topic Re: LDAP Channel binding failed login in App Volumes https://communities.vmware.com/t5/App-Volumes/LDAP-Channel-binding-failed-login/m-p/515126#M5194 <HTML><HEAD></HEAD><BODY><P>Hi, You can review KB 77093 for App Volumes and channel binding currently and relation to the Microsoft 2020 update</P><P><A href="https://kb.vmware.com/s/article/77093" title="https://kb.vmware.com/s/article/77093"> </A></P></BODY></HTML> Mon, 03 Feb 2020 08:37:40 GMT cliffvmwareeuc 2020-02-03T08:37:40Z LDAP Channel binding failed login https://communities.vmware.com/t5/App-Volumes/LDAP-Channel-binding-failed-login/m-p/515125#M5193 <HTML><HEAD></HEAD><BODY><P>I am doing a bunch of tests in a lab environment where I could confirm the behavior of vCenter, Horizon and App Volumes with regards to the Microsoft <A href="https://support.microsoft.com/en-ca/help/4520412/2020-ldap-channel-binding-and-ldap-signing-requirement-for-windows">march update</A>.</P><P>All 3 are OK with LDAP signing when configured as LDAPS.</P><P></P><P>However App Volumes is not OK with <A href="https://support.microsoft.com/en-ca/help/4034879">Channel Binding</A> when <SPAN style="color: #000000; font-family: 'Segoe UI', SegoeUI, 'Helvetica Neue', Helvetica, Arial, sans-serif; font-size: 15px;"><EM>LdapEnforceChannelBinding</EM> is set to 2 (ok if set to 1).</SPAN></P><P></P><P>In the logs I get an LDAP 49 error (failed login) even though the creds are correct.</P><P>The server is patched windows udpate wise.</P><P>I get a <A href="https://support.microsoft.com/en-us/help/246717/numerous-event-id-1216-events-in-directory-services-event-log">1216 </A>in the Directory Service diagnostic event log on the DC.</P><P></P><P><span class="lia-inline-image-display-wrapper" image-alt="appvolumes-ldap-bind.jpg"><img src="https://communities.vmware.com/t5/image/serverpage/image-id/17012i93F0BECD5715F4F3/image-size/large?v=v2&amp;px=999" role="button" title="appvolumes-ldap-bind.jpg" alt="appvolumes-ldap-bind.jpg" /></span></P><P></P><P>3 questions :</P><UL><LI>Will the Microsoft update set <SPAN style="color: #000000; font-family: 'Segoe UI', SegoeUI, 'Helvetica Neue', Helvetica, Arial, sans-serif; font-size: 15px;">LdapEnforceChannelBinding&nbsp; to 1 or 2 ?</SPAN></LI><LI><SPAN style="color: #000000; font-family: 'Segoe UI', SegoeUI, 'Helvetica Neue', Helvetica, Arial, sans-serif; font-size: 15px;">Is App Volumes just not compatible with <SPAN style="color: #000000; font-family: 'Segoe UI', SegoeUI, 'Helvetica Neue', Helvetica, Arial, sans-serif; font-size: 15px;">channel binding tokens ?</SPAN></SPAN></LI><LI><SPAN style="color: #000000; font-size: 15px; font-family: 'Segoe UI', SegoeUI, 'Helvetica Neue', Helvetica, Arial, sans-serif;">Am I missing something?</SPAN></LI></UL></BODY></HTML> Fri, 31 Jan 2020 12:38:49 GMT https://communities.vmware.com/t5/App-Volumes/LDAP-Channel-binding-failed-login/m-p/515125#M5193 vXav 2020-01-31T12:38:49Z Re: LDAP Channel binding failed login https://communities.vmware.com/t5/App-Volumes/LDAP-Channel-binding-failed-login/m-p/515126#M5194 <HTML><HEAD></HEAD><BODY><P>Hi, You can review KB 77093 for App Volumes and channel binding currently and relation to the Microsoft 2020 update</P><P><A href="https://kb.vmware.com/s/article/77093" title="https://kb.vmware.com/s/article/77093"> </A></P></BODY></HTML> Mon, 03 Feb 2020 08:37:40 GMT https://communities.vmware.com/t5/App-Volumes/LDAP-Channel-binding-failed-login/m-p/515126#M5194 cliffvmwareeuc 2020-02-03T08:37:40Z Re: LDAP Channel binding failed login https://communities.vmware.com/t5/App-Volumes/LDAP-Channel-binding-failed-login/m-p/515127#M5195 <HTML><HEAD></HEAD><BODY><P>Indeed, channel binding is not supported by App Volumes as of 2.18.</P></BODY></HTML> Mon, 03 Feb 2020 08:41:33 GMT https://communities.vmware.com/t5/App-Volumes/LDAP-Channel-binding-failed-login/m-p/515127#M5195 vXav 2020-02-03T08:41:33Z