AD Authentication in a DMZ ?

Hi,

we have an application in our DMZ that needs to use Active Directory database for authentication.

Of course our AD domain controllers are in our LAN.

Is there a secure way to use AD Authentication for applications localized in a DMZ ?

Thanks a lot.

Regards,

Pascal

--
Pascal


.

Relevant Pages

  • Re: Last logon User [WILDPACKET]
    ... All the DCs on LAN are working now. ... I have few member servers on the LAN, how do I do those now, Do I go on each ... the DMZ and they are all in one workgroup. ... all the DCs are in a Domain Controllers OU and I have applied the ...
    (microsoft.public.windows.group_policy)
  • Re: Exchange 2003 Front End/Back End Servers & Passwords
    ... Sort of negates the purpose of a DMZ. ... > The authentication was my concern - might be more sensible to post to ... you have to open up a LOT between the DMZ and LAN. ... > up the email server to the world any more than I have to. ...
    (microsoft.public.exchange.admin)
  • RE: AD in the DMZ . . . OK?
    ... If the only thing needed is authentication with userid/password, ... If I were to expose any AD domain to the DMZ, ... > interaction with one of our expert instructors. ... > Attend a course taught by an expert instructor with years of ...
    (Security-Basics)
  • Re: [fw-wiz] NTLM authentication from DMZ
    ... Exchange server is part of the normal company domain, ... have one authentication database to deal with. ... Place the exchange server in the DMZ, but that would require a whole ... Place it on the LAN, but that would require opening ports from the ...
    (Firewall-Wizards)
  • Re: [SLE] cyrus configuration
    ... >>(I really don't want plaintext passwords unless it's between my LAN and DMZ) ... I have plaintext authentication against my /etc/passwd file. ... email server and since IMAP is only from the LAN it might be OK. ... I'm still not sure how to limit a DMZ service to a LAN subnet only. ...
    (SuSE)