A Question for people deploying LDAP based Attribute resolution

[Paul Engle]

Hmm. It looks like I have sec:X509Filesystem in my config. But the
sec:Certificate value is still the spring resource pointing to the cert
file, just like in the X509ResourceBacked example in
attribute-resolver-ldap.xml.

I don't know where I came up with that from.

  -paul

On 9/9/2016 9:35 AM, Rod Widdowson wrote:
> TLDR:
> How many people use anything other than X509ResourceBacked to secure their
> LDAP connection and if so what do they use?
> 
> Long version:
> 
> I’m looking for some user feedback on a simplification I am going to
> introduce with 3.3 whereby 
> 
> <resolver:DataConnector type="dc:LDAPDirectory" ….>
> 
>   <dc:StartTLSTrustCredential xsi:type="sec:X509ResourceBacked"…>
>      <sec: Certificate>/dir/file.xml</sec:Certificate>
>   </dc:StartTLSTrustCredential>
> 
> Will become 
> 
> <DataConnector type="LDAPDirectory"  trustFile="/dir/file.xml">
> 
> In a similar manner to the way that we simplified configuring the
> SignatureValidation metadata filter in 3.0.
> 
> Just as in that case the old style will still be there and supported for all
> 3.x versions (and very possibly beyond).
> 
> My questions are:
>       -  Do you use something other than “sec:X509ResourceBacked” to specify
> the StartTLSTrustCredential?
>       - Do you use the StartTLSAuthenticationCredential and if so what sec:
> type do you use?
> 
> If you can respond here I’ll collate the answers and make a call on how much
> work to do.
> 
> Thanks
> 
> Rod
> 
> 

-- 
Paul Engle
Office of Information Technology
pengle at rice.edu
713-348-4702