Re: Client Certificate User Mapping

From: Wilfried Hoermann (nnamreoh_at_nowhere.com)
Date: 02/05/04 

Date: Thu, 5 Feb 2004 13:28:01 +0100

As the article you included stated: For Active Directory Service Mapping of
Certificates the web server has to be member of the domain.

"jmacleod @microsoft.com (Jeffery MacLeod)" <nospam> wrote in message
news:eDaQivz6DHA.3496@cpmsftngxa07.phx.gbl...
> Hi RG,
>
> No the web server does not have to be part of a domain when mapping a
> client certificate
> to a user. I have included an article below that I hope is helpful.
>
> 313070 HOW TO: Configure Client Certificate Mappings in Internet
Information
> http://support.microsoft.com/?id=313070
>
> Best Regards,
>
> Jeff MacLeod, MCSD
> Microsoft IIS Support Professional
> This posting is provided "AS IS" with no warranties, and confers no
rights.
>

Relevant Pages

  • Re: IIS Certificate Mapping password retreival
    ... certificate, they have to authenticate themselves to Windows. ... SubjectAlternate field) of the client certificate that gets issued. ... Then, when the AD mapping occurs, the Windows username gets extracted from ... > with ADCert Mapping" thread in this newsgroup). ...
    (microsoft.public.inetserver.iis.security)
  • Re: Evading Client-Certificate Authentication
    ... Im not one to argue semantics, but "stumbling" upon a web server during ... customer needs to generate a client certificate for you. ... stunnel can use and viola - instant client certificate proxy. ... >whilst in the middle of a Penetration Test I stumbled on a web server only ...
    (Pen-Test)
  • Re: IIS 6 behavior on checking clients certificates (again)
    ... >> against the Web server certificate as the certfile. ... >> Do the same test at the Web server against the client certificate as the ... > certificate I saw that almost everything is Ok excepting expired Delta CRL ...
    (microsoft.public.windows.server.security)
  • Re: IIS Certificate Mapping password retreival
    ... The password retrieval is in IIS's Certificate Mapping, ... To achieve cert mapping for IIS you need to have the cert ... > SubjectAlternate field) of the client certificate that gets issued. ...
    (microsoft.public.inetserver.iis.security)
  • RE: Client Certification when using Remote Web
    ... Yes my goal is to restrict computers, but not based on client IP. ... certificate by mapping the certificates to Windows user accounts. ... One-to-one mapping maps a single client certificate to a single user ...
    (microsoft.public.windows.server.sbs)