Re: Windows 2003 AD

Steven Van Ingelgem wrote:
> Hi experts,
> 
> 
> I have a question concerning the connection of the mozilla Directory
> SDK and Windows 2003 Active Directory.
> 
> I am able to bind in ldap-mode to it (authenticate), but I am not able
> to get it working in ldaps-mode.
> 
> Can anyone tell me how to do it? I know I need to create a certificate
> on the server, but I'm failing to see how.
> Is there any guide out there which can tell me (or what terms do I
> need to search Google for as I didn't get any reasonable explanations
> with the ones I used before).

The following shows the procedure for enabling AD SSL:

http://support.microsoft.com/kb/321051



> Next is the compilation of OpenSSL and Mozilla Directory SDK, do I
> have to specify any special parameters or compilation parameters?

I've only used JSSE with the older Sun LDAP JDK:

JSSESocketFactory lds = new JSSESocketFactory(null); 

ld = new LDAPConnection(lds);



> And last is the connection via the secure line. Do I need to change
> anything besides configuration files in my code?

With the above code using JSSE, we add the certificate for the CA that 
issued the AD/server cert to the JRE cacerts file using keytool.

Jim