Why does KB5026409 cause SASL EXTERNAL to fail?

I have an Active Directory server running Windows Server 2012 R2. My Android app connects to the server, authenticating using SASL EXTERNAL bind with a certificate issued by the server's CA. After i...

Active Directory

windows server

rbrittner

Copper Contributor

Oct 10, 2023

Well after rolling back cumulative security patches I found May 9th cumulative security patch is where my LDAP breaks. The patch included in Security Patch for May corrects CVE-2023-28283, My question is there a work around for it or a fix. Here is the error I get after I patch our Domain Controllers..

Error:
javax.naming.AuthenticationException: [LDAP: error code 49 - 80090317: LdapErr: DSID-0C090645, comment: The server did not receive any credentials via TLS, data 0, v3839]; remaining name 'ou=xxx,dc=yyy,dc=zzzz,dc=aa,dc=ssss,dc=nnn'

01189998819991197253

Copper Contributor

Nov 01, 2023

This issue was fixed for me by the October 2023 cumulative update.

Forum Discussion

Why does KB5026409 cause SASL EXTERNAL to fail?

Resources