Problems connecting to 389 directory server

[Daniel Fisher]

On Mon, Dec 4, 2017 at 3:03 PM, Darren Boss <darren.boss at computecanada.ca>
wrote:

> I ended up getting it to work but I did have to import the CA of the cert
> in der format into the JRE keystore in order to get it to connect and I'm
> NOT using jvmTrust in my ldap.properties file. This seems to contradict
> what I've read in the documentation and on the mailing list.
>

That configuration won't be supported in a future release.

Note that ldap.properties will leverage idp.authn.LDAP.trustCertificates
for the resolver if it's defined.
However the idp.authn.LDAP.trustStore property is not propagated to the
resolver, so if you're using it you'll need to deal with resolver trust
configuration separately.
I'm not clear on how you've got things configured, but I would recommend
you try setting idp.authn.LDAP.trustCertificates to the file location of
the PEM encoded ca cert.

Logging the org.ldaptive package at DEBUG should also provide some insight.

--Daniel Fisher
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20171204/448ca516/attachment.html>