Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I need to expose Active Directory, or at least the address book functions on the internet for some mail clients and other devices. The standard response is to simply not or vpn in, however VPN isn't an option for us with some of the hardware devices.

A number collages expose their setups out to the internet so I'm assuming there has to be a safe way of doing it. Best option I've come up with to install a linux ldap host, then hourly sync over the relevant contact information however that seems like major overkill.

share|improve this question
Can you describe fully what need you're trying to meet? Do you really need to expose LDAP publically, if so why? Are you just trying to publish a names-and-email list? Couldn't you just export that to a web page, if so? – mfinni May 11 '10 at 14:25
Email clients need to query the directory for things such as auto complete. We also use LDAP directory services for other items such as video conferencing. The units are not internal and thus need public access into the directory. – Ryaner May 11 '10 at 21:24

I have to agree; it sounds like a bad idea.

Have you thought about setting up an ADAM instance (ADLS if you are using 2008) and replicating the information you care about to it from ADDS? That way all of your domain information isn't avalilble on the internet :)

Good luck..

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.