Strong authentication required with LDAP and Active Directory

HCL Domino Domino Forum
1

Hi,

I would like to connect my Domino Server (5.011 at this time but we can upgrade to 6.x if needed) to our Active Directory (Win2003) via LDAP.

I configure a Directory Assistance document, I can bind the AD server but, when I try to query, I’ve got the error : “Strong authentication required” despite of I use a valid account to reach the server.

Some of you have ever had this problem and do you know a way to solve it ?

Thanks.

Regards.

Arnaud

2

Subject: Strong authentication required with LDAP and Active Directory

This exception is thrown when the particular flavor of authentication requested is not supported. For example, if the program is attempting to use strong authentication but the directory/naming supports only simple authentication, this exception would be thrown. Identification of a particular flavor of authentication is provider- and server-specific. It may be specified using specific authentication schemes such those identified using SASL, or a generic authentication specifier (such as “simple” and “strong”).

So basically what do you have set for required authentication on AD?

3

Subject: RE: Strong authentication required with LDAP and Active Directory

Hi Chris,

Authentication on AD is based on Kerberos and/or NTLMV2.

Here are the LDAP properties :

supportedSASLMechanisms=GSSAPI

supportedSASLMechanisms=GSS-SPNEGO

supportedSASLMechanisms=EXTERNAL

supportedSASLMechanisms=DIGEST-MD5

Arnaud