Forum Discussion

THi's avatar
THi
Icon for Nimbostratus rankNimbostratus
Nov 26, 2019

APM AD auth and LDAP request signing

Microsoft intends to require LDAP singing by default in their upcoming January 2020 server security updates. See https://support.microsoft.com/en-us/help/4520412/2020-ldap-channel-binding-and-ldap-si...
BIG-IP Access Policy Manager (APM)
security
action_-'s avatar
action_-
Icon for Altostratus rankAltostratus
Jan 17, 2020

So, I was looking into this and our DCs are already configured for this due to DoD STIGs from looking at the registry.

 

We're on 14.1.2.2

Use AAA Active Directory for APM AD Queries, SSO Kerberos, and also logging into f5 with AD accounts for the management GUI.

 

There are EventCode 2889 in my event logs when I enable the LDAP Interface Events debug logging, but the "BindType" field doesn't exist, so not sure. There are no issues as far as I can tell.

 

Anyone experiencing otherwise?