Shib IDP's LDAPS attribute resolution and SSLv3

[Cantor, Scott]

On 10/15/14, 4:41 PM, "Wessel, Keith" <kwessel at illinois.edu> wrote:
>
>If anyone knows a way to change the sasl mechanism used by the LDAP
>library to gssapi, our AD admins would prefer I do what I said earlier:
>Kerberos authentication over the cleartext channel. Personally, this
>feels like more that could break moving forward than just using startTLS.

https://code.google.com/p/vt-middleware/wiki/vtldapGSSAPI

-- Scott