The ms-DS-Repl-Authentication-Mode attribute is used to specify which authentication method is used to authenticate replication partners. This attribute applies to the configuration partition of an ADAM instance.
The following values are the possible values for this attribute.
Value
Authentication method
Description
0
Negotiated pass-through
All ADAM instances in the configuration set use an identical account name and password as the ADAM service account.
1
Negotiated
Kerberos authentication (using SPNs) is attempted first. If Kerberos fails, NTLM authentication is attempted. If NTLM fails, the ADAM instances will not replicate.
2
Mutual authentication with Kerberos
Kerberos authentication, using service principal names (SPNs), is required. If Kerberos authentication fails, the ADAM instances will not replicate.
The following table contains the programmatic identifiers for the values of this attribute.