List Archives

This forum is an archive of all posts to our mailing list over the past few years. The forum is set read only therefore to contribute you will need to join our list community. See more info about this here.

List Archives

Unanswered Active Topics

Forums Search

Forums >ActiveDir Mail List Archive >List Archives

Subject: [ActiveDir] Using browser certificates with IIS and UPN mapping

Prev Next

You are not authorized to post a reply.

Author

Messages

AlLilianstrom User is Offline

Posts:6

05/02/2008 3:34 PM
We have a CA based on a open source product that is used for numerous *nix/Apache based web applications on our site. We'd like to be able to use the same CA with IIS to prevent passwords of any kind from going over the wire. The domain that the IIS servers are in is configured to trust certificates from the CA. I followed the technet pages regarding certs and IIS so I believe I have IIS configured to accept certificates properly but access only works from IE on a machine in the same domain as the IIS server. If I attempt to use the same certificate in Firefox from a domain machine or from Linux or OS/X the access fails. I see a logon failure when accessing the protected page in the security log and the entry matches the name assigned to the certificate so it appears that it's a configuration error. We have many to one mapping working with certs from the same ca on another server so we know that the certs will work. Any suggestions/ideas? tia, al -- Al Lilianstrom CD/LSC/CSI/CSG Al.Lilianstrom@fnal.gov List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ma/default.aspx

You are not authorized to post a reply.

Forums >ActiveDir Mail List Archive >List Archives > [ActiveDir] Using browser certificates with IIS and UPN mapping

ActiveForums 3.7

Syndicate

Friends

List Archives

List Archives

Friends

Members

Articles

Related Links

Ads