Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

LDAP Traffic That Is Created by Exchange System Manager in Exchange Server 2003 Is Signed and Sealed


View products that this article applies to.


IMPORTANT: This article contains information about modifying the registry. Before you modify the registry, make sure to back it up and make sure that you understand how to restore the registry if a problem occurs. For information about how to back up, restore, and edit the registry, click the following article number to view the article in the Microsoft Knowledge Base:
256986 (http://support.microsoft.com/kb/256986/EN-US/ ) Description of the Microsoft Windows Registry

↑ Back to the top


Summary

By default, the Exchange System Manager administrative tool in Exchange Server 2003 signs and encrypts Lightweight Directory Access Protocol (LDAP) traffic. The signing and sealing of LDAP traffic helps to secure LDAP traffic over the network. Exchange System Manager compares the data that is received with the data that is sent to help verify data integrity and tries to confirm that the packaged data comes from a known source and that it has not been tampered with.

↑ Back to the top


More information

To turn off the signature and encryption of LDAP traffic in Exchange Server 2003, create the DebugLDAP value in the following registry key and set the value to 1:
HKEY_LOCAL_MACHINE\Software\Microsoft\Exchange
To do this, follow these steps.WARNING: If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.
  1. Click Start, and then click Run.
  2. In the Open box, type regedit, and then click OK.
  3. Locate, and then click the following registry key:
    HKEY_LOCAL_MACHINE\Software\Microsoft\Exchange
  4. On the Edit menu, point to New, and then click DWORD Value.
  5. Type DebugLDAP, and then press ENTER.
  6. On the Edit menu, click Modify.
  7. In the Value data box, type 1, and then click OK.
  8. Quit Registry Editor.

↑ Back to the top


Keywords: KB818479, kbbug, kbfix

↑ Back to the top

Article Info
Article ID : 818479
Revision : 7
Created on : 10/25/2007
Published on : 10/25/2007
Exists online : False
Views : 261