Changes between Version 11 and Version 12 of ConnectorsSetup

Timestamp:

05/23/13 16:00:33 (12 years ago)

Author:

dabantz@…

Comment:

--

ConnectorsSetup

@@ -27 +27 @@
 }}}
 
+LDAPS relying on AD certificates from private CA: Certificates used in the UA Domain are issued from a private local CA.  Shibboleth configurations will fail to load if they cannot establish trust.  Trust of the private CA can be established by:
+(1) Import the certificate into the java trusted keystore.  This requires ongoing maintenance as that keystore may be overwritten by any number of upgrade or refresh processes, requiring re-import of the CA certificate.
+(2) Configure the IdP authentication module to trust the AD certificate by adding to the configuration in $IDP_HOME/login.config a line like
+
+{{{
+sslSocketFactory="{trustCertificates=file:/path/to/my/trust.crt}"
+}}}
 === Shibboleth connector principal names and URLs for DSEE LDAP directories: ===
 
@@ -34 +41 @@
 ldaps://edir.alaska.edu:636
 }}}
+
+
 
 === [[IdPSetup|Failover connectors]] ===