ADV190023 | LDAP channel binding support

Isaac Boukris iboukris at gmail.com
Wed Feb 26 22:55:06 UTC 2020


Debug shows the error is due to wrong input_chan_bindings provided by
ldap server.

This lead me realize the difference between Windows and ldapsearch /
net-ads, is LDAP vs start-tls.
If I use LDAPS in ldapsearch it works fine:
LD_LIBRARY_PATH=/usr/local/lib /usr/local/bin/ldapsearch -H
ldaps://sdc.smb.net -b dc=smb,dc=net cn=administrator -Y GSSAPI -N -O
maxssf=0

So in the start-tls case, the input_chan_bindings provided by the ldap
server seem not right.



More information about the samba-technical mailing list