IDP/Listener issue

[Peter Schober]

* Gray, James <james.gray at ntu.ac.uk> [2015-12-16 17:22]:
> Thanks Peter. I hadn't added the cert into the keystore - it was
> working when I changed from ldaps to ldap and switched the port to
> 389 in the attribute-resolver.xml file.

OK. The IDP "fails fast" in such cases, which I guess is what you want
here.
Now that you've identified the reason a better way to fix it than
sending everything in the clear is making StartTLS (or LDAPS) work, of
course. (Maybe that's what you're doing, not sure.)
-peter