LDAP/S for ePO

[jwoodmls]

I got the notification several months ago about LDAP channel binding (I think it references KB92298). 

I took a look at it and it talks about editing settings on the LDAP server.  I use AD sychronization in ePO, but I have nothing set up under LDAP servers.  Do I need to worry about this?

[Former Member]

Hello @jwoodmls 

Thanks for your post.

Have your tried checking the Registered Servers in the ePO to see whether the LDAP is configured or not.

If you are not using you are good to go.

If in case you able to see that it is there under Registered Servers then please enable SSL and save it.

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

[jwoodmls]

@Former Member Yes, I've looked and I don't have LDAP configured under registered servers.  

As mentioned, I do use Active Directory Sync, but I'm assuming that connects differently then and as you said, shouldn't affect me?

[cdinet · Accepted solution]

If you don't have any registered ldap servers set up and are just using the ldap server info in the ad sync settings, there is still an option to use ssl.  The domain controller must be set up to use ssl for that to work.

[jwoodmls]

Ah yes I see that.  So is the only verification on that to check the SSL option and run an AD sync to check if it works?  I believe due to recent upgrades, our domain controller is set up to allow SSL.

[cdinet]

Yes, exactly.

[jwoodmls]

Thank you.  Seems to be working just fine.  I appreciate it.