Shib IDP's LDAPS attribute resolution and SSLv3

[Rod Widdowson]

> I've put my vote in here for startTLS since all
> it took was removing the s from ldaps:// and adding useStartTLS="true" to
the
> data connector definition. Hopefully, that'll be what we do. Not only is
it easier
> to do, but it'll keep query responses from coming across unencrypted.

FWIW, and the record the Quick Installer has been using startTLS for both
JAAS and the attribute connector for some time now and nobody has complained
about it not working.

Rod