Questions tagged [aws-directory-service]
The AWS Directory Service enables users to access AWS resources from on-premise or cloud-based Active Directory domains.
41
questions
0
votes
0
answers
176
views
Configure AWS VPN with security rules for internal load balancer
currently we have an AWS client vpn setup to give users access to our VPC. We are using active directory groups to allow certain users access to ip ranges. However, we would like to allow some users ...
- 111
0
votes
1
answer
337
views
What is the CIDR of ds.us-east-1.amazonaws.com
I am attempting to join a VM to a domain using a SSM document containing the aws:domainJoin command. My outbound security group is closed to the internet and there is no VPC endpoint for Active ...
- 111
1
vote
1
answer
455
views
Active Directory trust fails (AWS Managed AD)
I've created AWS managed AD and try to create trust with my on-prem. After a lot of tries and solid research on the internet I keep getting this error :
The remote domain ***** is not reachable. ...
- 11
0
votes
1
answer
151
views
How to control the connection while uploading to AWS S3?
Is there a way to control the connection while uploading from my servers to the AWS Storage? to be clear, Azcopy is so powerful to upload to AWS, so most of our bandwidth consumed and this is ...
- 1
2
votes
1
answer
58
views
Preserving AD Configuration (User/Groups/OUs) After Uninstalling "Active Directory Domain Services" Role
I have somewhat of a unique challenge, I'm trying to migrate a old legacy server from a locally installed version of Active Directory Domain Service to a centrally managed AWS Directory Service. As ...
- 215
0
votes
1
answer
2k
views
AWS Windows EC2 unable to join to AWS Managed AD using SSM
I have a windows server that sits in a VPC with no internet access. But it has VPC endpoints to SSM,ec2messages,ssmmessages and ec2 api.
When I try to join this to a domain by using the ssm api,
...
- 111
0
votes
1
answer
630
views
Connect to active directory over peered VPC
I have a VPC(VPC1) where my main instances are running, and I have another one (VPC2)specifically for directory service (AD Connector) and a MS AD server running. I have created a VPC peering (which ...
- 764
4
votes
2
answers
2k
views
On premise AD migration to AWS Managed Microsoft AD
I have a small on premise AD environment comprising two Windows Server 2012 domain controllers. They run AD, DNS, DHCP, GP etc.
I want to migrate this to the AWS Managed Microsoft AD.
All the ...
1
vote
1
answer
448
views
Centos 7 joined to AWS simple ad but can't query users
For the love of all that is holy - been at this for a solid 12 hours straight.
I've added my centos machine to my simple AD service in AWS. Following the steps outlined here
https://docs.aws.amazon....
- 111
0
votes
0
answers
272
views
AWS Managed Microsoft AD LDAP
I have AWS managed MS AD standup and running. Created a jump node and joined the domain. I was able to execute ldp.exe and establish connection to one of my AD controller whose address is like (port ...
- 115
1
vote
1
answer
62
views
Is it possible to choose which objects get synchronized in AWS Managed AD?
In Azure AD Connect Sync, it is possible to configure filtering. This is described as:
By using filtering, you can control which objects appear in Azure Active Directory (Azure AD) from your on-...
- 61
1
vote
0
answers
189
views
Unable to delete fresh AWS Directory Service instance (MS Active Directory)
I created an AWS-hosted MS Active Directory instance for testing but never actually used it. I've been trying, repeatedly, to delete it but been blocked since "it still has authorized applications".
...
- 111
1
vote
1
answer
2k
views
AWS S3 and Route 53: www redirect does not work
I have hosted my static website on AWS S3, like in,
http://example.net
I have configured two S3 buckets, one for http://example.net, and another
one for http://www.example.net, whose 'Static web ...
3
votes
1
answer
2k
views
Export my whole AWS architecture into file?
In AWS, I have a VPC with many components inside, including subnets, security groups, gateways, load balancers, target groups, many instances, and others.
Is there any ways to export my whole ...
- 133
0
votes
0
answers
1k
views
Amazon RDS SQL Server permissions with legacy application
I am trying to run a legacy Windows application in AWS without modifying the code. The application uses Windows Authentication for the DB connection so this is what I have set up:
a Simple Directory ...
- 141
0
votes
1
answer
205
views
AWS-Connection Issue between Web server and database server in the same region
I have set up a web server and database server in AWS as shown the diagram below
aws diagram
Web Server:
OS: Windows Server 2012 R2
Application hosted: VB.NET application in .NET 3.5 framework
Web ...
3
votes
1
answer
3k
views
Why doesn't my conditional forwarder work?
So, I have two AWS-based environments that are largely separated, but are connected via an intermediary VPC that hosts a VPN server, and has routing into each of the individual environments. Let's ...
- 237
1
vote
1
answer
663
views
Can add only one windows machine to failover cluster, both are joined to same AD domain
I want to setup a failover cluster with 2 Windows EC2 instances, for which I'm following this link.
One of the pre-reqs listed says that, Make sure that all servers that you want to add as cluster ...
- 125
0
votes
1
answer
71
views
Using AWS Directory Services AD to authenticate PC clients
We have an enterprise AWS Directory Services AD, and I'm wondering if it's possible/practical to use it as our AD for company desktop PC's, as well as for AWS resources.
We don't have resources to ...
- 365
0
votes
1
answer
401
views
Use on premise LDAP for amazon
I'm currently looking into amazon WorkMail but we have a on premise LDAP which is completely setup with integrations into multiple applications. What I would like to do is connect the workmail to this ...
