Share via

LDAPS connection certificate

WinTechie 286 Reputation points
2021-07-05T14:27:28.837+00:00

Hi,

we have a application which failing to connect to domain controller using LDAPS (636) because it lacks required certificate hence ssl handshake fails.
i would like to know which certificate i will have to export from DC (is it domain controller certificate OR kerberos certificate) and place it in applications certificate store so connection can be made.

Windows for business | Windows Client for IT Pros | Directory services | Active Directory
Windows for business | Windows Server | Devices and deployment | Configure application groups

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2021-07-06T02:10:10.677+00:00

    Hi,
    Based on my understanding, it is a cert on the LDAPS server (Domain Controller) for server authentication issued by the trusted CA server.

    When request cert for server authentication we can use the Kerberos template. Or we can create your own or use one of the existing templates that has Server Authentication as a purpose, such as Domain Controller Authentication, Domain Controller, Web Server, and Computer.

    Important: You should be planning to have only one certificate on each LDAP server (i.e. domain controller or AD LDS computer) with the purpose of Server Authentication.

    For more details, you can refer to the following link:
    https://social.technet.microsoft.com/wiki/contents/articles/2980.ldap-over-ssl-ldaps-certificate.aspx

    If i misunderstand you, feel free to let me know.

    Best Regards,

    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.