Shibboleth Developers

[Chad La Joie <>]

You don't.  The simple config is not meant to cover all, or even the 
majority, of configuration options. Also, while ldaps isn't an official 
part of the LDAP spec it is a de facto standard.

On 9/10/10 4:38 AM, Peter Schober wrote:
> * Chad La 
> Joie<>
>   [2010-09-10 10:22]:
> > > Just one thing - an option of ldap vs ldaps alongside those other
> > ldap config items would be very useful here - many sites run ldap
> > configured to not allow you to bind over an insecure connection.
> >
> > That's part of the URL.
>
> Since the RFC only knows the "ldap" scheme ("ldaps" doesn't have a
> formal protocol defintion; http://tools.ietf.org/html/rfc4516#section-2 ),
> how do you specify StartTLS as part of an URL?
> -peter

--
Chad La Joie
http://itumi.biz
trusted identities, delivered