t like it.
>
>A little quick searching implies to me that the
>java.naming.security.protocol JNDI property is what controls this in Java,
>and the only value it appears to have is ssl [1]. Which probably means it
>doesn't support TLS.

Of course I find this strange and surprising, but if you're seeing it not
work, I don't know what other conclusion to reach.

-- Scott