zh-CNLimyee 5https://limyee.com/b/members/posts/enable-ldap-over-ssl-ldaps-for-microsoft-active-directory-serversSun, 26 Jul 2026 13:22:00 GMTce2a2671-8a8a-4f4b-bf55-68c8b1789e45:bf60324b-a4bf-4f43-b804-f6512f9418ebBruce Microsoft active directory servers will default to offer LDAP connections over unencrypted connections (boo!). The steps below will create a new self signed certificate appropriate for use with and thus enabling LDAPS for an AD server. Of course the "self-signed" portion of this guide can be swapped out with a real vendor purchased certificate if required. Steps have been tested successfully with Windows Server 2025. Requires a working OpenSSL install (ideally Linux/OSX) and (obviously) a Windows Active Directory server. Create root certificate Using OpenSSL, create new private key and root certificate. Answer country/state/org questions as suitable: $ openssl genrsa -aes256 -out ca.key 4096 $ openssl req -new -x509 -days 3650 -key ca.key -out ca.crt Hold onto the resulting ca.key and ca.crt . Import root certificate into trusted store of domain controller From the active directory server, open Manage computer certificates . Add the generated ca.crt to the certificate path Trusted Root Certification Authorities\Certificates . Done. Create client certificate We will now create a client certificate to be used for LDAPS, signed against our generated root certificate. From the active directory server: Create a new request.inf definition with the following contents - replacing ACTIVE_DIRECTORY_FQDN with the qualified domain name of your active directory server: [Version] Signature="$Windows NT$" [NewRequest] Subject = "CN=ACTIVE_DIRECTORY_FQDN" KeySpec = 1 KeyLength = 2048 Exportable = TRUE MachineKeySet = TRUE SMIME = FALSE PrivateKeyArchive = FALSE UserProtected = FALSE UseExistingKeySet = FALSE ProviderName = "Microsoft RSA SChannel Cryptographic Provider" ProviderType = 12 RequestType = PKCS10 KeyUsage = 0xa0 [EnhancedKeyUsageExtension] OID = 1.3.6.1.5.5.7.3.1 ; Server Authentication Run the following to create a client certificate request of client.csr (note: it's critical this is run from the active directory server itself to ensure correct private key -> certificate association): C:\> certreq -new request.inf client.csr Back to our OpenSSL system: Create v3ext.txt containing the following: keyUsage=digitalSignature,keyEncipherment extendedKeyUsage=serverAuth subjectKeyIdentifier=hash Create a certificate client.crt from certificate request client.csr and root certificate (with private key): $ openssl x509 -req -days 3650 -in client.csr -CA ca.crt -CAkey ca.key -extfile v3ext.txt -set_serial 01 -out client.crt Verify generated certificate: $ openssl x509 -in client.crt -text Ensure the following X509v3 extensions are all present : X509v3 Key Usage: Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication X509v3 Subject Key Identifier Accept and import certificate From the active directory server with client.crt present, run the following: C:\ > certreq -accept client.crt Open Manage computer certificates , the new certificate should now be present under Personal\Certificates . Ensure that: Certificate has a private key association. The "Intended Purposes" is defined as "Server Authentication". Certificate name is the FQDN of the active directory server. Reload active directory SSL certificate Alternatively you can just reboot the server, but this method will instruct the active directory server to simply reload a suitable SSL certificate and if found, enable LDAPS: Create ldap-renewservercert.txt containing the following: dn: changetype: modify add: renewServerCertificate renewServerCertificate: 1 Run the following command: C:\ > ldifde -i -f ldap-renewservercert.txt Test LDAPS using ldp.exe utility From another domain controller, firstly install our generated root certificate ca.crt to the certificate