node-ldapjs icon indicating copy to clipboard operation
node-ldapjs copied to clipboard

Ldap requests that require signing

Open jlieman opened this issue 5 years ago • 6 comments

It does not appear that LDAP signing is supported for simple binds. Can support for this be added? This is commonly configured in more recent Active Directory installs as described here. https://support.microsoft.com/en-us/help/4520412/2020-ldap-channel-binding-and-ldap-signing-requirements-for-windows

Here is the error received when connecting to AD servers with this requirement. StrongAuthRequiredError: 00002028: LdapErr: DSID-0C090266, comment: The server requires binds to turn on integrity checking if SSL\TLS are not already active on the connection, data 0, v4563

jlieman avatar Oct 09 '20 13:10 jlieman

Would you like to submit a pull request to add this feature? Please remember to add unit tests.

jsumners avatar Oct 10 '20 10:10 jsumners

@jlieman do you have a workaround? I bumped into the same error. Thanks

sand123 avatar Jan 11 '21 04:01 sand123

It would be really nice to have LDAP signing support since it is a recommended security update from Microsoft.

kushwahav avatar Jan 25 '21 14:01 kushwahav

@kushwahav PRs are always welcome 😁👍

UziTech avatar Jan 25 '21 14:01 UziTech

I wouldn't mind coding this, but I have no clue where to begin. I imagine there is some API on the LDAP server that needs to be used, but I can't find the docs for it. The above-linked KB doc deals with server configuration, not coding. Nor does it link to anything that would help a programmer, so far as I can tell. Thoughts?

rconstantine avatar May 23 '22 17:05 rconstantine

https://ldapwiki.com/wiki/LDAP%20Signing via https://duckduckgo.com/?q=ldap+signing

jsumners avatar May 24 '22 12:05 jsumners

👋

On February 22, 2023, we released version 3 of this library. As a result, we are closing this issue/pull request.

Please see issue #839 for more information, including how to proceed if you feel this closure is in error.

jsumners avatar Feb 22 '23 19:02 jsumners