Using Windows and Active Directory As Your Corporate LDAP Server

You can use Windows and Active Directory as your corporate LDAP server. If you choose to do so, make sure you have done the following before extracting the certificate:

• Have the Active Directory Master/Replica on the server you are connecting to
• Have Certificate Services installed on the same server

  HINT:  This can be installed by opening the Control Panel and clicking Add or Remove Programs >
  Add/Remove Windows Components.

To extract an SSL certificate:

1. From the Windows desktop, click Start > Programs > Administrative Tools > Certification Authority.

2. Right-click on the server object and select properties.

3. Click the General tab and then click the View Certificate button.

4. Click the Details tab and then click Copy to File.

5. When the Certificate Export Wizard screen appears, click Next.

6. Select the DER Encoded Binary X.509(.CER) radio button and click Next.

7. Type the path where you want the certificate file exported to, then enter a name for the file at the end of the path. For example,

   c:\Temp\sslcert.cer

8. Click Next, then click Finish.

9. From a Web browser, access the Branch Office Web Administrator (https://ip_address:2222) of a Branch Office appliance.

10. Click Authentication Sources > LDAP.

11. From the Set Up User Access Provisioner screen, check Enable LDAP and Enable Active Directory Platform.

12. In the Primary Host IP Address field, enter the IP address of you corporate office LDAP server, then click Upload Certificate.

13. Enter the path to where you saved the certificate, or click Browse to locate the file.

14. Enter the LDAP user context.

    If you don't know the context, follow these steps:

    1. Go to where you saved the certificate file and double-click it.

    2. Click the Details tab.

    3. Select Issuer from the table.

       The context of the server object appears in the bottom window. Replace the server object with cn=users and the remaing string is the same as what you will enter in the Branch Office Web Administrator. For example, cn=users,dc=novell,dc=com.

15. Click OK, then Apply All Settings.

HINT:  The remainder of this chapter is for NetWare users only.