I need to set up SSL over Active Directory. I googled a lot but could not found a decent write up about how to do this. Please if you know some good resources about this let me know. Thanks!
A:
Can you be more specific. What is the client trying to do? Active directory support ldap over ssl by default. There is nothing that should be done to activate it. It is done in port 636/tcp. http://technet.microsoft.com/en-us/library/bb727063.aspx
Igal Serban
2008-11-15 00:03:38
I suspect his issue is more related to getting the certificate from SOMEWHERE, to use for SSL. Usually that is the bigger issue.
geoffc
2008-11-20 17:45:50
+1
A:
Sounds easy - but I ran into quite a few problems getting trusted connections with SSL working in our environment. The article was about ADAM but is just as applicable for AD.
I blogged about how I got this working a while back
http://stephbu.spaces.live.com/blog/cns!DF06426B82CDE7DF!559.entry
Dan and Erlend's postings were invaluable.
Took some backflips to get it done.
stephbu
2008-11-15 00:09:41
A:
The absolute fastest way to install SSL into AD is to load MS certificate services. Once this is installed, all domain controllers will request a new certificate automatically and update themselves...
jm04469
2009-04-22 10:18:23
A:
The Lightweight Directory Access Protocol (LDAP) is used to read from and write to Active Directory. By default, LDAP traffic is transmitted unsecured. You can make LDAP traffic confidential and secure by using Secure Sockets Layer (SSL) / Transport Layer Security (TLS) technology. You can enable LDAP over SSL (LDAPS) by installing a properly formatted certificate from either a Microsoft certification authority (CA) or a non-Microsoft CA according to the guidelines in this article.