????? ??????? ????? LDAP ??? SSL ????? ???????

???? ???????: 938703 - ??? ???????? ???? ????? ????? ??? ???????.
????? ???????? ????? ????? ??????? ?????? ?????? ???????
????? ???? | ?? ????

?? ??? ??????

????? ???

?????? ??? ??????? ????? ??????? ????? LDAP ??? SSL (LDAPS) ????? ???????.
???? ??? ?????? | ????? ???????

??????? ????

???????? ????? ??????? LDAPS ???? ??????? ???????.

???? 1: ?????? ?? ????? "?????? ????"

???? ?? ?? ????? "?????? ????" ???? ???????? ???? ????????? ???????:
  • ???? ??? ???? ???? ???? ???? "Active Directory" ?? ???? ???? ?????? ?? ??? ??????? ???????:
    • ????? ?????? (CN) ?? ????? "???????"
    • ???? ??? ???? ??????? (SAN) ?? ????? DNS
  • ????? ???? ??????? ??????? ??????? ???? ?????? "?????? ????" (1.3.6.1.5.5.7.3.1).
  • ????? ??????? ????? ??????? ??? ??? ???? ???? ??????. ???? ?? ???? ???????, ?????? ????? certutil - verifykeys.
  • ????? ????? ????? ??? ???? ????????? ??????. ?????? ?? ??? ???? ??????? ????? ???? ??????? ???????:
    1. ??? ???? ???? ?????? ??????? ?????? ???????? ???????? ?????? ????? SSL ??? ??? ???? Serverssl.cer.
    2. ??? ??? Serverssl.cer ??? ???? ????????? ??????.
    3. ??? ???? ????????? ?????? ???? ???? ???? ???????.
    4. ?? ???? ???????? ???? ????? ?????? ?????? ????? ????? ??? ??? ???? Output.txt:
      certutil - v - urlfetch - ?????? ?? serverssl.cer > output.txt
      ?????? ????? ??? ??????, ??? ?? ???? ???? ???? ??? ??????? Certutil ?????. ?????? ??? ???? ?? ????????? ??? ????? ?????? ??? Certutil ???? ????? ??????? Certutil ?? ?????? ???? Microsoft ?????? ??? ?????:
      ??? ???????? ??????? ???????
      http://technet2.microsoft.com/windowsserver/en/library/237d6abc-d0c0-454a-9b72-e3955664e3d31033.mspx?mfr=true
      (http://technet2.microsoft.com/windowsserver/en/library/237d6abc-d0c0-454a-9b72-e3955664e3d31033.mspx?mfr=true)


    5. ???? ????? Output.txt ?? ?? ?????? ?? ???????.

???? 2: ?????? ?? ????? "?????? ??????"

?? ??? ???????? ?????? LDAPS ????? "?????? ??????" ??? ??? ??? ??????? ??? ????????? ??????. ?? ???? ???? ??? ??? ????? ???? ?? ?? ??????? ???? ????????? ???????:
  • ????? ???? ??????? ??????? ??????? ???? ?????? "?????? ??????" (1.3.6.1.5.5.7.3.2).
  • ??????? ????? ??????? ????? ??? ???? ????????? ??????. ???? ?? ???? ???????, ?????? ????? certutil - verifykeys.
  • ????? ?????? ????? ??? ???? ???? ??????. ?????? ?? ??? ???? ??????? ????? ???? ??????? ???????:
    1. ??? ???? ????????? ?????? ??????? ?????? ???????? ???????? ?????? ????? SSL ??? ??? ???? Clientssl.cer.
    2. ??? ??? Clientssl.cer ??? ??????.
    3. ??? ??????? ???? ???? ???? ???????.
    4. ?? ???? ???????? ???? ????? ?????? ?????? ????? ????? ??? ??? ???? Outputclient.txt:
      certutil - v - urlfetch - ?????? ?? serverssl.cer > outputclient.txt
    5. ???? ????? Outputclient.txt ?? ?? ?????? ?? ???????.

