On 07/30/2013 03:55 PM, Chris Hartman wrote:
AFAIU Kerberos negotiation if implemented properly (which I think is
the case here) mitigates MIM attacks making SSL really not needed.
MSFT is just paranoid about it. The SSL might be needed when you do
a password change but not the bind but I suspect for simplicity MSFT
decided to implement all or nothing approach. Very unfortunate, I
should say... Not for the first time.
--
Thank you,
Dmitri Pal
Sr. Engineering Manager for IdM portfolio
Red Hat Inc.
-------------------------------
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/