From a58f15ee60040accaae281206dfdae588611aa3f Mon Sep 17 00:00:00 2001
From: Paul Caskey <pcaskey@internet2.edu>
Date: Wed, 12 Feb 2020 11:27:20 -0600
Subject: [PATCH] adjust ldap in resolver

---
 conf/attribute-resolver.xml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/conf/attribute-resolver.xml b/conf/attribute-resolver.xml
index 9993dbc..4b726ea 100644
--- a/conf/attribute-resolver.xml
+++ b/conf/attribute-resolver.xml
@@ -210,7 +210,8 @@
         principalCredential="%{idp.attribute.resolver.LDAP.bindDNCredential}"
         useStartTLS="%{idp.attribute.resolver.LDAP.useStartTLS:true}"
         connectTimeout="%{idp.attribute.resolver.LDAP.connectTimeout}"
-		trustFile="%{idp.attribute.resolver.LDAP.trustCertificates}"
+	<!-- Uncomment the line below when you have configured the referenced property in idp.properties to point to a valid cert -->
+	<!-- trustFile="%{idp.attribute.resolver.LDAP.trustCertificates}" -->
         responseTimeout="%{idp.attribute.resolver.LDAP.responseTimeout}">
         <FilterTemplate>
             <![CDATA[