ADV190023 | LDAP channel binding support
Isaac Boukris
iboukris at gmail.com
Wed Feb 26 22:55:06 UTC 2020
Debug shows the error is due to wrong input_chan_bindings provided by
ldap server.
This lead me realize the difference between Windows and ldapsearch /
net-ads, is LDAP vs start-tls.
If I use LDAPS in ldapsearch it works fine:
LD_LIBRARY_PATH=/usr/local/lib /usr/local/bin/ldapsearch -H
ldaps://sdc.smb.net -b dc=smb,dc=net cn=administrator -Y GSSAPI -N -O
maxssf=0
So in the start-tls case, the input_chan_bindings provided by the ldap
server seem not right.
More information about the samba-technical
mailing list