<p>Does that mean I'd have to download ldaptive jar and place in Shibboleth's lib folder for that to work?</p>
<div class="gmail_quote">On Oct 16, 2013 9:06 PM, "Daniel Fisher" <<a href="mailto:dfisher@vt.edu">dfisher@vt.edu</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">On Tue, Oct 15, 2013 at 3:38 PM, Byte Flinger <span dir="ltr"><<a href="mailto:byteflinger@gmail.com" target="_blank">byteflinger@gmail.com</a>></span> wrote:<br><div class="gmail_extra"><div class="gmail_quote">
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><p>Unfortunately it is not an option for me.<br>
Is that a limitation of the product? Push comes to shove I could use the java keystore but I'd rather keep it in a separate keystore if possible.</p></blockquote><div><br></div><div>I think your best course of action would be to switch to ldaptive (<a href="http://www.ldaptive.org" target="_blank">www.ldaptive.org</a>) for the JAAS config.</div>
<div>While you can do this with vt-ldap, the list of caveats and gotchas is more than I would like.</div><div><br></div><div><div>ShibUserPassAuth {</div><div> org.ldaptive.jaas.LdapLoginModule required</div><div> ldapUrl="ldap://<a href="http://directory.com" target="_blank">directory.com</a>"</div>
<div> baseDn="ou=people,dc=com"</div><div> useSSL="true"</div><div> userFilter="(uid={user})"</div><div> credentialConfig="org.ldaptive.ssl.KeyStoreCredentialConfig{{trustStore=file:/path/to/my/truststore}}";</div>
<div>};<br></div></div><div><br></div><div>Let me know if that does what you want.</div><div><br></div><div>--Daniel Fisher</div><div><br></div></div></div></div>
<br>--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br></blockquote></div>