Change of AD Specification (Windows Update to Enable LDAP Signing)

KB#: 000016486
Last Updated: 17/Feb/2020

Summary

Microsoft has announced that it will release a security update in the last half of 2020 to enable LDAP signing and LDAP channel binding by default.

With this security update applied, there will be an issue when you log in to WingArc products or synchronize with Active Directory. Affected operating systems and WingArc products are as follow: 

• Operating Systems - See the list in following article: 2020 LDAP channel binding and LDAP signing requirement for Windows
• WingArc Products - See following table: 

 (*) Bridge service Ver.10.2 or later is also affected.

Workaround

The WingArc products above have not supported Active Directory with LDAP signing enabled yet. Please implement either of following workaround until WingArc releases a patch or service pack to address it.

• Postpone applying the security update
• Change registry keys on Active Directory server as follows after applying the security update:

Registry key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS\Parameters\LDAPServer Integrity
The value to be set : 1 (1 is equivalent to invalid)

Registry key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ldap\ldapclientintegrity
The value to be set : 1 (Change the value to 1 if it is 2)

Planned Solution