Forum Discussion

THi's avatar
THi
Icon for Nimbostratus rankNimbostratus
Nov 26, 2019

APM AD auth and LDAP request signing

Microsoft intends to require LDAP singing by default in their upcoming January 2020 server security updates. See https://support.microsoft.com/en-us/help/4520412/2020-ldap-channel-binding-and-ldap-si...
BIG-IP Access Policy Manager (APM)
security
THi's avatar
THi
Icon for Nimbostratus rankNimbostratus
Nov 26, 2019

I think F5 should consider an RFE for LDAP request singing instead of using LDAP Query, as I believe the AD Auth is used in most APM authentication deployments against AD. Using LDAPS query will be a major reconfig in some cases..

  • Dave_W's avatar
    Dave_W
    Icon for Employee rankEmployee
    Dec 10, 2019

    I did some checking and it appears there is a doc update RFE. Apparently there has been some testing done with AD Query that was successful, HOWEVER more extensive testing has not been completed so I would not consider this technically supported yet. FYI.