https://bugs.openldap.org/show_bug.cgi?id=9189

Bug ID: 9189 Summary: Add GSSAPI channel-bindings support Product: OpenLDAP Version: unspecified Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: libraries Assignee: bugs@openldap.org Reporter: iboukris@gmail.com Target Milestone: ---

Recently MS has announce they plan to enforce channel-bindings for LDAP over TLS (ADV190023).

To support it on client side, we need to pass "tls-endpoint" bindings (RFC 5929) to the SASL plugin, and make use of that in GSSAPI.

See also: https://github.com/cyrusimap/cyrus-sasl/pull/601