????? ????? LDAP ??? SSL ?? ???? ???? ?? ??? ??????

?????? ????????? ?????? ?????????
???? ???????: 321051 - ??? ???????? ???? ????? ????? ??? ???????.
????? ???? | ?? ????

?? ??? ??????

??????

??? ??????? ???????? ?????? ?????? ?????? ?????? ?????? (LDAP) ??? ??????? ?? ???????? ??? "Active Directory". ???? ???????? ??? ??? ?????? LDAP ??? ??? ????. ????? ??? LDAP ???? ?????? ???? ????? ?? ??? ??????? ???? ???? ??????? ?????? (SSL)/???? ???? ????? (TLS) ?????. ????? ????? LDAP ??? SSL (LDAPS) ?? ???? ????? ???? ???? ???? ??????? ??? ?? ???? ???? (CA) Microsoft ?? ???-Microsoft CA ???? ????????? ??????? ?? ??? ???????.

??????? ????

?? ???? ?? ????? ?????? ?????? LDAPS. ????? ????? ????? ??? ???? ???? ???? ???? ???? LDAP ???????? ????????? ???? ??????? SSL ???? LDAP ? ??? ?????? ?????? ??????? ????????.

??????? ?????? ??? ????? LDAPS

?????? LDAPS? ??? ????? ????? ???? ??? ????????? ???????:
  • ??????? LDAPS ??????? ?? "????????? ??????" ???? ???????? ?????? (??????? ??????? MY ????????? ???? ????????).
  • ????? ??? ???? ????? ??????? ????? ?? ????? ????????? ?????? ?????? ???? ???? ???????? ???????. ??? ?? ??????? ????? ?? ???????? ????? ??????? ????? ??????? ????.
  • ????? ???? "????????? ?????? ??????" ?????? ???????? (1.3.6.1.5.5.7.3.1) ???? ?????? (???? ???? OID).
  • ???? active Directory ??? ???? ???? ???? ???? ???? ???? ?????? (??? ???? ??????? DC01.??? ?? ???? DOMAIN.COM) ?? ??? ??????? ???????:
    • ?????? ??? (CN) ?? ????? "???????".
    • ????? DNS ?? "??? ??????? ??????" ????.
  • ?? ????? ??????? ?? ??? ???? ???? ???? ?????? ???? ?????? ???????? LDAPS ?????. ??? ????? ????? ?? ???? ????? ??????? ??????? ????? ??????? ?????? ????? ???? ????? ?????? ?????? ??????.
  • ??? ??????? ???? ???? ??????? (CSP) Schannel ?????? ???????.
????? ?? ????????? ??? ????? ????? ????????? ???? ??????? "??? ????? ??? ??? ??????? ???????" ?? ??????? Windows 2000 Server.

????? ??? ???????

???? ??????? ?? ???? ?????? ?? ??????? ???? ???? ?????? ??? PKCS # 10 ????? ?????? ??? ????? SSL. ??????? ??? ??????? ?????? ?????.

?????? ????? ??????? ???? ??? ????????? ?? ??? ??????? ??? ??????? 2003 ?? ??? ???????. ???????? ??????? ???????? ?? ??? ??????? ??? ???? Windows 2000? ??? certreq.exe ? certcli.dll ?? ???? Windows 2003 ?? ???? ???? ??? ???? Windows 2000.

????? Certreq.exe ??? ?????? ?? ?????? ??? ????? X.509 ?????? ????? ???? ????. ????? ????? ??? ????? ???????? ???? ?? ASCII ??????. ??? ????? inf. ????? ??? ?? ???? ??? ???? ????? ??????.

???? ???? ????? ?????? ????? LDAPS? ???? ??????? ???????:
  1. ????? ??? inf. ?????? ??.inf ?????? ??????? ???? ???? ????????? ?????? ??? ???????.
    ?---request.inf--

    [Version]

    ????? = "$ $Windows NT

    [??????????]

    ??????? = "CN =<DC fqdn="">"; ?????? FQDN ???? ???? ?????? DC
    KeySpec = 1
    ???????? = 1024
    ; ???? ?? ???? 1024, 2048 4096, 8192 ?? 16384.
    ; ????? ???????? ?????? ???? ???? ??????? ???? ??
    ; ????? ???? ??? ??????.
    ???? ??????? = TRUE
    ???????????? = TRUE
    SMIME = ???
    ????????????????? = FALSE
    ?????????????? = FALSE
    ????????????????? = FALSE
    ??? ?????? = "???? SChannel ??????? ??? Microsoft RSA"
    ??? ?????? = 12
    ?????????? = PKCS10
    ???????? = 0xa0

    [?????????????????????????]

    OID=1.3.6.1.5.5.7.3.1 ; ???? "?????? ??????"

