ページ履歴
You can configure Crowd to work with Microsoft Active Directory by setting up an LDAP connector in Crowd. If you wish to use Crowd to add users or change passwords in Active Directory, you will need to install an SSL certificate generated by your Active Directory server and then install the certificate into your JVM keystore.
On this page:
| 目次 | ||||
|---|---|---|---|---|
|
Prerequisites
Make sure that you have the following installed on your Windows server (domain controller):
必要なコンポーネント | 説明 |
|---|---|
Windows 2000 Service Pack 2 | Windows 2000 を使用する場合に必要です。 |
Internet Information Services (IIS) | Windows Certificate Services をインストールする前に必要とされるものです。 |
Windows Certificate Services | This installs a certification authority (CA) which is used to issue certificates. |
Windows 2000 を使用する場合に必要です。利用可能な最高度の暗号化レベル（128 -ビット）を提供します。 |
Step 1. Install the Microsoft Certificate Services
- Using the Active Directory Control Panel – Add/Remove Programs administration tool:
- Select 'Add/Remove Windows Components' to start the Windows Components Wizard.
- Place check marks next to 'Certificate Services' and 'Internet Information Services (IIS)'.
- Click 'Next>'.
- Select 'Enterprise root CA' Certificate Authority Type and click 'Next>'.
- Enter a 'CA name' (server name) and click 'Next>'. On Windows Server 2003, this is the 'Common name for this CA'.
- Leave the 'Data Storage Locations' as default and click 'Next>'.
- The software installation process is complete. Click 'Finish'.
- Click 'OK' to restart IIS.
- You will now need to restart your Microsoft Active Directory Server.
ステップ 2.サーバー証明書の取得
The steps above describe how to install the certification authority (CA) on your Microsoft Active Directory server. Next, you will need to add the Microsoft Active Directory server's SSL certificate to the list of accepted certificates used by the JDK that runs your Crowd server.
The Active Directory certificate is automatically generated and placed in root of the C:\ drive, matching a file format similar to the tree structure of your Active Directory server, e.g. c:\crowd-ad2000.ad01.crowd.atlassian.com_ad01.crt.
また、Active Directory サーバー上で、次のコマンドを実行することにより、証明書をエクスポートできます。
| コードブロック |
|---|
certutil -ca.cert crowd-client.crt |
ステップ 3.サーバー証明書のインポート
| Excerpt Include | ||||||
|---|---|---|---|---|---|---|
|
関連トピック
Microsoft Active Directory
Configuring Crowd to Work with SSL
概要
コンテンツ ツール
アプリ