Re: Makecert & ADAM



I haven't done it with makecert before but I have successfully used the
selfssl.exe utility that comes with the IIS Resource Kit to create a
self-signed certificate and used the mmc "certificates" plug-in to copy the
cert from the local computer store to the "Personal" store for the adam
instance that I was running and its "Trusted Root Certification Authorities"
store. I was then able to export the cert's public key in the base-64
encoding and import it into a debian system that I have running a web
application called Moodle (apache/php) and the web application is now using
an ldaps connection for it's data store AND authentication.

gb

"Jay worley" <Jayworley@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:3F64DAEE-46A4-4D8E-8C9B-5AB1EF004ACB@xxxxxxxxxxxxxxxx
I'm trying to issue a self signed certificate using makecert and then
import
the cert with the private key into the Personal store of the account under
which my ADAM is instance is running. I've already done LDAP over SSL
with
ADAM using a Verisign cert, so I don't have a problem with the steps. Has
anyone done this before? Any obvious omissions with this command:

makecert -r -pe -len 1024 -n "CN=hostname.parentdomain.com" -ss my -e
01/01/2010 deltapassport-dev.delta.com.cer

I've even went so far as logging into the account that ADAM is running
under
and adding -sr currentuser. This isn't an issue with the system file that
stores the key. I've made sure the account has read access to the file.

Thanks!
--
Thanks for posting a reply!


.



Relevant Pages

  • Re: Impersonating Users
    ... i'm not sure about the cert store impl in NT, ... > running the service as Local System Account, ... > CERT_SYSTEM_STORE_CURRENT_USER fails to find the cert. ... > //Logon to user acount and Impersonate. ...
    (microsoft.public.platformsdk.security)
  • Re: Makecert & ADAM
    ... private key it places in the local machine store and import it into the ... service account's store. ... I can't seem to figure out the right KU and EKU to get an SSL cert out of ... which my ADAM is instance is running. ...
    (microsoft.public.windows.server.active_directory)
  • Re: ADAM ADSI
    ... ADAM permissions are somewhat restrictive by default. ... to add them to the builtin Readers role/group for that partition. ... > using a windows account that has got admin rights. ... > store from Authorization Manager using the original account that was ...
    (microsoft.public.windows.server.active_directory)
  • AzMan & ADAM
    ... The only way I can get AzMan to check operations / Roles is if the account ... that access the store is defined as administratoir within ADAM is there any ...
    (microsoft.public.windows.server.active_directory)
  • Re: ADAM wirh SSL
    ... Resource kit to generate the self-signed cert I'm using. ... The cert works perfectly with IIS as well, so I know it *can* work. ... used this same procedure on a previous XP install with ADAM and IIS and it ... No suitable default server credential exists on this system. ...
    (microsoft.public.windows.server.active_directory)