path Trusted Root Certification Authorities\Certificates . Open utility: C:\ > ldp.exe From Connection , select Connect . Enter name of target domain controller. Enter 636 as port number (this is the LDAPS port). Click OK to confirm the connection works. You're all done! Reference Enable LDAP over SSL with a third-party certification authority: https://support.microsoft.com/en-us/kb/321051 https://limyee.com/b/membersSun, 26 Jul 2026 13:18:00 GMTce2a2671-8a8a-4f4b-bf55-68c8b1789e45:819e594e-e791-44e9-ac0b-d7a96b9fa123https://limyee.com/p/editions-pricesThu, 16 Apr 2026 07:59:00 GMTce2a2671-8a8a-4f4b-bf55-68c8b1789e45:3afb479d-825e-4bdf-b82e-e4d4f918007dhttps://limyee.com/p/aboutMon, 13 Apr 2026 07:31:00 GMTce2a2671-8a8a-4f4b-bf55-68c8b1789e45:34990c23-5604-4d7f-ad52-a8287c3ad752 东莞市连易网络科技有限公司（简称：Limyee） Limyee 成立于 2014 年，是国内内容管理系统平台与电子商务解决方案的优秀品牌。公司专注于内容管理与电子商务软件的研发，为传统企业及平台电商提供内容管理和电子商务系统解决方案及相关增值服务。凭借对内容管理的深刻理解和丰富的实战经验，经过一年的努力，Limyee 已经满足不同行业的需求。Limyee 凭借优质的服务、创新进取的精神、专业的团队倍受客户青睐。 我 们一如继往地坚守品质，追求卓越，将同更多客户一起，探索电子商务的成功之道。 Limyee CMS 简介 Limyee CMS（ 软件著作权登记号： 2014SR176701）是一个领先的数字体验平台，将内容管理、数字营销和电子商务整合在一个统一的解决方案中。基于 .NET 构建，它提供可扩展性、安全性和集成灵活性，使其成为以客户为中心的企业级品牌的首选。 同时兼顾不同行业运营的不同需求，提供差异化创新型平台解决方案。 Limyee CMS 功能特色 Limyee CMS 具有灵活的自定义功能、有效的安全机制、良好的人性化设置、丰富的组合式促销功能、开放的系统整合性、所见即所得的可视化编辑等特色功能。 https://limyee.com/f/forumSun, 12 Apr 2026 09:02:00 GMTce2a2671-8a8a-4f4b-bf55-68c8b1789e45:98be3f56-0021-4afc-aa63-476407a6e074如果有关 Limyee 的问题，或者需要咨询。可以在此处发贴。https://limyee.com/helps/a/api-documentation/AD820/show-wiki-toc-restTue, 17 May 2022 02:58:00 GMTce2a2671-8a8a-4f4b-bf55-68c8b1789e45:63fd9bf3-a7cb-48a0-94c0-fe1e82a701fd系统管理员 URLs GET api/v1/wikis/{wikiid}/pages/{wikipageid}/toc.xml (or .json) SHOW the table of contents for a wiki page. GET api/v1/wikis/{wikiid}/toc.xml (or .json) SHOW the table of contents for a wiki. 请求参数 名称 类型 描述 必需 默认值 选项 WikiId int Wiki Id 是 WikiPageId int? Wiki Page Id 否 ShowHiddenPages bool? When true items with their HiddenInTableOfContents flag set to true will be included. By default they are not included in the list. 否 https://limyee.com/helps/a/api-documentation/c/wiki-toc-restTue, 17 May 2022 02:57:00 GMTce2a2671-8a8a-4f4b-bf55-68c8b1789e45:695ae75b-5057-4e3f-9abd-4484e1c2e60d系统管理员 REST API 支持执行以下操作： Show Wiki Toc https://limyee.com/helps/a/api-documentation/AD818/update-wiki-restTue, 17 May 2022 02:56:00 GMTce2a2671-8a8a-4f4b-bf55-68c8b1789e45:2ea11038-97c7-4cdc-a201-27192c00ea71系统管理员 URLs PUT api/v1/wikis/{id}.xml (or .json) UPDATE a wiki. 请求参数 名称 类型 描述 必需 默认值 选项 Id int? Id 是 GroupId int? Group Id 否 Name string Name 否 Description string Default is an empty string. 否 Key string Key 否 Enabled bool? Default is true. 否 https://limyee.com/helps/a/api-documentation/AD817/show-wiki-restTue, 17 May 2022 02:54:00 GMTce2a2671-8a8a-4f4b-bf55-68c8b1789e45:14b776f4-73a9-4006-9fc9-7391c717c3b4系统管理员 URLs GET api/v1/groups/{groupid}/wikis/{id}.xml (or .json) SHOW a wiki. GET api/v1/groups/{groupid}/wikis/{key}.xml (or .json) SHOW a wiki. GET api/v1/wikis/{applicationid}.xml (or .json) SHOW a wiki. GET api/v1/wikis/{id}.xml (or .json) SHOW a wiki. 请求参数 名称 类型 描述 必需 默认值 选项 Id int? Either (Id or ApplicationId) or Key + GroupId are required. 否 ApplicationId Guid? Either (Id or ApplicationId) or Key + GroupId are required. 否 Key string Either (Id or ApplicationId) or Key + GroupId are required. 否 GroupId int? Either (Id or ApplicationId) or Key + GroupId are required. 否 https://limyee.com/helps/a/api-documentation/AD816/list-wiki-restTue, 17 May 2022 02:07:00 GMTce2a2671-8a8a-4f4b-bf55-68c8b1789e45:2036f145-2863-4e9e-b542-850c39451320系统管理员 URLs GET api/v1/groups/{groupid}/wikis.xml (or .json) LIST wikis. GET api/v1/wikis.xml (or .json) LIST wikis. 请求参数 名称 类型 描述 必需 默认值 选项 GroupId int? Group Id 否 IncludeSubGroups bool? Only used when GroupId is specified. Default is false. 