MS14-066 Windows Server (2008, 2008R2, 2012, 2012R2) security update breaks winsync replication agreement for IPA and Directory server

Issue

Red Hat IPA or Red Hat Directory Server can not create a new winsync agreement after updating the Windows server.

Red Hat IPA or Red Hat Directory Server can no longer synchronize entries over an existing winsync agreement after updating the Windows server.

The MS14-066 security update for Windows Server systems (2008, 2008R2, 2012, 2012R2) enforces the use of TLS 1.1+ on all incoming connections. As a result, IPA cannot establish a win-sync replication agreement with the Active Directory LDAP service.