![Will Dormann on Twitter: "If "Domain Controller: LDAP server signing requirements" is set to "Require signing", this appears to block the exploit at the stage of relaying kerberos authentication to LDAP. https://t.co/o6rDeU6AIC" / Will Dormann on Twitter: "If "Domain Controller: LDAP server signing requirements" is set to "Require signing", this appears to block the exploit at the stage of relaying kerberos authentication to LDAP. https://t.co/o6rDeU6AIC" /](https://pbs.twimg.com/media/FRSSur-XoAEOUe-.jpg)
Will Dormann on Twitter: "If "Domain Controller: LDAP server signing requirements" is set to "Require signing", this appears to block the exploit at the stage of relaying kerberos authentication to LDAP. https://t.co/o6rDeU6AIC" /
Test connection failed. One or more directory connections is incorrect error during testing connecti... - RSA Community - 1281
![Step by Step: Enforce Require LDAP Signing on domain controllers. Part 1 - Azure Cloud & AI Domain Blog Step by Step: Enforce Require LDAP Signing on domain controllers. Part 1 - Azure Cloud & AI Domain Blog](https://i0.wp.com/azurecloudai.blog/wp-content/uploads/2019/08/image-4.png?resize=620%2C638&ssl=1)
Step by Step: Enforce Require LDAP Signing on domain controllers. Part 1 - Azure Cloud & AI Domain Blog
LDAP Channel Binding and LDAP Signing Requirements - March 2020 update final release - Microsoft Community Hub
![Will Dormann on Twitter: "@dec0ne @tiraniddo @cube0x0 @harmj0y I'm testing the viability of requiring LDAP signing as a mitigation for this. And, it seems to do nothing to prevent it?? https://t.co/YyTd4LXtVx" / Will Dormann on Twitter: "@dec0ne @tiraniddo @cube0x0 @harmj0y I'm testing the viability of requiring LDAP signing as a mitigation for this. And, it seems to do nothing to prevent it?? https://t.co/YyTd4LXtVx" /](https://pbs.twimg.com/media/FRSRk58XwAYs3FF.jpg)