Comments on: Enable LDAP SSL with Active Directory in Windows 2003

By: willisss

willisss — Tue, 14 Jul 2009 10:48:38 +0000

to confirm it’s working, LDP.exe from the command line?

works for me!

By: Vin

Vin — Thu, 09 Jul 2009 18:16:29 +0000

These steps DO work. I was able to very quickly get SSL running on our AD server and connect via 636 using Softerra LDAP clients and our applications. THANK YOU for posting this!

By: guest

guest — Tue, 16 Jun 2009 14:49:51 +0000

One way to test it would be to use the Ldap browser from Softerra with the correct connection settings, changing the port to 636.

By: Sean

Sean — Thu, 28 May 2009 02:48:18 +0000

Hi Consultant,

I think Kyle explained it very well. I’m just starting out on advanced server configurations and was hoping to remotely connect to a Windows Server (2003+) AD to run queries. I suspect SSL was needed, although I was thwarted in my efforts when my attention was drawn on other projects. It would be nice if you could update this guide with a way to confirm that LDAP works on SSL

By: hcinco

hcinco — Tue, 26 May 2009 23:36:56 +0000

I cannot connect through SSL on WIN 2K3

By: TIm

TIm — Tue, 05 May 2009 23:25:37 +0000

There seems to be the glossing over of a few key steps, such as how to choose CA Type and Common Name.

By: Kyle

Kyle — Sat, 02 May 2009 07:30:30 +0000

You should explain that once a domain CA is installed, that information propagates throughout AD and domain controllers automatically begin to use SSL. Without knowing that, readers will just think that you’ve completed only a part of the config.

By: consultant

consultant — Thu, 19 Mar 2009 13:06:07 +0000

Hi Sean, What else is missing? I've been using the steps above to enable SSL in Active Directory and it is works. I've used an SSL enabled Active Directory to synchronize with Fedora Directory Server and to change user password from Linux via LDAP and a Perl script.

By: Sean

Sean — Wed, 18 Mar 2009 13:30:13 +0000

Enable LDAP SSL with Active Directory in Windows 2003 – You’re missing a large portion of the guide.

It should be titled how to enable automatic certificate request!