enable LDAP-SSL without a root-CA

From: Igor Ybema (i.ybema@civ.utwente.nl)
Date: 08/07/02


From: "Igor Ybema" <i.ybema@civ.utwente.nl>
Date: Wed, 7 Aug 2002 17:47:09 +0200


Is it possible to enable SSL over LDAP in windows 2000 without installing a
enterprise root-CA?

According to MS-article Q247078 you need to install an Enterprise CA and
allow all domain controllers to receive a certificate automatically. In our
test-environment this works. After that we can use LDAPS in this
test-enviroment to update passwords, make accounts etc. Now we need to use
LDAPS in our production environment but we still have to decide how our
CA-hierachy will look like. So we cant install a enterprise-CA yet and we
can not wait for this. Is it somehow possible to use temporary self signed
certificates to enable SSL over LDAP on one server?

regards,

Igor Ybema, University of Twente, Enschede, the Netherlands



Relevant Pages

  • Re: enable LDAP-SSL without a root-CA
    ... I believe they found a way but it was very costly because verisign had to do ... > enterprise root-CA? ... So we cant install a enterprise-CA yet and we ... > certificates to enable SSL over LDAP on one server? ...
    (microsoft.public.win2000.security)
  • Mandrake Linux + Courier-IMAP + Postfix + LDAP + IMP + SpamAssassin Mini-HOWTO
    ... Courier-IMAP, Postfix, Open LDAP, IMP and SpamAssassin on Mandrake ... Postfix was installed as a part of the Linux setup. ... I ran into trouble when I tried to install JAMM into a separate ...
    (comp.os.linux.misc)
  • Re: Solaris 9 naming services
    ... >> Solaris package to install though), ... > EOF of NIS+ has been announced and it could be removed from Solaris 10. ... Naming Services to LDAP? ...
    (comp.unix.solaris)
  • Re: Solaris 9 naming services
    ... >> Solaris package to install though), ... > EOF of NIS+ has been announced and it could be removed from Solaris 10. ... Naming Services to LDAP? ...
    (comp.sys.sun.admin)
  • RE: Enterprise Instrumentation -- Installation operation failed.
    ... Installing assembly 'c:\program files\microsoft enterprise ... Installing WMI Schema: Finished ... The Install phase completed successfully, and the Commit phase is beginning. ...
    (microsoft.public.vsnet.enterprise.tools)