Forum Discussion

chase-wang's avatar
chase-wang
Copper Contributor
Jan 21, 2020

Questions on LDAP Channel Binding.

    According to https://support.microsoft.com/en-us/help/4520412/2020-ldap-channel-binding-and-ldap-signing-requirement-for-windows, LDAP Channel Binding will become active from March 2020 by default. Our current product does not support channel binding and I tried to support it. I found that the LDAP search API JNDI, which we are using now, is based on SASL. But the Active Directory only supports 4 kinds of SASL authentication mechanisms,  GSS_SPNEGO, GSSAPI, EXTERNAL and DIGEST-MD5. It seems that none of them supports channel binding. Here are my questions:

  1. Is there any java LDAP search API supporting connecting the Active Directory through channel binding?
  2. Will the default value of LdapEnforceChannelBinding become 1(enabled) or 2(enabled always) after 2020 updating?

1 Reply

  • jasmin9891's avatar
    jasmin9891
    Copper Contributor

    We are also facing the same issue. Microsoft Team, can you provide information on above question?

Resources