- 111
1
vote
0
answers
65
views
AWS Directory Service
I got couple of .net web applications installed on the EC2 instance on the AWS cloud. Have one requirement to implement the single sign on using the AWS directory service(AWS Microsopft AD). I do have ...
- 111
0
votes
1
answer
4k
views
AWS AD connector to on premise AD failed
I am attempting to setup AWS AD Connector to our on-premise Active Directory by following Amazon document "AD Connector Prerequisites".
The status is Failed with the following error.
Connectivity ...
- 91
1
vote
1
answer
139
views
AWS Directory Service clarify
We're a growing shop that has no real user management. It's come the time to have single-sign-on. We host everything in AWS with the exception of an in-house desktop server that basically just hosts a ...
- 141
1
vote
2
answers
3k
views
AWS Active Directory: Cannot access from another VPC
I've setup an Active Directory service in AWS in 2 private subnets in a VPC.
I have another VPC in the same account that I want to be able to access the AD from. However for some reason it just isn't ...
- 365
13
votes
1
answer
652
views
Moving on-prem AD to AWS
I am moving my local AD domain to AWS and I am not sure the best way to do it.
Scenario: I have 2 on-prem domains (.local and .net). I am retiring one of them and moving to the other. Both are ...
- 407
2
votes
1
answer
164
views
My Amazon Directory Service DC is failing certain DNS requests
I have a small, Simple Active Directory domain set up in AWS using their Directory Service. It's been running fine for a year now. However, this morning, certain DNS queries that run through the ...
- 237
0
votes
1
answer
615
views
SSO solution that would work with Amazon Simple AD and MS office 365
I am trying to setup Single Sign On(SSO) to AWS servers from a centralized location. Here I want to utilize Azure AD, Amazon Simple AD services.
As such, I have ADFS with an Azure AD where our users ...
- 315
7
votes
1
answer
2k
views
Joining a server to AD via AWS cloudformation
I want to use cloudformation to automatically join new instances to AD.
When I googled this it looks like many people just use scripts in there cloudformation templates and pass in credentials- I don'...
- 4,193
-2
votes
1
answer
158
views
How to create CoreDumpDirectory in AWS? [closed]
I am using AWS but i dont know how to check CoreDumpDirectory exist or not. if not how to create this and which path?? I am trying this but not got any solution How to get a core dump from apache when ...
- 97
3
votes
3
answers
7k
views
Why is the user@domain and cn=user,dc=domain not equivalent?
I've setup a Simple AD on AWS that I can finally authenticate against with LDAP. I don't understand why I was unable to use dc= which is widely suggested everywhere but am able to use @domain.
...
- 946
0
votes
1
answer
560
views
enable to access public dns in browser amazon aws
I am a newbie here in this server and networking things. I have signed up in amazon aws and went through some basic documentations. There I could create security groups, instance, and web servers. I ...
- 101
-4
votes
1
answer
86
views
AWS security concerns
I need to have a freelancer I hired to access an aws ec2 instance to set up an env on the host. What security I need to set up on that host and aws console so that he will not destroy my system and ...
- 11
0
votes
1
answer
331
views
Export IAM user accounts (with passwords) into LDAP
I have a blank LDAP account and want to import all the IAM user accounts to LDAP and keep the LDAP in sync with IAM (not the other way around using federation). Is this possible? I need a LDIF file ...
4
votes
2
answers
2k
views
AWS Simple AD: "KDC has no support for encryption type" for users created with adtool, but not with MS Management Console
Background
I am trying to log in (via SSH, to an Amazon Linux EC2 instance running sssd) as users that I've created in my AWS Directory Services Simple AD. I am authenticating with kerberos and ...
- 325
4
votes
1
answer
1k
views
Connecting AWS AD to Azure AD
We are looking in starting to use AD in our office, the setup would be:
On premise AD server for work stations
Azure AD to support Office 365
AWS AD to support AD on our servers
Connecting on ...
- 341
1
vote
1
answer
1k
views
Authenticating SSHD against AWS Simple Directory Service
I am trying to setup a network of Centos 7 machines with sshd that authenticate public keys against an AWS Simple Directory Service directory.
Currently, I have a bunch of Centos hosts, an instance ...
- 165
0
votes
1
answer
1k
views
OATH TOTP with Windows NPS Server?
I'm trying to set up multi-factor authentication for AWS WorkSpaces using AD and OATH TOTP (e.g. Google Authenticator). In the AWS AD Connector config you can set up the RADIUS server's IP, port and ...
- 573
2
votes
4
answers
8k
views
How to create connection between AWS VPC and my PC/LAN?
May be it's little bit odd, but yes i want to make connection between AWS VPC and my PC/LAN, so i can ping any EC2 instance using their Private IP.
More Details:
I'm using AWS Directory Service(DS) ...
- 51
0
votes
0
answers
250
views
How can I list all users in AWS Directory Service?
I'm looking for a way to list all users in an AWS AD (small), preferably with created date (of the user). Is there any way to do this? The AWS console functionality seem somewhat limited. Maybe via ...
- 800
1
vote
0
answers
94
views
Why is New-DSComputer failing to join an ec2 instance to the directory services domain?
I have a domain xyz.com in AWS Directory Service, and I am trying to join an EC2 instance to this domain using PowerShell. I can do it manually but I am trying to automate it so that when the next ...
- 764
4
votes
2
answers
1k
views
How can I retrieve a domain computer's details from AWS Directory Service?
I know using the AD module for powershell that we can retrieve domain computers details and export them as csv. My domain is in AWS Directory Service, and I have a computer under this domain. I tried ...
- 764