active_directory
Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
active_directory [2020/04/11 16:04] – smyers119 | active_directory [2020/04/11 16:29] (current) – smyers119 | ||
---|---|---|---|
Line 8: | Line 8: | ||
This will go over creating a bind user with least privilege and if exporting the root CA for LDAPS use. | This will go over creating a bind user with least privilege and if exporting the root CA for LDAPS use. | ||
=== Creating Bind User === | === Creating Bind User === | ||
- | Everything I have ever read on best practice for creating a bind user account is using a simple domain user and disabling interactive login. | + | Everything I have ever read on best practice for creating a bind user account is creating |
=== Setting up Secure LDAP === | === Setting up Secure LDAP === | ||
+ | This is a important step. If you don't use Secure LDAP then the password of the bind user is transmitted in plain text. I am not going to go over how to create a PKI environment in windows. | ||
* Adding root Certificate to eFa | * Adding root Certificate to eFa | ||
Line 16: | Line 17: | ||
==== Config Changes in eFa ==== | ==== Config Changes in eFa ==== | ||
+ | Editing the config in / | ||
+ | < | ||
+ | // LDAP settings for authentication | ||
+ | define(' | ||
+ | define(' | ||
+ | define(' | ||
+ | define(' | ||
+ | define(' | ||
+ | define(' | ||
+ | define(' | ||
+ | define(' | ||
+ | </ | ||
active_directory.1586621069.txt.gz · Last modified: 2020/04/11 16:04 by smyers119