Outils pour utilisateurs

Outils du site


samba_ad

Différences

Ci-dessous, les différences entre deux révisions de la page.

Lien vers cette vue comparative

Les deux révisions précédentesRévision précédente
Prochaine révision
Révision précédente
samba_ad [2025/05/28 13:26] – [How to retrieve a LDAPS certificate] huracansamba_ad [2025/05/28 13:37] (Version actuelle) – [Obtaining the LDAPS Certificate from the Active Directory Server] huracan
Ligne 169: Ligne 169:
 Requirements: Requirements:
  
-    Openssl +  * Openssl 
-    FQDN or IP of the Active Directory Server +  FQDN or IP of the Active Directory Server 
-    LDAPS certificate installed in the Active Directory Server certificate store+  LDAPS certificate installed in the Active Directory Server certificate store
  
 Steps: Steps:
  
-    Run the following command from your local computer:  +  -1 Run the following command from your local computer:
-    openssl s_client -showcerts -connect <ip or fqdn of your active directory server>:636 +
-    In the output, copy the certificate portion of the output to a text file+
  
-rtal+  openssl s_client -showcerts -connect <ip or fqdn of your active directory server>:636 
 + 
 +  -2 In the output, copy the certificate portion of the output to a text file 
 + 
 +{{ :cert.png?400 |}}
  
 3. Save the text file as my_ldaps_cert.pem. 3. Save the text file as my_ldaps_cert.pem.
Ligne 189: Ligne 191:
 Requirements: Requirements:
  
-    Openssl installed on your Linux computer +  * Openssl installed on your Linux computer 
-    FQDN or IP of the Active Directory Server +  FQDN or IP of the Active Directory Server 
-    LDAPS certificate installed in the Active Directory Server certificate store+  LDAPS certificate installed in the Active Directory Server certificate store
  
 Perform the following steps: Perform the following steps:
  
-    Enter the following command from your Linux computer: +  - 1 Enter the following command from your Linux computer: 
-    openssl s_client -showcerts -connect <fqdn of your ldap server>:636 -servername < fqdn of your ldap server> </d ev/null 2>/dev/null > my_ldaps_cert.pem + 
-    Example: +  openssl s_client -showcerts -connect <fqdn of your ldap server>:636 -servername < fqdn of your ldap server> </d ev/null 2>/dev/null > my_ldaps_cert.pem 
-    openssl s_client -showcerts -connect mydc.mycompany.com:636 -servername mydc.mycompany.com </d ev/null 2>/dev/null > my_ldaps_cert.pem + 
-    Upload my_ldaps_cert.pem to the PCoIP Management Console. See Installing an Active Directory Certificate in the PCoIP Management Console Administrators' Guide.+Example: 
 + 
 +  openssl s_client -showcerts -connect mydc.mycompany.com:636 -servername mydc.mycompany.com </d ev/null 2>/dev/null > my_ldaps_cert.pem 
 + 
 +  - 2 Upload my_ldaps_cert.pem to the PCoIP Management Console. See Installing an Active Directory Certificate in the PCoIP Management Console Administrators' Guide.
  
 The saved certificate can be installed into any software that needs to connect to your Active Directory using LDAPS. The saved certificate can be installed into any software that needs to connect to your Active Directory using LDAPS.
Ligne 209: Ligne 215:
 Requirements: Requirements:
  
-    FQDN or IP of the Active Directory Server +  * FQDN or IP of the Active Directory Server 
-    Administrator username and password of the Active Directory Server +  Administrator username and password of the Active Directory Server 
-    LDAPS certificate installed in the Active Directory Server certificate store+  LDAPS certificate installed in the Active Directory Server certificate store
  
 Perform the following steps: Perform the following steps:
  
-    On the Active Directory Server, login as administrator. + On the Active Directory Server, login as administrator. 
-        Launch mmc.exe. +   - Launch mmc.exe. 
-        From the Console, click on File > Add/Remove Snap-in +   - From the Console, click on File > Add/Remove Snap-in 
-        In the Add or Remove Snap-ins, select Certificates, then click Add. +   - In the Add or Remove Snap-ins, select Certificates, then click Add. 
-        In the Certificates snap in dialog box, select Computer account, and click Next. +   - Liste numérotéeIn the Certificates snap in dialog box, select Computer account, and click Next. 
-        In the Select Computer dialog, select Local computer: (the computer this console is running on), then click Finish. +   - In the Select Computer dialog, select Local computer: (the computer this console is running on), then click Finish. 
-        In the Add or Remove Snap-ins window, click OK. +   - In the Add or Remove Snap-ins window, click OK. 
-        In the Console, in the left pane, browse to Certificates (Local Computer) > Personal > Certificates. Choose the correct LDAPS certificate. This is the certificate with the following information: +   - In the Console, in the left pane, browse to Certificates (Local Computer) > Personal > Certificates. Choose the correct LDAPS certificate. This is the certificate with the following information: 
-            Issued To: <the fqdn of your LDAP server> +      Issued To: <the fqdn of your LDAP server> 
-            Issued By: <The Certificate Authority where your admin requested the certificate from> +      Issued By: <The Certificate Authority where your admin requested the certificate from> 
-        Right-click on the certificate and click All Tasks > Export. +   - Right-click on the certificate and click All Tasks > Export. 
-        In the Certificate Export Wizard, do the following: +   - In the Certificate Export Wizard, do the following: 
-            Select not to export the private key +      Select not to export the private key 
-            Choose Base-64 encoded X.509 file format +      Choose Base-64 encoded X.509 file format 
-            Save the certificate as my_ldaps_cert.pem.+      Save the certificate as my_ldaps_cert.pem.
  
 The saved certificate can be installed into any software that needs to connect to your Active Directory using LDAPS. The saved certificate can be installed into any software that needs to connect to your Active Directory using LDAPS.
  
samba_ad.1748431612.txt.gz · Dernière modification : 2025/05/28 13:26 de huracan

DokuWiki Appliance - Powered by TurnKey Linux