<div dir="ltr">On Tue, Oct 8, 2013 at 5:10 AM, Joep Driesen <span dir="ltr">&lt;<a href="mailto:Joep.Driesen@kuleuven.be" target="_blank">Joep.Driesen@kuleuven.be</a>&gt;</span> wrote:<br><div class="gmail_extra"><div class="gmail_quote">

<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">Off course. Here is an ldap trace log of startup + 1 successful login attempt:<br>


<br>11:00:36.679 - TRACE [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:93] - [TP-Processor1:] - setting connectionStrategy: RANDOM<br>
11:00:36.682 - TRACE [edu.vt.middleware.ldap.auth.AuthenticatorConfig:1119] - [TP-Processor1:] - setting connectionHandler: edu.vt.middleware.ldap.handler.DefaultConnectionHandler@27f899e9<br>
11:00:36.687 - TRACE [edu.vt.middleware.ldap.auth.AuthenticatorConfig:1276] - [TP-Processor1:] - setting bindDn: cn=idp,ou=admins,dc=example,dc=com<br>
11:00:36.688 - TRACE [edu.vt.middleware.ldap.auth.AuthenticatorConfig:290] - [TP-Processor1:] - setting userFilter: uid={0}<br>
11:00:36.689 - TRACE [edu.vt.middleware.ldap.auth.AuthenticatorConfig:1309] - [TP-Processor1:] - setting bindCredential: &lt;suppressed&gt;<br>
11:00:36.693 - TRACE [edu.vt.middleware.ldap.auth.AuthenticatorConfig:1119] - [TP-Processor1:] - setting connectionHandler: edu.vt.middleware.ldap.handler.DefaultConnectionHandler@3240a47f<br></blockquote><div><br></div>

<div>The connectionHandler is getting set twice and overwriting the one you want.</div><div>Remove the tls=&quot;false&quot; option, as that is the default and that option is mutually exclusive with connectionHandler=&quot;...&quot;</div>

<div><br></div><div>If in the future you want to use startTLS instead of SSL with the random connection strategy, you simply need to set a different connection handler:</div><div><span style="font-family:arial,sans-serif;font-size:13px">connectionHandler=&quot;edu.vt.</span><span style="font-family:arial,sans-serif;font-size:13px">middleware.ldap.handler.Tls</span><span style="font-family:arial,sans-serif;font-size:13px">ConnectionHandler{{</span><span style="font-family:arial,sans-serif;font-size:13px">connectionStrategy=RANDOM}}&quot;</span><br>

</div><div><br></div><div>--Daniel Fisher</div><div><br></div></div></div></div>