IdP for Username/Password Authentication LDAPS (with AD) issues

[Youssef GHORBAL]

[…]

>> #> c_rehash /opt/active_directory_ca/
>> #> openssl s_client -CApath /opt/active_directory_ca/ -connect tom.corp.pasteur.fr:636
> 
> Those two methods are not equivalent, though: In the JAAS config you
> provide a certificate file, in the s_client example you provide a
> certificate path. So for this comparison to make sense you'd have to
> supply the same file via s_client -CAfile /opt/active_directory_ca/corp.pasteur.fr.pem
> (That might still work, of course.)

You are right ! I’ve just tested with the -CAFile option and it still works.

Youssef