IDPv3 Attribute Resolver help

[Cantor, Scott]

On 11/8/16 9:04 AM, Tim Williams wrote:

> This refuses to start telling me that the certificate file can't be
> found, even though it shouldn't be used.

It doesn't matter whether it's used or not, you told it to load it. Stop
telling it that. Take it out.

> - Removing the <dc:StartTLSTrustCredential> tag on the grounds that it's
> not needed. This gave an "Invalid Attribute resolver configuration." error.

That is not my understanding of how the schema is defined, it shouldn't
require that element, so you have something else incorrect. Refer to the
documentation and the error message it's giving you from the XML parser.

> So it would seem that the LDAP attribute resolver requires a certificate
> regardless of the whether SSL/TLS is turned on elsewhere.

It should not.

-- Scott