Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

We are accessing Active Directory through LDAP over SSL through Java on Windows Server 2003.

We have the properly authenticated certificate installed however another certificate has appeared on the machine from another service automatically.

We have removed the second certificate once and a new one was created.

The problem is, when we try to access AD through SSL the server presents the second certificate first rather than the certificate that we want. Is there a way to specify which certificate that AD uses?

I'm aware of the following from the Microsoft site but do not know how to get around it:

Multiple SSL certificates Schannel, the Microsoft SSL provider, selects the first valid certificate that it finds in the local computer store. If there are multiple valid certificates available in the local computer store, Schannel may not select the correct certificate.

share|improve this question
add comment

1 Answer

What OS version is this? I assume you are talking about LDAP over SSL when you say "accessing AD over SSL through Java".

If you have 2k8 or above, you can put the LDAP certificate in the NTDS\MY store and it will ensure that LDAP picks that one versus certificates that match the machine in the LocalMachine\MY store.

Take a look at http://technet.microsoft.com/en-us/library/dd941846%28WS.10%29.aspx if you need details.

share|improve this answer
    
Thanks. Yes, LDAP over SSL. We are on Windows 2003. –  Tom Hubbard Jul 2 '10 at 9:52
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.