Re: Client Certificate Authentication with ADAM



Thanks, Dmitri. Nice to know it is still on the radar screen!

Joe K.

--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services Programming"
http://www.directoryprogramming.net
--
"Dmitri Gavrilov [MSFT]" <dmitrig@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:%23nBGsZH2GHA.2036@xxxxxxxxxxxxxxxxxxxxxxx
Not yet. We are aware of this request, and we are hearing it more often.
I'll try to get it in. No promises though...

--
Dmitri Gavrilov
SDE, Active Directory team

This posting is provided "AS IS" with no warranties, and confers no
rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

"Joe Kaplan" <joseph.e.kaplan@xxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:%23OpHtGD2GHA.1588@xxxxxxxxxxxxxxxxxxxxxxx
AD definitely supports this. I've never been able to get a straight
answer on what you can do in this regard with ADAM. My guess is that you
can't do this with ADAM users (which is probably what you want).

I've actually gotten the product team to agree to document this stuff a
few times over the last year or so, but it still hasn't happened. If you
find out something, I'd love to hear it!

Joe K.

--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services
Programming"
http://www.directoryprogramming.net
--
"Jeffrey Harris" <1Jeffrey1.1Harris1@xxxxxxxxxxxxxxxx> wrote in message
news:59AD36A8-F2BD-4563-A63B-18D988FDB9BD@xxxxxxxxxxxxxxxx
Is it possible to bind to ADAM using client-server certificate
authentication, instead of a simple bind over SSL? Are there any
special
settings that need to be configured for ADAM to enable this, above and
beyond
the normal procedures to configure ADAM for LDAP over SSL?

Thanks.
--
Jeffrey Harris, MCSE W2K.
Please remove the '1's from the e-mail address before sending.






.



Relevant Pages

  • Re: Adding to Schema
    ... If you really don't want to put the data in AD, you might consider storing it in ADAM and creating a sync setup to sync your AD users with objects in ADAM that would basically be pointers to AD users. ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ...
    (microsoft.public.windows.server.active_directory)
  • Re: Adding to Schema
    ... "Joe Kaplan" wrote: ... ADAM that would basically be pointers to AD users. ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ...
    (microsoft.public.windows.server.active_directory)
  • Re: Web Single Sign On
    ... Joe Kaplan-MS MVP Directory Services Programming ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... current Windows credentials to the server, ... This common identity is the user's username used to logon to the ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Changing ADAM user password
    ... Joe Kaplan-MS MVP Directory Services Programming ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... Running the bind from another W2K3SP1 machine ... support in digest or something like that. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Secure SSL with LDAP and AD
    ... Joe Kaplan-MS MVP Directory Services Programming ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... LDAP over SSL with a third-party certification authority. ... Note that a self signed cert is probably a very poor choice as nothing ...
    (microsoft.public.windows.server.security)