<div dir="ltr"><div dir="ltr"><div class="gmail_default" style="font-family:verdana,sans-serif"><span style="font-family:Arial,Helvetica,sans-serif">On Tue, Jun 2, 2020 at 8:36 PM IAM David Bantz <<a href="mailto:dabantz@alaska.edu">dabantz@alaska.edu</a>> wrote:</span><br></div></div><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div><br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">





<p style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:14px;line-height:normal;font-family:Courier;color:rgb(59,35,34);background-color:rgba(215,211,183,0.85)"><span style="font-variant-ligatures:no-common-ligatures"><span> </span>DEBUG [137.229.6.124] org.ldaptive.provider.jndi.JndiConnectionFactory:105 ><span>  </span>Error connecting to LDAP URL: ldaps://<a href="http://cas-auth-t.alaska.edu:6361" target="_blank">cas-auth-t.alaska.edu:6361</a></span></p>
<p style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:14px;line-height:normal;font-family:Courier;color:rgb(59,35,34);background-color:rgba(215,211,183,0.85)"><span style="font-variant-ligatures:no-common-ligatures">org.ldaptive.provider.ConnectionException: javax.naming.CommunicationException: <a href="http://cas-auth-t.alaska.edu:6361" target="_blank">cas-auth-t.alaska.edu:6361</a> [Root exception is javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: </span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(215,211,183);background-color:rgba(59,35,34,0.85)">PKIX</span><span style="font-variant-ligatures:no-common-ligatures"> path building failed: sun.security.provider.certpath.SunCertPathBuilderExceptio</span></p>
<p style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:14px;line-height:normal;font-family:Courier;color:rgb(59,35,34);background-color:rgba(215,211,183,0.85)"><span style="font-variant-ligatures:no-common-ligatures">n: unable to find valid certification path to requested target]</span></p></blockquote><div><br></div><div> Any pointers, hints, interpretation appreciated!</div></div><div><br></div></div></blockquote><div><br></div><div class="gmail_default" style="font-family:verdana,sans-serif">Do you want to configure trust as part of the JAAS config or are you attempting to use the default JVM trust? Also, just to confirm, we're talking about IDPv3?</div><div class="gmail_default" style="font-family:verdana,sans-serif"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif">--Daniel Fisher</div><div class="gmail_default" style="font-family:verdana,sans-serif"></div></div></div>