I have a domain joined MAC, which is running LDAP unsigned bind to the Active Directory and trying to figure out how to configure the MAC machine to use LDAPS instead. Any help or guidance is much appreciated!
Finally this worked for me. So sharing it back with the community
dsconfigad -packetencrypt ssl
And also make sure that the certificate chain is up to date in System/KeyChain
I wonder if this old info helps?
https://krypted.com/mac-security/mac-os-x-force-ldap-signing-using-dsconfigad/
Thanks for your response.
Yes, i ran the following commands
dsconfigad -packetsign require
dsconfigad -packetsign encrypted
but still see the 2889 events on the domain controller showing the ldap unsigned bind from the MAC computer account
OK, we need better help in here. :)
Great work, thanks for the report! :)
Unsigned LDAP traffic from domain joined MAC
