Welcome to ISAserver.org

Client Certification User Mapping

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 General] >> Web Publishing >> Client Certification User Mapping

Page: [1]

Message

<< Older Topic Newer Topic >>

Client Certification User Mapping - 5.Feb.2003 9:31:00 AM

faiz

Posts: 15
Joined: 8.Oct.2002
Status: offline

I have a non-AD ISA Server which requires Client certificate authentication. I read in one of the related tutorials that client cert need to be mapped to user accounts under AD. In cases where the ISA server is non-AD as in mine how can we achieve this mapping requirements ? Or is client certificate mapping a requirement for successful client cert authentication ?

Post #: 1

Featured Links*

RE: Client Certification User Mapping - 6.Feb.2003 12:48:00 AM

tshinder

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Fifa,

I know how to do it in an AD domain, but I doubt you'll make it work in a NT domain.

HTH,
Tom

(in reply to faiz)

Post #: 2

RE: Client Certification User Mapping - 6.Feb.2003 3:10:00 AM

faiz

Posts: 15
Joined: 8.Oct.2002
Status: offline

How do you then implement client cert authentication in a standalone ISA server if cert user mapping under this kind of setup not possible.

(in reply to faiz)

Post #: 3

RE: Client Certification User Mapping - 6.Feb.2003 4:04:00 AM

tshinder

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Fifa,

Good question. I'll put it on my list of future articles and see if it can be worked out. There is a way to do this at the Web site, IIRC, but I haven't done that for awhile, so the details are fuzzy.

Tom

(in reply to faiz)

Post #: 4

RE: Client Certification User Mapping - 12.Feb.2003 8:04:00 AM

SKruese

Posts: 11
Joined: 13.Dec.2002
From: The Netherlands
Status: offline

Hi Fifa,

This is not possible. Only IIS and the Active Directory offer this functionality. I don't know what is possible with the SDK, but i doubt it is possible. So if you want to use certificate authentication on the ISA server, make it a member of the AD.

Regards,

Sander

(in reply to faiz)