disable ldap hostname verification?

Michael A Grady mgrady at unicon.net
Wed May 10 18:12:42 EDT 2017

> On May 10, 2017, at 5:09 PM, Ghilteras <angelo at twilio.com> wrote:
> Because I connect to a load balancer with that hostname, but every instance
> behind the load balancer issues a certificate at boot time that matches its
> own name

Then you ned them to use Alt Subject Name in their certs to cover the "generic name", not turn of hostname checking.

Michael A. Grady
IAM Architect, Unicon, Inc.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170510/61cb70a5/attachment-0001.html>

More information about the users mailing list