disable ldap hostname verification?

Michael A Grady mgrady at unicon.net
Wed May 10 18:12:42 EDT 2017


> On May 10, 2017, at 5:09 PM, Ghilteras <angelo at twilio.com> wrote:
> 
> Because I connect to a load balancer with that hostname, but every instance
> behind the load balancer issues a certificate at boot time that matches its
> own name

Then you ned them to use Alt Subject Name in their certs to cover the "generic name", not turn of hostname checking.


--
Michael A. Grady
IAM Architect, Unicon, Inc.



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170510/61cb70a5/attachment-0001.html>


More information about the users mailing list