    ;-----------------------------------------------</DC>
    ?? ???? ??? ??????? ?? ??? ??? ???? ???? Request.inf. ????? ??? DNS ???? ???? ???? ????? ???? ?????? ?? ???.

    ?????? ??? ???????? ???????? ?? ????? ??????? ??????? ?????? ?? ??????? ???????. ??? ??? ????? ??????? ????? ???? ???????? (E)? ?????? ????????? (OU)? ??????? (O) ??????? ?????? ?? ??????? (L)? ???? ?? ???????? (S) ?????? ?? ??????? (C). ????? ????? ??? ????????? ??? ??? ??????? (CN) ?? ????? Request.inf. ??? ???? ??????: Subject="E=admin@contoso.com? CN =<DC fqdn="">? OU = ??????? O = Contoso? L ???????? S = = ??????? C = ???????? ???????." </DC>
  2. ????? ??? ?????. ?????? ????? ???? ?? ??? ????? ?? ???? ???????? ????? ????? ??????? ENTER:
    ??? ?????-request.req request.inf ????
    ??? ????? ??? ???? ???? Request.req. ??? ??? ?? ????? base64 ?????.
  3. ????? ????? ??? ???? ????. ????? ????? ????? ?????? ?????? Microsoft ?? ??? ???? ???? ?? ??? ??????.
  4. ?????? ??? ??????? ???? ?? ???????? ?? ?? ???? ??????? ? Certnew.cer ?? ??? ?????? ??? ??? ?????. ?????? ????? ???? ??????? ???????:
    1. ????? ??? ???? ???? Certnew.cer.
    2. ??? ????? ?? "???????"? ??? ??????? ?????? ?? ?????? ?? ???? ?????.
    ?????? ??? ????? base64 ????? ??????. ??? ?????? ???????? CAs ?????? ????? ?? ??????? ??? ?????? ??? ????? base64 ?? ????? ?????? ??????????.
  5. ???? ??????? ???? ?? ???????. ?????? ????? ???? ????? ?? ???? ??????? ??????? ????? ??? ENTER:
    ??? ?????-???? certnew.cer
  6. ???? ?? ?? ??????? ???? ?? ????????? ?????? ??????. ?????? ????? ???? ??????? ???????:
    1. ??? ????? ???? ?????? ???????? ? Microsoft (MMC).
    2. ????? ?????? ???????? ???????? ???? ???? ???????? ??? ????????? ??????.
    3. ?? ?????? ???????? (????????? ??????), ?? ?????? ???????? ?? ?? ?????? ????????.
    ??? ?? ???? ????? ????? ?? ?????? ??????. ??????? ??????? ???? ??????? ?????? ??????? ??? ??? ?????? ??????. ??? ????? ??? ??????? ??? ???? ???? ???? ???? ?????????.
  7. ?? ?????? ????? ???? ???? ??????.
????? ?? ????????? ??? ????? ??? ???????? ???? ??????? ?????? ?????? ??????? ??????? ?????? ???????. ???? ??? ???????? ?? ?????? ???? Microsoft ?????? ??? ?????:
http://technet.microsoft.com/en-us/library/cc782583.aspx

?????? ?? ????? LDAPS

??? ????? ?????? ???? ??? ??????? ?????? ??? ?? ????? LDAPS:
  1. ??? ????? ???? ????? ???? active Directory (Ldp.exe).

    ?????? ??? ????? ??? ???????? ?? ??? Windows 2000 ?????.
  2. ??? ????? ???????? ???? ??????????.
  3. ???? ??? ????? ???? ?????? ???? ???? ???????.
  4. ??? 636 ????? ???.
  5. ???? ??? ?????.

    ??????? RootDSE ??? ????? ?? ????? ??????? ???? ??? ????? ????.

??????? ????????

  • ??? TLS ??????? ?????
    ???? LDAPS ??????? ??? ???? TCP 636. LDAPS ???? ??????? ????? ???? ????? ?????? ??? TCP 3269. ??? ??????? ?????? 636 ?? 3269? ??? ??????? SSL/TLS ??? ?? ???? ???? LDAP ?????. ?? ????? Windows 2000 ??? TLS ???????-????? ?????.
  • ??? ?????? SSL
    ???? Schannel? ???? Microsoft SSL? ????? ??????? ??????? ???? ???? ????? ?? ???? ????????? ??????. ??? ??? ???? ?? Schannel ??? ?????? ????? ???????? ?? ???? ????????? ??????? ?? ??? ??????? ???????.
  • ????? SSL ??? ???? ?????? SP3 ??????? ?????? ???????
    ??? ?? ??? ??????? ????? LDAPS ?????? ???? ???????? ??? ?? ???? ????? ????? ?? ??? ?????? ?????? ?????? ????? ?????? ??? ????? ????? Schannel ???????? ??????? ???????. ???? SSL ?? ???? ??????? Windows 2000 ?????? ??????? LDAPS ??? ????? ?? ??????? ??? ??? ????? ????? ???? ???? ??????. ??? ???? ????? ?? Service Pack 3 ????? ??????? Windows 2000.

