Đang chuẩn bị liên kết để tải về tài liệu:
Active Directory Cookbook for windows server 2003- P44

Không đóng trình duyệt đến khi xuất hiện nút TẢI XUỐNG Tải xuống

Active Directory Cookbook for windows server 2003- P44:If you are familiar with the O'Reilly Cookbook format that can be seen in other popular books, such as the Perl Cookbook, Java Cookbook, and DNS and BIND Cookbook, then the layout of this book will not be anything new to you. The book is composed of 18 chapters, each containing 10-30 recipes for performing a specific Active Directory task. Within each recipe are four sections: problem, solution, discussion, and see also. | 2. Open the Add or Remove Programs applet. 3. Click on Add Remove Windows Components. 4. Check the box beside Certificate Services and click Yes to verify. 5. Click Next. 6. Select the type of authority you want the domain controller to be select Enterprise root CA if you are unsure and click Next. 7. Type the common name for the CA select a validity period and click Next. 8. Enter the location for certificate database and logs and click Next. 9. After the installation completes click Finish. 10. Now open the Domain Controller Security Policy GPO. 11. Navigate to Computer Configuration Windows Settings Security Settings Public Key Policies. 12. Right-click on Automatic Certificate Request Settings and select New Automatic Certificate Request. 13. Click Next. 14. Under Certificate Templates click on Domain Controller and click Next. 15. Click Finish. 16. Right-click on Automatic Certificate Request Settings select New. Automatic Certificate Request. 17. Click Next. 18. Under Certificate Templates click on Computer and click Next. 19. Click Finish. 14.1.3 Discussion After domain controllers obtain certificates they open up ports 636 and 3289. Port 636 is for LDAP over SSL TLS and port 3289 is used for the global catalog over SSL TLS. See Recipe 14.2 for more information on how to query a domain controller using SSL TLS. 14.1.4 See Also MS KB 247078 HOW TO Enable Secure Socket Layer SSL Communication Over LDAP For Windows 2000 Domain Controllers MS KB 281271 Windows 2000 Certification Authority Configuration to Publish Certificates in Active Directory of Trusted Domain and MS KB 321051 How to Enable LDAP over SSL with a Third-Party Certification Authority Recipe 14.2 Encrypting LDAP Traffic with SSL TLS or Signing 14.2.1 Problem You want to encrypt LDAP traffic using SSL TLS or signing. 441 14.2.2 Solution 14.2.2.1 Using a graphical user interface Most of the GUI-based tools on a Windows Server 2003 Windows XP or Windows 2000 SP 3 machine automatically sign and .