<html><head><meta http-equiv="Content-Type" content="text/html charset=windows-1252"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><br><div><div>On Wed, 24 Apr 2013, at 10:45 , Daniel Fisher <<a href="mailto:dfisher@vt.edu">dfisher@vt.edu</a>> wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div style="font-family: Helvetica; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; ">If you're using LDAP for authentication you would configure the JAAS module as well:</div><div style="font-family: Helvetica; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; ">sslSocketFactory="{trustCertificates=file:/path/to/my/trust.crt}"</div></blockquote></div><br><div>Using failover redundancy like</div><div><br></div><div><span style="font-family: monospace; font-size: 11.199999809265137px; background-color: rgb(255, 255, 255); ">edu.vt.middleware.ldap.jaas.LdapLoginModule sufficient</span> </div><div><span style="background-color: rgb(255, 255, 255); font-family: monospace; font-size: 11.199999809265137px; ">ldapUrl="<a href="ldap://adua01.ua.ad.alaska.edu:3269">ldap://adua01.ua.ad.alaska.edu:3269</a> <a href="ldap://adua02.ua.ad.alaska.edu:3269">ldap://adua02.ua.ad.alaska.edu:3269</a>"</span></div><div><font face="monospace"><span style="font-size: 11px;">…</span></font></div><div><span style="background-color: rgb(255, 255, 255); font-family: monospace; font-size: 11.199999809265137px; "><br></span></div><div><span style="background-color: rgb(255, 255, 255); font-family: monospace; font-size: 11.199999809265137px; ">can I - if so how would I - indicate different certificates for each server?</span></div><div><span style="background-color: rgb(255, 255, 255); font-family: monospace; font-size: 11.199999809265137px; "><br></span></div><div><span style="background-color: rgb(255, 255, 255); font-family: monospace; font-size: 11.199999809265137px; ">David Bantz</span></div></body></html>