<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: OnCommand Insight 7.3.4 build 7, service pack 9 in Active IQ Unified Manager Discussions</title>
    <link>https://community.netapp.com/t5/Active-IQ-Unified-Manager-Discussions/OnCommand-Insight-7-3-4-build-7-service-pack-9/m-p/165579#M28194</link>
    <description>&lt;P&gt;Hey Michael,&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I am not sure if we have explicitly looked at channel binding on its own. As such, I suspect&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;A href="https://support.microsoft.com/en-us/topic/use-the-ldapenforcechannelbinding-registry-entry-to-make-ldap-authentication-over-ssl-tls-more-secure-e9ecfa27-5e57-8519-6ba3-d2c06b21812e" target="_blank" rel="noopener"&gt;https://support.microsoft.com/en-us/topic/use-the-ldapenforcechannelbinding-registry-entry-to-make-ldap-authentication-over-ssl-tls-more-secure-e9ecfa27-5e57-8519-6ba3-d2c06b21812e&lt;/A&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;If one were to set this&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;STRONG&gt;DWORD value:&lt;/STRONG&gt; &lt;STRONG&gt;2 &lt;/STRONG&gt;indicates &lt;I&gt;enabled, always&lt;/I&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;You would see failures. If that is set to 1, which means that the AD LDAP instance optionally supports channel bind, I *suspect* OCI would be fine, so long as your OCI LDAP configuration is set to use LDAPS (aka LDAP across TLS/SSL), and not just LDAP. A value of 0 should be compatible with both OCI LDAPS and LDAP configurations&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Matt&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Thu, 01 Apr 2021 17:32:42 GMT</pubDate>
    <dc:creator>ostiguy</dc:creator>
    <dc:date>2021-04-01T17:32:42Z</dc:date>
    <item>
      <title>OnCommand Insight 7.3.4 build 7, service pack 9</title>
      <link>https://community.netapp.com/t5/Active-IQ-Unified-Manager-Discussions/OnCommand-Insight-7-3-4-build-7-service-pack-9/m-p/165338#M28188</link>
      <description>&lt;P&gt;Hi all,&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;is&amp;nbsp; LDAP Channel binding and LDAP signing supported on OCI Server&amp;nbsp;7.3.4 build 7, service pack 9 ??&lt;/P&gt;&lt;P&gt;Does anyone have experience with it ?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Thx&lt;/P&gt;&lt;P&gt;Michael&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Wed, 04 Jun 2025 10:29:56 GMT</pubDate>
      <guid>https://community.netapp.com/t5/Active-IQ-Unified-Manager-Discussions/OnCommand-Insight-7-3-4-build-7-service-pack-9/m-p/165338#M28188</guid>
      <dc:creator>sstrznwra</dc:creator>
      <dc:date>2025-06-04T10:29:56Z</dc:date>
    </item>
    <item>
      <title>Re: OnCommand Insight 7.3.4 build 7, service pack 9</title>
      <link>https://community.netapp.com/t5/Active-IQ-Unified-Manager-Discussions/OnCommand-Insight-7-3-4-build-7-service-pack-9/m-p/165579#M28194</link>
      <description>&lt;P&gt;Hey Michael,&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I am not sure if we have explicitly looked at channel binding on its own. As such, I suspect&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;A href="https://support.microsoft.com/en-us/topic/use-the-ldapenforcechannelbinding-registry-entry-to-make-ldap-authentication-over-ssl-tls-more-secure-e9ecfa27-5e57-8519-6ba3-d2c06b21812e" target="_blank" rel="noopener"&gt;https://support.microsoft.com/en-us/topic/use-the-ldapenforcechannelbinding-registry-entry-to-make-ldap-authentication-over-ssl-tls-more-secure-e9ecfa27-5e57-8519-6ba3-d2c06b21812e&lt;/A&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;If one were to set this&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;STRONG&gt;DWORD value:&lt;/STRONG&gt; &lt;STRONG&gt;2 &lt;/STRONG&gt;indicates &lt;I&gt;enabled, always&lt;/I&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;You would see failures. If that is set to 1, which means that the AD LDAP instance optionally supports channel bind, I *suspect* OCI would be fine, so long as your OCI LDAP configuration is set to use LDAPS (aka LDAP across TLS/SSL), and not just LDAP. A value of 0 should be compatible with both OCI LDAPS and LDAP configurations&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Matt&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Thu, 01 Apr 2021 17:32:42 GMT</pubDate>
      <guid>https://community.netapp.com/t5/Active-IQ-Unified-Manager-Discussions/OnCommand-Insight-7-3-4-build-7-service-pack-9/m-p/165579#M28194</guid>
      <dc:creator>ostiguy</dc:creator>
      <dc:date>2021-04-01T17:32:42Z</dc:date>
    </item>
  </channel>
</rss>

