Active Directory traffic not encrypted

[Daniel Fisher]

On Wed, Sep 12, 2018 at 4:05 PM Rochford, Mike <MRochford at starkstate.edu>
wrote:

> 2018-09-12 15:59:21,055 - ERROR
> [org.ldaptive.pool.BlockingConnectionPool:509] -
> <snip> config=[org.ldaptive.ConnectionConfig at 1911725457::ldapUrl=ldaps://
> dc.starkstate.net:636, connectTimeout=3000, responseTimeout=3000,
> sslConfig=[org.ldaptive.ssl.SslConfig at 1631826609
> ::credentialConfig=org.ldaptive.ssl.CredentialConfigFactory$2 at a63643e,
> trustManagers=null, hostnameVerifier=null, hostnameVerifierConfig=null,
> enabledCipherSuites=null, enabledProtocols=null,
> handshakeCompletedListeners=null], useSSL=false, useStartTLS=true,
> connectionInitializer=[org.ldaptive.BindConnectionInitializer at 1126780571::bindDn=CN=shibboleth,OU=Specific
> purpose logon accounts,DC=starkstate,DC=net, bindSaslConfig=null,
> bindControls=null]]], initialized=false, availableCount=0, activeCount=0]
> unable to connect to the ldap
>

Something doesn't line up. The log says you're attempting to startTLS on an
LDAPS connection, which gives the error you would expect.
Are you certain you're using the properties file you think you are?

--Daniel Fisher
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180912/c4647aaa/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 6317 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://shibboleth.net/pipermail/users/attachments/20180912/c4647aaa/attachment.p7s>