Details
Description
Microsoft introduced a new requirement on AD domain controllers found here:
This has broken binding SaslGssApiRequest with an LdapNetworkConnection that has startTls. On our DC if I toggle the RegistryEntry "LdapEnforceChannelBinding" the bind(SaslGssApiRequest) works again.
There is a new JNDI environment property that can be set to use channel binding:
https://bugs.openjdk.java.net/browse/JDK-8245527
We need to be able to set this.