AD sync not working now?

dreamscape · March 26

I have hardened my AD and now get the error below when trying to do a sync: LOG 2025-03-26 15:36:14 warning LDAP Error: FATAL: AD bind failed. Check the login credentials (8: Strong(er) authentication required). (00002028: LdapErr: DSID-0C090330, comment: The server requires binds to turn on integrity checking if SSL\TLS are not already active on the connection, data 0, v4f7c) 99 *ERROR: Authentication failed (and other possible unknown errors) Any ideas how i fix this?

dreamscape · March 26

For info i have used the below to harden it: https://support.microsoft.com/en-au/topic/kb5008383-active-directory-permissions-updates-cve-2021-42291-536d5555-ffba-4248-a60e-d6cbc849cde1 https://blog.lithnet.io/2018/12/disabling-unauthenticated-binds-in.html and deployed 'Domain controller: LDAP server signing requirements: Require signing ' on the DC's but i haven't enabled tls so still port 389

adminf · March 27

Hello,
As your AD server returns "stronger authentication required", you have to install an SSL/TLS certificate on your AD in order to make now
a SSL/TLS connection with RADIUS. As so as you have hardened your AD, you cannot use RADIUS anymore with a non-TLS connection.
Regards,

AD sync not working now?

Comments