LDAP Signing and Channel Binding Check

Assess whether an Active Directory Domain Services LDAP endpoint enforces LDAP signing on LDAP and channel binding for authentication over TLS/LDAPS. These endpoint checks inform NTLM-relay risk assessment but do not by themselves establish that a relay is feasible or impossible; the result applies only to the tested endpoint and authentication path.