12

How important is LDAP over SSL with Active Directory?

view full story
linux-howto

http://serverfault.com – I set out to integrate Active Directory with the iDRAC LOM for our Dell servers. One of the prerequisites is that the Domain Controllers be SSL enabled for ldap communication. The setup process in iDRAC says Upload Active Directory CA Certificate. So I log in to one of our DCs, go to its personal certificate store, and it's empty. Up until today I've always assumed that our domain services were using SSL (I wasn't the one who set up the domain). I've never set it up before myself, and I'm not too familiar with the ins-and-outs, so the only way I know to check whether we're using SSL or not is (HowTos)

xskl's picture
Submitted by xskl on 01/26/2012 – Made popular on 01/26/2012

Stories similar to How important is LDAP over SSL with Active Directory?

Because I want to test SSL in the local domain I've installed Enterprise Certificate Authority with the use of this tutorial.

The Install went successful and after install I rebooted the DC.

This is hypothetical question, but one I’m sure that someone must have encountered and/or given some thought to before.

Situation: Consider this, a small business is running an Active Directory domain and has two domain controllers which are located in their office. The domain controllers are both physical servers (no virtualisation).

Hi,

Are there any instructions or tutorials on how to set up Samba with an existing Active Directory domain with openSUSE 11.1 and 3.2 Samba?

All of the ones I've found are for previous versions and have a note on them saying they need to be updated for the current version. They also don't seem to work with the the version I have.

My problem is that I have a number of network administration applications like SAN switches that do not support nested groups from Active Directory Domain Services (AD DS).

The instructions for deploying an HPC Cluster (e.g. step 1.5 on this page in TechNet) are very clear that HPC cluster nodes "must be members of an Active Directory domain".

Does the Active Directory Lightweight Directory Services provide this?

That is, can the HPC cluster use AD LDS for its Active Directory domain, or do I need the full AD DS (Domain Services) role?

At the moment we are integrating LDAP in our environment. Compared to Windows this process is much complicated and time consuming. With Windows you had Active Directory and if you create a new server, you just add it to the domain and your finished. Yes, I know Unix is not Windows. Are there any (commercial) solutions to ease the administration of ldap ?

We have a new Domain Controller that holds all FSMO roles. We also have two old hardware servers, about 4-5 years old each, set up as secondary Domain Controllers. My question is do I run the risk of corruption in Active Directory if I have a drive failure, due to old hardware, on one of the secondary Domain Controllers.

I was performing a rename of an Active Directory domain that consists of two domain controllers running Windows Server 2012, and everything was going smoothly... However, I ran the rendom /clean utility too soon.

If you execute rendom /clean before all the machines in the domain get rebooted twice, they won't be able to access the domain any longer...

I've ran active directory in the past in the 2003-2008 era. I remember multiple headaches i had back then:

I wanted to upgrade the domain controller hardware which was going to cause a rebuild. I'm not a network guy by trade but rather a programmer.