Ci-dessous, les différences entre deux révisions de la page.
| Les deux révisions précédentesRévision précédenteProchaine révision | Révision précédente | ||
| samba_ad [2025/05/28 13:29] – [Using OpenSSL on Any Platform to Create the LDAPS Certificate from the AD Server] huracan | samba_ad [2025/05/28 13:37] (Version actuelle) – [Obtaining the LDAPS Certificate from the Active Directory Server] huracan | ||
|---|---|---|---|
| Ligne 191: | Ligne 191: | ||
| Requirements: | Requirements: | ||
| - | | + | * Openssl installed on your Linux computer |
| - | FQDN or IP of the Active Directory Server | + | |
| - | LDAPS certificate installed in the Active Directory Server certificate store | + | |
| Perform the following steps: | Perform the following steps: | ||
| - | | + | - 1 Enter the following command from your Linux computer: |
| - | openssl s_client -showcerts -connect <fqdn of your ldap server>: | + | |
| - | Example: | + | |
| - | openssl s_client -showcerts -connect mydc.mycompany.com: | + | |
| - | Upload my_ldaps_cert.pem to the PCoIP Management Console. See Installing an Active Directory Certificate in the PCoIP Management Console Administrators' | + | Example: |
| + | |||
| + | | ||
| + | |||
| + | - 2 Upload my_ldaps_cert.pem to the PCoIP Management Console. See Installing an Active Directory Certificate in the PCoIP Management Console Administrators' | ||
| The saved certificate can be installed into any software that needs to connect to your Active Directory using LDAPS. | The saved certificate can be installed into any software that needs to connect to your Active Directory using LDAPS. | ||
| Ligne 211: | Ligne 215: | ||
| Requirements: | Requirements: | ||
| - | | + | * FQDN or IP of the Active Directory Server |
| - | Administrator username and password of the Active Directory Server | + | |
| - | LDAPS certificate installed in the Active Directory Server certificate store | + | |
| Perform the following steps: | Perform the following steps: | ||
| - | | + | |
| - | Launch mmc.exe. | + | - Launch mmc.exe. |
| - | From the Console, click on File > Add/Remove Snap-in | + | - From the Console, click on File > Add/Remove Snap-in |
| - | In the Add or Remove Snap-ins, select Certificates, | + | - In the Add or Remove Snap-ins, select Certificates, |
| - | | + | - Liste numérotéeIn |
| - | In the Select Computer dialog, select Local computer: (the computer this console is running on), then click Finish. | + | - In the Select Computer dialog, select Local computer: (the computer this console is running on), then click Finish. |
| - | In the Add or Remove Snap-ins window, click OK. | + | - In the Add or Remove Snap-ins window, click OK. |
| - | In the Console, in the left pane, browse to Certificates (Local Computer) > Personal > Certificates. Choose the correct LDAPS certificate. This is the certificate with the following information: | + | - In the Console, in the left pane, browse to Certificates (Local Computer) > Personal > Certificates. Choose the correct LDAPS certificate. This is the certificate with the following information: |
| - | Issued To: <the fqdn of your LDAP server> | + | |
| - | Issued By: <The Certificate Authority where your admin requested the certificate from> | + | |
| - | Right-click on the certificate and click All Tasks > Export. | + | - Right-click on the certificate and click All Tasks > Export. |
| - | In the Certificate Export Wizard, do the following: | + | - In the Certificate Export Wizard, do the following: |
| - | Select not to export the private key | + | |
| - | Choose Base-64 encoded X.509 file format | + | |
| - | Save the certificate as my_ldaps_cert.pem. | + | |
| The saved certificate can be installed into any software that needs to connect to your Active Directory using LDAPS. | The saved certificate can be installed into any software that needs to connect to your Active Directory using LDAPS. | ||