Questions on LDAP Channel Binding.
According to https://support.microsoft.com/en-us/help/4520412/2020-ldap-channel-binding-and-ldap-signing-requirement-for-windows, LDAP Channel Binding will become active from March 2020 by default. Our current product does not support channel binding and I tried to support it. I found that the LDAP search API JNDI, which we are using now, is based on SASL. But the Active Directory only supports 4 kinds of SASL authentication mechanisms, GSS_SPNEGO, GSSAPI, EXTERNAL and DIGEST-MD5. It seems that none of them supports channel binding. Here are my questions: Is there any java LDAP search API supporting connecting the Active Directory through channel binding? Will the default value of LdapEnforceChannelBinding become 1(enabled) or 2(enabled always) after 2020 updating?