ADV190023 | LDAP channel binding support

Isaac Boukris iboukris at
Wed Feb 26 22:55:06 UTC 2020

Debug shows the error is due to wrong input_chan_bindings provided by
ldap server.

This lead me realize the difference between Windows and ldapsearch /
net-ads, is LDAP vs start-tls.
If I use LDAPS in ldapsearch it works fine:
LD_LIBRARY_PATH=/usr/local/lib /usr/local/bin/ldapsearch -H
ldaps:// -b dc=smb,dc=net cn=administrator -Y GSSAPI -N -O

So in the start-tls case, the input_chan_bindings provided by the ldap
server seem not right.

More information about the samba-technical mailing list