Forum Discussion

Ward_Delcomyn_9's avatar
Ward_Delcomyn_9
Icon for Nimbostratus rankNimbostratus
Apr 28, 2015

Remote User Admin Authentication using encrypted Active Directory lookup

So I'm able to authenticate and authorize remote users against our domain controller. In fact its working over port 389 and 636. But I don't understand why I'm being asked for client cert and key for...
application delivery
LTM
management
security
amolari's avatar
amolari
Icon for Cirrostratus rankCirrostratus
Apr 28, 2015

to communicate with AD over SSL, the client (bigip) must authenticate the server and this you need to provide the CA of the AD server. This is transparent for windows domain machines because the GPO will deploy those CAs to the clients. Providing the key is necessary if you want a 2-way auth.

 

sol11072: Configuring LDAP remote authentication for Active Directory