topic Re: Vserver LDAP signing - what is the impact for clients? in ONTAP Discussions

Vserver LDAP signing - what is the impact for clients?

kombayn — Wed, 27 Apr 2022 12:07:47 GMT

Hello

I need to enable LDAP signing on my CIFS vservers ("Client Session Security" set to "Sign"), but I'm not sure what will be the impact for current users using CIFS shares. Will they be disconnected? Should I also turn on the option "Is Signing Required" to True?

I'm using ONTAP 9.10.1P2

Re: Vserver LDAP signing - what is the impact for clients?

pedro_rocha — Wed, 27 Apr 2022 13:35:51 GMT

Hi,

just to make it clear. We are talking abou LDAP signing right? not SMB signing.

Re: Vserver LDAP signing - what is the impact for clients?

kombayn — Wed, 27 Apr 2022 13:48:53 GMT

Correct - LDAP signing

Re: Vserver LDAP signing - what is the impact for clients?

pedro_rocha — Wed, 27 Apr 2022 14:30:32 GMT

I did not find specific answers for your questions.

I found this: https://kb.netapp.com/Advice_and_Troubleshooting/Data_Storage_Software/ONTAP_OS/Does_LDAP_signing_affect_applications_which_are_not_secure_LDAP_signing_compatible%3F

I understand that this setting does not affect SMB sessions, since it is between CIFS server and LDAP server. You can confirm this with NetApp support.

This can help you further also: https://kb.netapp.com/Advice_and_Troubleshooting/Data_Storage_Software/ONTAP_OS/How_to_set_ONTAP_to_use_LDAP_Signing_or_Sealing_for_CIFS%2F%2FNFS

That setting "is signing required" is regarding SMB signing, not LDAP signing.

Re: Vserver LDAP signing - what is the impact for clients?

kombayn — Fri, 29 Apr 2022 15:22:53 GMT

Thanks for your advice. I've enabled LDAP signing and no user called me that he lost connection to his share - so I can confirm that there is no impact for existing CIFS sessions.