Setting up Secure LDAP (LDAPS) on Windows Server 2008

Posted by Andrew Hodgson on March 8, 2009, 12:37 pm

Please log in for more thread options

Hi,

I have an external app which requires LDAP integration with our
domain. I want to use LDAPs for this. Is it correct that to do this
I need to install an enterprise CA on the domain? If so, does this
need to be a separate server, or can it be on the domain controller?

Our domain is 2008 native upgraded from Windows 2000 native.

Thanks.
Andrew.

Posted by Meinolf Weber [MVP-DS] on March 8, 2009, 1:32 pm

Please log in for more thread options

Hello Andrew,

Have a look here:
http://technet.microsoft.com/en-us/library/cc725767.aspx

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

show/hide quoted text

Posted by Jorge de Almeida Pinto [MVP - on April 17, 2009, 3:22 am

Please log in for more thread options

for LDAPS you need a certificate, one provided by your own CA or by a third
party CA. Preferably a CA is NOT installed on a DC. Because you just need a
cert it does not mean you just need to install an enterprise CA. What I mean
is, that you need to make a design for the PKI infrastructure. By just
starting to install stuff without thinking is definitely a very bad practice
and in the end you might even regret it.

How to design a PKI infrastructure?

To get an impression, start reading:
http://www.windowsecurity.com/articles/Microsoft-PKI-Quick-Guide-Part1.html

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Identity & Access - Directory Services #

show/hide quoted text
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test ANY suggestion in a test environment before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------

show/hide quoted text