[cifs-protocol] MS-ADTS | LDAP channel-bindings supported by Windows [120022024003949]

[Isaac Boukris]

Thanks Obaid, to clarify the question, I also noticed that schannel
can be queried for both SECPKG_ATTR_ENDPOINT_BINDINGS and
SECPKG_ATTR_UNIQUE_BINDINGS, so how does the client knows which type
to use.

Isaac

On Thu, Feb 20, 2020 at 6:43 PM Obaid Farooqi <obaidf at microsoft.com> wrote:
>
> Hi Isaac:
> Thanks for contacting Microsoft. I have created a case to track this issue and I'll help you with this issue.
> I'll be in touch as soon as I have an answer.
>
> Regards,
> Obaid Farooqi
> Escalation Engineer | Microsoft
>
> Exceeding your expectations is my highest priority.  If you would like to provide feedback on your case you may contact my manager at ramagane at Microsoft dot com
>
> -----Original Message-----
> From: Isaac Boukris <iboukris at gmail.com>
> Sent: Thursday, February 20, 2020 3:06 AM
> To: Interoperability Documentation Help <dochelp at microsoft.com>; Stefan Metzmacher <metze at samba.org>; cifs-protocol at lists.samba.org; Andrew Bartlett <abartlet at samba.org>
> Subject: [EXTERNAL] MS-ADTS | LDAP channel-bindings supported by Windows
>
> Hello dochelp,
>
> Following publication of ADV190023 about new channel-bindings requirements for LDAP, can you please document which types of channel-bindings from rfc5929 are supported.
>
> From testing I can see that "tls-server-end-point" seems to work against Windows server, are other types also supported or used by Windows clients and servers?
>
> Thank you