Ajoy Rajan
asked on
Citrix LDAP help
Hi,
we have upgraded our DC recently and unfortunately, our domain is not a registered domain. It is XXXX.CENTRAL. As per the new rules of CA, we cannot get a trusted certificate for a non-registered domain. LDAP is rejecting our authentication, due to that. I cannot get rid of my old DC because it has a valid certificate running.
I wanted a solution such that I can by pass the certificate purchase.
we have upgraded our DC recently and unfortunately, our domain is not a registered domain. It is XXXX.CENTRAL. As per the new rules of CA, we cannot get a trusted certificate for a non-registered domain. LDAP is rejecting our authentication, due to that. I cannot get rid of my old DC because it has a valid certificate running.
I wanted a solution such that I can by pass the certificate purchase.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Resolved it myself.
with no public CA you have to import the certificate of issuing CA (and existing Sub-CA's) as trusted.
which component try to authenticate at which device?
Netscaler to AD?
netscaler to storefront?
other...?
do you get the error if you try to use LDAP-SSL?