disable hostname check in OpenLDAP

Waldbieser, Carl waldbiec at lafayette.edu
Fri Sep 30 13:51:01 EDT 2016


It is the hostname verification part of the TLS connection the LDAP client in Shib is making to your LDAP service.
If you don't use it, how do you know you aren't being MITM'd?

What do your LDAP client and server logs tell you?

Thanks,
Carl Waldbieser
ITS Systems Programmer
Lafayette College

----- Original Message -----
From: "eln00b" <jbru0003 at synchronoss.com>
To: users at shibboleth.net
Sent: Friday, September 30, 2016 1:27:28 PM
Subject: disable hostname check in OpenLDAP

In my development environment I am getting:



I tried all the hostname data I could think of for my Amazon AWS instance
from IP addresses to fully-qualified names without any luck.  Is there any
way to simply disable the hostname check completely via the Shibboleth
configuration structure?

I tried  this post
<http://shibboleth.1660669.n2.nabble.com/disable-ldap-hostname-verification-td7557657.html>  
but was not able to make any headway.





-----

el n00b - Trying to understand technology and help create documentation online wherever I get stuck.
--
View this message in context: http://shibboleth.1660669.n2.nabble.com/disable-hostname-check-in-OpenLDAP-tp7628614.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.
-- 
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net


More information about the users mailing list