??????? Windows Server 2008

?? ??????? ??????? ?? ??? ??????? ???? ???????? ?? ?????? ?????? "?????? ??????". ??? ????? ?? ??? ??? ?????? ??? ??????? ????? ???? ??? ???????? ?? ???? ???????? ?????? ?????? NTDS ??? Windows Server 2008 ?????????? ?????? ?? "????? ???? ???? active Directory" (AD DS). ????? ?? ????????? ??? ????? ????? ??????? ??? ???? ???????? ?????? ?????? NTDS? ?? ?????? ???? Microsoft TechNet ??? ??? ??????:
.aspx http://technet.microsoft.com/en-us/library/dd941846 (WS.10)
???? AD DS ??????? ?? ???????? ???????? ?? ??? ?????? ??? ???? "?????? ??????". ??? ???? ?????? AD DS ???????? ??????? ???? ???? ?? ????????. ???? ???? ?? ???? ???? ?????? ?? ???????? ?? ?????? "?????? ??????? ???????"? ??? ???? ?? ????? ?????? ?????? ?? ????.

???? AD DS ????? ??? ????? ?? ???? ???????? ????? ?? ?????? ????? ??? ???? ?????? ????? ????? SSL ??? ?????? ??? ????? ????? AD DS ?? ????? ????? ???? ???? ??????.

???? ??????? ????? rootDse ???? ???? ?????????????????????? ?????? AD DS ?????? ?????? SSL ?????? ?? ??? ?????? ??? ????? ????? AD DS ?? ????? ????? ???? ???? ?????? ??????. ???? ????? ??? ????? ???????? adsiedit.msc? ?? ?? ???? ??????? ??????? ?? "????? ????? ???? LDAP" (LDIF) ???????? ldifde.exe. ?????? ??? ???? ?? ????????? ??? ??????? LDIF ?????? ??? ?????? ?? ?????? ???? Microsoft MSDN ??? ??? ??????:
.aspx http://msdn.microsoft.com/en-us/library/cc223311 (v=PROT.10)
???????? ??? ??? Windows Server 2008 ?? ???? ???? ???? ????? ???? ?????? ?? ???????? ?? ???? ??? ???? ???????? ?????? ??????? ?????? ?? ????? ?????? ???????? ???? ?? ????????. ??? ?????? ??????? ?????? ????? ?????? ????????? ????? ????? ??????? ????????? ?? ??????? ?? AD DS ???????? ???????? ??? ????????.

?? ??? ????? ??? Windows Server 2008 AD DS ? 2008 ?????? ????? ?????? Active Directory (AD LDS). ?????? ??? AD LDS? ??? ???????? ?? ???? ???????? ?????? ?????? ???? ?????? ?? ???? AD LDS ????? ?? ???? NTDS.

???????

???? ???????: 321051 - ????? ??? ??????: 28/???/1434 - ??????: 21.0
????? ???
  • Windows Server 2008 Standard
  • Windows Server 2008 Datacenter
  • Windows Server 2008 Enterprise
  • Windows Server 2008 Standard without Hyper-V
  • Windows Server 2008 Datacenter without Hyper-V
  • Windows Server 2008 Enterprise without Hyper-V
  • Microsoft Windows Server 2003, Standard Edition (32-bit x86)
  • Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)
  • Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Advanced Server
????? ??????: 
kbproductlink kbinfo kbmt KB321051 KbMtar
????? ????
???: ??? ????? ??? ??????? ???????? ????? ?????????? ??????? ?????? ??? ??????? ?? ??? ??????? ?? ??????? ??? ??? ?? ???? ????????? ???? ??????? ???????(CTF) ?? ?? ???? ????? ????. ???? ?? ???? ?????????? ??? ???????? ???????? ???? ??? ?? ???????? ??????? ?? ??? ??????? ???????? ?? ??? ??????? ??????? ??? ?????? ?? ?????? ??? ???? ???????? ???????? ?? ????? ??????? ????? ????? ??????. ??? ?? ???????? ???????? ?? ????? ??? ????? ?? ???????? ?? ???? ????? ?? ?????. ?????? ??? ???? ?????????? ???? ?????? ?? ??? ????? ?? ??? ??? ?? ??????? ?? ??? ????? ?? ???? ????? ????? ?? ????? ??????? ???? ?? ???????? ?? ??? ???????.
???? ??? ????? ??????? ?????? ??????????321051

????? ???????

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com