JDK-8280599 : LDAP channel binding for other SASL mechanisms
  • Type: Bug
  • Component: core-libs
  • Priority: P4
  • Status: Open
  • Resolution: Unresolved
  • Submitted: 2022-01-25
  • Updated: 2022-01-25
Description
When the LDAP channel binding requirement is enabled in Active Directory, SASL mechanisms other than GSS/Kerberos must also supply channel binding data.

SASL digest-md5 authentication over a SSL/TLS connection fails with the same 

LDAP: error code 49 - 80090346: LdapErr: DSID-0C09058A, comment: AcceptSecurityContext error, data 80090346, v4563

error that you get with GSS/Kerberos connections.