<div dir="ltr">On Tue, Oct 15, 2013 at 3:38 PM, Byte Flinger <span dir="ltr"><<a href="mailto:byteflinger@gmail.com" target="_blank">byteflinger@gmail.com</a>></span> wrote:<br><div class="gmail_extra"><div class="gmail_quote">
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><p>Unfortunately it is not an option for me.<br>
Is that a limitation of the product? Push comes to shove I could use the java keystore but I'd rather keep it in a separate keystore if possible.</p></blockquote><div><br></div><div>I think your best course of action would be to switch to ldaptive (<a href="http://www.ldaptive.org">www.ldaptive.org</a>) for the JAAS config.</div>
<div>While you can do this with vt-ldap, the list of caveats and gotchas is more than I would like.</div><div><br></div><div><div>ShibUserPassAuth {</div><div> org.ldaptive.jaas.LdapLoginModule required</div><div> ldapUrl="ldap://<a href="http://directory.com">directory.com</a>"</div>
<div> baseDn="ou=people,dc=com"</div><div> useSSL="true"</div><div> userFilter="(uid={user})"</div><div> credentialConfig="org.ldaptive.ssl.KeyStoreCredentialConfig{{trustStore=file:/path/to/my/truststore}}";</div>
<div>};<br></div></div><div><br></div><div>Let me know if that does what you want.</div><div><br></div><div>--Daniel Fisher</div><div><br></div></div></div></div>