This message was deleted.

What do you mean by doesn‘t validate the cert? Is the validation not working? https://support.citrix.com/article/CTX201090

for example it works with the IP instead of the name in the cert so it isn’t checking anything about the cert at all.

Than the LB is using TCP instead of SSL_TCP and the Domain Controllers are accepting the request?

it’s not an LB, it’s doing a direct connection on 636 set to SSL

Ok talking about an LDAP Auth Server. So yes, if validation is not enabled and domain controller accepts it, the connection is simply established using the cert. Doesn‘t matter if cert is correct. But that’s more an Issue at the backend that accepted the request. I think this was the number ADV190023 of the LDAP changes regarding signing and channel binging.

so if you turned that on you’d not be able to use the netscaler without it doing validation?

That would be what I would expect, yeah. But I have just tested with 12.1-60.19 and 13.0-71.44 and it makes absolutely no difference whether I check the box for "Validate LDAP Server Certificate" and enter an "LDAP Host Name" or not. It always works :-(

Yeah that’s the bit that confuses me, I’ve never actually tried to get validation working and always wondered why it works with just an IP