AlanTLR_151265
Apr 17, 2014Nimbostratus
Need help configuring Active Directory for User Authentication WITH SSL
On our F5 BIG-IP LTM (running 10.2.1) We are able to get Active Directory user authentication without SSL to work, but are having trouble getting it to work correctly with SSL. I have a suspicion that this has to do with the keys. I've entered them and even imported them as trusted device certificates, but I am still unable to get them working correctly. Is there a specific format that they should be in? I've tried PKCS12, PKCS7, and DER.
auth ldap system-auth {
bind-dn "cn=\"LDAP Account\",ou=\"Service ACC\",dc=my,dc=lovely,dc=com"
bind-pw ********
login-attribute samaccountname
port ldaps
search-base-dn dc=my,dc=lovely,dc=com
servers { MYDC03.my.lovely.com }
ssl enabled
ssl-ca-cert-file /etc/keys/ca.cer
ssl-client-cert /etc/keys/ldaps.crt
ssl-client-key /etc/keys/ldaps.key
user-template %s@my.lovely.com
}
*Names, passwords, and domains have been changed for security.