Shibboleth Native LDAP Authentication and Binding with User Credentials

[Cantor, Scott]

> Thanks, that worked! On a related note, we have an ldap server (port 636) that
> has “LDAPTLS_REQCERT=never” set but it appears that the shibboleth IDP
> always requires a certificate for SSL. Is there any way around that?

All clients of a TLS system have to evaluate its certificate, the server's decisions about the client don't really enter into that. There are some pathological cases I guess where a TLS server might not have one, but they don't apply here.

-- Scott