?????? 3: ????? ?? ?????? SSL ??????

????? ?? ??? ??? ?????? SSL ?????? ??? ???????? ??????? ?? ?????? 1. ????? Schannel (???? Microsoft SSL) ????? ????? ????? ???? ?? Schannel ?? ???? "????????? ??????". ?? ???? ???? ?????? ????? ?????? ?? ???? "????????? ??????" ?? ?? ??? Schannel ??????? ???????. ?? ???? ????? ?? ????? ?????? ???? (CA) ???????? ??? ??? ?????? ?????? (CA) ???? ??? ???? ???? ???? ???? ????? ?????? ?? ???? LDAPS.

?????? 4: ???? ?? ????? LDAPS ??? ??????

?????? ???? Ldp.exe ??? ???? ???? ?????? ?????? ??????? ??????? ???????? ???? 636. ??? ?? ????? ?? ??????? ????? ???????? ???? 636 ???? ??????? ???? ???? Ldp.exe. ????? ??? ????? "???? ???????" ????? ?? ?????. ?????? ??? ???? ?? ????????? ??? ????? ??????? Ldp.exe ??????? ????? 636 ???? ??? ??? ??????? ?????? ?????? ?? "????? ??????? ?? Microsoft:
321051
(http://support.microsoft.com/kb/321051/ )
????? ????? LDAP ??? SSL ?? ???? ???? ???? ??????

???? 5: ????? ??????? Schannel

????? ????? ??????? Schannel ??? ?????? ???? ????????? ??????. ????? ?? ????????? ??? ????? ????? ????? ??????? Schannel ???? ??? ??? ??????? ?????? ?????? ?? "????? ??????? ?? Microsoft:
260729
(http://support.microsoft.com/kb/260729/ )
????? ????? ????? ?? IIS ??????? Schannel
?????? ??? ??? ?? ??????? ????? ????? SSL ??? ???? ??????? ???? ????? ??????? Microsoft Windows NT 4. 0? ??? ??????? ??? Schannel.dll ????? ?????? Windows NT 4.0 ??????? ?? ?? ?????? ???? ????? ??? ?????????. ????? Schannel ??? ?????? ??????? ??? ???? ????? ?? Windows NT 4.0.
???? ??? ?????? | ????? ???????

???????

???? ???????: 938703 - ????? ??? ??????: 30/???/1428 - ??????: 2.2
????? ???
  • Microsoft Windows Server 2003, Standard Edition (32-bit x86)
  • Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
  • Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)
  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Datacenter Server
????? ??????: 
kbmt kbexpertiseadvanced kbhowto kbinfo KB938703 KbMtar
????? ????
???: ??? ????? ??? ?????? ???????? ?????? ????? ???? ????? ?????????? ????? ?? ????????? ?????? ????. ???? ???? ?????????? ???? ?? ???????? ???????? ?????? ????????? ????? ????????? ???????? ????? ???????? ?????? ?? ?????? ??? ?? ???????? ???????? ?? ????? ??????? ?????? ??? ??????? ?????? ??. ?????? ?? ???? ??? ??????? ???????? ????? ?? ???? ????? ?????? ??? ????? ??? ????? ??????? ?? ????? ?? ?????? ??? ??? ??????? ??????? ?? ????? ????? ????? ????? ?????. ?? ????? ???? ?????????? ??????? ??? ????? ?? ??????? ?? ????? ?????? ?? ??? ????? ?? ????? ??????? ?? ???????? ?? ??? ???????. ???? ???? ?????????? ???????? ??? ????? ?????? ??????? ??????
???? ??? ????? ??????? ?????? ??????????938703
(http://support.microsoft.com/kb/938703/en-us/ )
???? ??? ?????? | ????? ???????

????? ???????

 
???? ??? ?????????? ??? ??????