Problems connecting to 389 directory server

[Darren Boss]

I wouldn't say that I fundamentally confuse that fact. I know that
idp.authn.LDAP elements configure the authentication and
idp.attribute.resolver elements configure attribute resolution and in most
cases use the configuration from various authn defined elements.

idp.attribute.resolver.LDAP.useStartTLS         =
%{idp.authn.LDAP.useStartTLS:true}

For example, set useStartTLS to true unless
idp.attribute.resolver.LDAP.useStartTLS is set authn, which it is set to
false in my case.

Is there a idp.attribute.resolver.LDAP.useSSL setting because I can't find
it in any template configurations or referenced in
https://wiki.shibboleth.net/confluence/display/IDP30/LDAPConnector. I was
under the incorrect assumption that having the url set to ldaps:// might be
the trick but that also seems not to be the case.

On Wed, Dec 6, 2017 at 12:17 PM Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 12/6/17, 10:53 AM, "users on behalf of Darren Boss" <
> users-bounces at shibboleth.net on behalf of darren.boss at computecanada.ca>
> wrote:
>
> > I've got things running in DEBUG mode now and I'm super confused why my
> deployments are using the jvm truststore.
>
> I would imagine you're fundamentally confusing the fact that
> authentication and attribute resolution have nothing to do with each other
> and have separate configurations.
>
> > If I see this message on startup:
>
> Which is attribute resolution.
>
> > I am using
> > idp.authn.LDAP.sslConfig                        = certificateTrust
>
> Which is not attribute resolution.
>
> -- Scott
>
>
> --
> For Consortium Member technical support, see
> https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-- 

*Darren Boss*
*Senior Programmer/Analyst*
*Programmeur-analyste principal*
*darren.boss at computecanada.ca <darren.boss at computecanada.ca>*
*(o) 416.228.1234 x *230
*(c) 919.525.0083*

155 University Ave, Suite 302 Toronto, ON M5H 3B7
www.computecanada.ca / www.calculcanada.ca
@ComputeCanada
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20171206/dde72a4e/attachment.html>