Meeting the InCommon Assurance profile criteria using Active Directory

["Michael W. Brogan" <>]

This thread says that LDAP signing sets the security flags ADS_USE_SIGNING & ADS_USE_SEALING:

http://social.technet.microsoft.com/Forums/en-US/249c0aab-9640-496b-94d1-ecf6021ac0b9/sign-and-encrypt-ldap-traffic

 

This article says that ADS_USE_SEALING uses Kerberos for encryption:

http://msdn.microsoft.com/en-us/library/aa772247.aspx

 

Michael W. Brogan

Technical Lead, Identity and Access Management

UW Information Technology, University of Washington

206-685-7521