Results 1 to 2 of 2

Thread: Event ID 2887

  1. #1
    Join Date
    Feb 2010
    Posts
    1

    Event ID 2887

    I've been getting this error since we upgraded the domain controllers to server 2008. After enabling the detailed logging I get event ID 2887 about every 3 minutes from my Mac computers:

    The following client performed a SASL (Negotiate/Kerberos/NTLM/Digest) LDAP bind without requesting signing (integrity verification), or performed a simple bind over a cleartext (non-SSL/TLS-encrypted) LDAP connection.

    Client IP address:
    207.157.74.96:49660
    Identity the client attempted to authenticate as:
    NSSTC-UAH\christymac$

    We've tried forcing them to digitally sign their LDAP requests but that didn't seem to work. Googling the event ID's doesn't give much help either. Any thoughts?

  2. #2
    Join Date
    Feb 2008
    Posts
    767

    Re: Event ID 2887

    You are capable to ignore this message if you would like to force every client with LDAP signing. As this is a latest feature within Windows Server 2008, which advice that some customers are not using SSL / TSL or LDAP signing for LDAP connections. This can be avoided if all clients are using SSL / TSL or LDAP signing. Note that if the message indicates that all the league in question is attached simple - which means that the credentials are transmitted in clear text. This security vulnerability is - so I suggest you investigate this further (to identify the offending customers must ensure that such connections are established via SSL.

Similar Threads

  1. MSI P67A-GD53 (B3) is crashing getting Kernel Power-Event ID 41 in Event viewer
    By Chellappan in forum Motherboard Processor & RAM
    Replies: 7
    Last Post: 10-12-2011, 11:35 AM
  2. Replies: 3
    Last Post: 25-02-2009, 03:42 PM
  3. Event ID: 5721 Event Source: NETLOGON member server windows 2003
    By Edwin Delgado in forum Windows Server Help
    Replies: 1
    Last Post: 08-09-2007, 12:41 AM
  4. Event ID:9791 Event Source: MSExchangeIS Mailbox Store
    By Dakshi in forum Small Business Server
    Replies: 3
    Last Post: 08-05-2007, 05:36 AM
  5. Event Log Error: Event Source:WinMgmt Event ID:10
    By BlackSunReyes in forum Small Business Server
    Replies: 2
    Last Post: 01-03-2007, 03:27 AM

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
Page generated in 1,711,616,294.91167 seconds with 17 queries