Neil Wilson

The UnboundID LDAP SDK does not have any specific support for Active Directory forests. I'm not really familiar with the Microsoft-proprietary aspects of Active Directory, but if you can interact...

The Javadoc for the `javax.naming.ldap.ExtendedRequest.getEncodedValue()` method states "The result is the raw BER bytes including the tag and length of the request value.". This indicates that `value.encode()` is correct, and...

After testing, it does appear that the behavior that JNDI actually exhibits directly contradicts its documentation. This appears to be true for extended requests, extended responses, and controls. I have...

This is an intentional omission because bind operations cannot be processed asynchronously. LDAP explicitly forbids processing any operation on a connection while a bind is in progress on that connection....

I assume that you’re asking about writing LDAP clients. In that case, the LDAP SDK has always supported mutual TLS. To use it, you need to have access to a...

At present, the LDAP SDK doesn’t directly support using PEM files as a key or trust store. However, it does provide a manage-certificates tool that you can use either from...

Yes, that is correct. Although I would not recommend using the latter because it increases the potential for the client to be tricked into connecting to an impostor rather than...

The trust manager is responsible for verifying that the certificate is valid and should be trusted. Since it looks like you're using a trust store trust manager, then that's the...

The LDAP SDK doesn't directly implement support for TLS, but rather uses the TLS implementation provided by the underlying JVM. As such, you should consult the documentation for the particular...

It sounds like you want the server to return a response of "busy" to all requests. You can't do that from the command line, but it's very easy to do...