[cifs-protocol] MS-ADTS | LDAP channel-bindings supported by Windows [120022024003949]

[Obaid Farooqi]

Hi Isaac:
I verified that for LADP on TLS, Windows only use one kind of binding which is "tls-server-end-point"

Please let me know if it does not answer your question.

Regards,
Obaid Farooqi
Escalation Engineer | Microsoft

-----Original Message-----
From: Obaid Farooqi <obaidf at microsoft.com> 
Sent: Thursday, February 20, 2020 11:44 AM
To: Isaac Boukris <iboukris at gmail.com>; Stefan Metzmacher <metze at samba.org>; cifs-protocol at lists.samba.org; Andrew Bartlett <abartlet at samba.org>
Cc: support <support at mail.support.microsoft.com>
Subject: RE: MS-ADTS | LDAP channel-bindings supported by Windows [120022024003949]

Hi Isaac:
Thanks for contacting Microsoft. I have created a case to track this issue and I'll help you with this issue.
I'll be in touch as soon as I have an answer.

Regards,
Obaid Farooqi
Escalation Engineer | Microsoft

Exceeding your expectations is my highest priority.  If you would like to provide feedback on your case you may contact my manager at ramagane at Microsoft dot com

-----Original Message-----
From: Isaac Boukris <iboukris at gmail.com> 
Sent: Thursday, February 20, 2020 3:06 AM
To: Interoperability Documentation Help <dochelp at microsoft.com>; Stefan Metzmacher <metze at samba.org>; cifs-protocol at lists.samba.org; Andrew Bartlett <abartlet at samba.org>
Subject: [EXTERNAL] MS-ADTS | LDAP channel-bindings supported by Windows

Hello dochelp,

Following publication of ADV190023 about new channel-bindings requirements for LDAP, can you please document which types of channel-bindings from rfc5929 are supported.

From testing I can see that "tls-server-end-point" seems to work against Windows server, are other types also supported or used by Windows clients and servers?

Thank you