17.16 Disabling the Certificate Revocation List Checking

For ADFS 2.0 to work with NetIQ Access Manger SAML 2.0, it is required to disable the Certificate Revocation List (CRL) checking.

To disable the CRL checking:

  1. Modify the tomcat7.conf file of the Identity Server located at /opt/novell/nam/idp/conf/tomcat7.conf

  2. Add this parameterJAVA_OPTS="${JAVA_OPTS} -Dcom.novell.nidp.serverOCSPCRL=false"

  3. Restart the Identity Server by using this command: /etc/init.d/novell-idp restart.