<html><body><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt; color: #000000"><div>Hi all, </div><div><br></div><div>I am having the trouble with IPA-AD trust. We have scenario, where on the AD side the LDAP signing policy is on - this is company standard and can not be changed.</div><div>Is there any chance to let the IPA use LDAP signing on IPA side ? I guess IPA use SASL LDAP bind but without signing. </div><div><br data-mce-bogus="1"></div><div>What I am not understanding now is that IPA is still able to obtain info from AD LDAP although DC<span style="color: #000000; font-family: arial, helvetica, sans-serif; font-size: 16px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: #ffffff; display: inline !important; float: none;" data-mce-style="color: #000000; font-family: arial, helvetica, sans-serif; font-size: 16px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: #ffffff; display: inline !important; float: none;"> servers keeps complaining about unsigned LDAP connections - event 2889.</span><pre class="tw-data-text tw-ta tw-text-medium" data-placeholder="Překlad" id="tw-target-text" data-fulltext="" dir="ltr" style="unicode-bidi: isolate; background-color: #ffffff; border: none; padding: 0px 0.14em 0px 0px; position: relative; margin: 0px; resize: none; font-family: inherit; overflow: hidden; text-align: left; width: 281.5px; white-space: pre-wrap; word-wrap: break-word; font-size: 29px !important; line-height: 36px !important; color: #212121; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: 2; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; height: 36px;" data-mce-style="unicode-bidi: isolate; background-color: #ffffff; border: none; padding: 0px 0.14em 0px 0px; position: relative; margin: 0px; resize: none; font-family: inherit; overflow: hidden; text-align: left; width: 281.5px; white-space: pre-wrap; word-wrap: break-word; font-size: 29px !important; line-height: 36px !important; color: #212121; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: 2; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; height: 36px;"><br></pre></div><div>https://support.microsoft.com/en-us/kb/935834</div><div>https://technet.microsoft.com/en-us/library/dd941849(v=ws.10).aspx</div><div><br data-mce-bogus="1"></div><div><br></div><div>Thanks for help.</div><div data-marker="__SIG_PRE__">Jan Karásek<br><br></div></div></body></html>