<div dir="ltr">On Mon, Jun 24, 2013 at 7:01 PM, David Bantz <span dir="ltr"><<a href="mailto:dabantz@alaska.edu" target="_blank">dabantz@alaska.edu</a>></span> wrote:<br><div class="gmail_extra"><div class="gmail_quote">
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div style="word-wrap:break-word"><div class="im"><br><div><div>On Wed, 24 Apr 2013, at 10:45 , Daniel Fisher <<a href="mailto:dfisher@vt.edu" target="_blank">dfisher@vt.edu</a>> wrote:</div>
<br><blockquote type="cite"><div style="font-family:Helvetica;font-size:medium;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:-webkit-auto;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">
If you're using LDAP for authentication you would configure the JAAS module as well:</div><div style="font-family:Helvetica;font-size:medium;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:-webkit-auto;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px">
sslSocketFactory="{trustCertificates=file:/path/to/my/trust.crt}"</div></blockquote></div><br></div><div>Using failover redundancy like</div><div><br></div><div><span style="font-size:11.199999809265137px;font-family:monospace">edu.vt.middleware.ldap.jaas.LdapLoginModule sufficient</span> </div>
<div><span style="font-size:11.199999809265137px;font-family:monospace">ldapUrl="<a>ldap://adua01.ua.ad.alaska.edu:3269</a> <a>ldap://adua02.ua.ad.alaska.edu:3269</a>"</span></div><div><font face="monospace"><span style="font-size:11px">…</span></font></div>
<div><span style="font-size:11.199999809265137px;font-family:monospace"><br></span></div><div><span style="font-size:11.199999809265137px;font-family:monospace">can I - if so how would I - indicate different certificates for each server?</span></div>
</div></blockquote><div><br></div><div style>I can't think of a way to indicate different certificates in the same configuration. (without writing your own SSLSocketFactory...) Did you try placing both certificates in the same file?</div>
<div style><br></div><div style>--Daniel Fisher</div><div style><br></div></div></div></div>