Dutch

Testimonial

Using User Management Resource Administrator has saved COUNTLESS hours in creating user accounts. Without UMRA, I couldnt have created the accounts required before school started.

Patrick Howard

Read more...

Contact

Bram

Telefoon
035 5483255

Stel een vraag Ik wil een online demo
Naam: Vraag:

Bedrijf:
E-mail Adres:
Telefoon:

Testimonial

We have a routine to create our Active Directory users and UMRA has helped us minimize these repetitive administration tasks. It has freed us to do what we need to do and not on what we have to do. The tech support is really incredible. I called them with my first task, and I was updating my AD in minutes not in days as before. Please keep up the good work. Carlos Llanos University of Wisconsin Madison - UHS

Read more...

Previous Topic

Next Topic

Book Contents

Secure LDAP Active Directory environment

By default, the Microsoft LDAP implementation does not support secure LDAP. To setup secure LDAP using SSL, certificates must be installed on both sides, the LDAP Server and LDAP Client. In this case, the LDAP Server is the domain controller running Active Directory. The LDAP Client is the UMRA software, either the UMRA Console application or the UMRA Service.

  1. The certificates required to run secure LDAP using SSL can be configured in many ways. The concept is always the same:
  2. The Active Directory domain controller uses a special certificate that is issued by a trusted certification authority.
  3. The UMRA software (computer) trusts the certification authority that issues the certificate to the Active Directory domain controller.

Creating the certificate listed in step 1 requires a special procedure, as described in article Q321051. In this document, the same steps are used and described. Also, the procedure to setup a Certification Authority is described.

First, a certificate request is created. Next, a Certification Authority (CA) is setup and the certificate is signed, e.g. issued by the certification authority. Finally, the root certificate of the certification authority is exported and then imported by the computer that runs the UMRA software.

In this procedure the environment used runs Active Directory on Windows 2003 Standard Edition. For Windows 2000, a similar procedure can be used. The Certification Authority is installed on a Windows 2003 domain controller. For other versions, the procedure might be different.

In This Section

Creating an Active Directory domain controller certificate request

Creating a Certification Authority

Sign the certificate request by the Certification Authority

Exporting the root certificate Certification Authority

Importing the root certificate Certification Authority

Importing the LDAP Server certificate

Setting up the UMRA (LDAP Client) computer

Verifying secure LDAPS using SSL

See Also

Microsoft Active Directory

Introduction

Creating user accounts in Microsoft Active Directory using LDAP

Searching accounts and resetting passwords in Microsoft Active Directory using LDAP

Updating group memberships in Microsoft Active Directory using LDAP