否 ApplicationIds string Comma separated list of ApplicationIds. Used to limit to a specific set of wikis as well as sort order if SoryBy is set to ApplicationIdsOrder 否 IncludeDisabled bool? Only return wikis that are enabled. Default is true. 否 PermissionId string Used to get a list of blogs for which the user set in UserId has the provided Permission ID. 否 SortBy string Options: Date, Score:SCORE_ID, ApplicationIdsOrder 否 UserId int? User ID of the user to check permissions for. This option is only used whenever the PermissionId is also supplied. 否 PageSize int? Specify the number of results to return per page. If not set the default is 20. The max is 100. 否 PageIndex int? Specify the page number of paged results to return. Zero-based index. If not specified the default is 0. 否 https://limyee.com/helps/a/api-documentation/AD815/delete-wiki-restTue, 17 May 2022 02:06:00 GMTce2a2671-8a8a-4f4b-bf55-68c8b1789e45:85f12289-13c0-4493-b9f1-f97ee4b207c2系统管理员 URLs DELETE api/v1/wikis/{id}.xml (or .json) DELETE a wiki. 请求参数 名称 类型 描述 必需 默认值 选项 Id int? Id 是 https://limyee.com/helps/a/api-documentation/AD814/create-wiki-restTue, 17 May 2022 02:05:00 GMTce2a2671-8a8a-4f4b-bf55-68c8b1789e45:a680b4cd-4db6-4a91-8c66-593cdade44c0系统管理员 URLs POST api/v1/wikis.xml (or .json) CREATE a new wiki. 请求参数 名称 类型 描述 必需 默认值 选项 GroupId int? Group Id 是 Name string Name 是 Key string If not specified, the key will be generated. 否 Description string Default is an empty string. 否 Enabled bool? Default is true. 否 https://limyee.com/helps/a/api-documentation/c/wiki-restTue, 17 May 2022 02:04:00 GMTce2a2671-8a8a-4f4b-bf55-68c8b1789e45:4fa5b44d-619f-41df-b57d-f59f99224420系统管理员 REST API 支持执行以下操作： Create Wiki Delete Wiki List Wiki Show Wiki Update Wiki https://limyee.com/helps/a/api-documentation/AD812/update-wiki-page-subscription-restTue, 17 May 2022 01:59:00 GMTce2a2671-8a8a-4f4b-bf55-68c8b1789e45:06facd31-1399-4471-af61-f54debf7801e系统管理员 URLs PUT api/v1/wikis/{wikiid}/pages/{wikipageid}/subscriptions.xml (or .json) UPDATE a wiki page subscription. 请求参数 名称 类型 描述 必需 默认值 选项 WikiId int? Wiki Id 否 WikiPageId int Wiki Page Id 是 IsSubscribed bool Is Subscribed 是 https://limyee.com/helps/a/api-documentation/AD811/show-wiki-page-subscription-restTue, 17 May 2022 01:58:00 GMTce2a2671-8a8a-4f4b-bf55-68c8b1789e45:84fccd16-d5a7-4c5e-b60b-348823db8998系统管理员 URLs GET api/v1/wikis/{wikiid}/pages/{wikipageid}/subscriptions.xml (or .json) SHOW a wiki page subscription. 请求参数 名称 类型 描述 必需 默认值 选项 WikiId int? Wiki Id 否 WikiPageId int Wiki Page Id 是 https://limyee.com/helps/a/api-documentation/c/wiki-page-subscription-restTue, 17 May 2022 01:57:00 GMTce2a2671-8a8a-4f4b-bf55-68c8b1789e45:a71f9dee-c064-4903-a144-8b4910154f4b系统管理员 REST API 支持执行以下操作： Create Wiki Page Subscription Show Wiki Page Subscription Update Wiki Page Subscription https://limyee.com/helps/a/api-documentation/AD810/create-wiki-page-subscription-restTue, 17 May 2022 01:57:00 GMTce2a2671-8a8a-4f4b-bf55-68c8b1789e45:cc77ccfb-fc99-4091-81e3-3a8016190f39系统管理员 URLs POST api/v1/wikis/{wikiid}/pages/{wikipageid}/subscriptions.xml (or .json) CREATE a wiki page subscription. 请求参数 名称 类型 描述 必需 默认值 选项 WikiId int? Wiki Id 否 WikiPageId int Wiki Page Id 是 https://limyee.com/helps/a/api-documentation/AD808/show-wiki-page-revision-restTue, 17 May 2022 01:50:00 GMTce2a2671-8a8a-4f4b-bf55-68c8b1789e45:4e5e73f1-69c1-4d84-8038-c5a136f95be6系统管理员 URLs GET api/v1/wikis/{wikiid}/pages/{pageid}/revisions/{revisionnumber}.xml (or .json) SHOW details for a wiki page revision. GET api/v1/wikis/{wikiid}/pages/{pagekey}/revisions/{revisionnumber}.xml (or .json) SHOW details for a wiki page revision. 请求参数 名称 类型 描述 必需 默认值 选项 RevisionNumber int? Revision Number 是 PageId int? Either Id or WikiId and PageKey should be specified. 否 PageKey string Either Id or WikiId and PageKey should be specified. 否 WikiId int? Wiki Id 是 PostTarget string Do not document this property. 否 https://limyee.com/helps/a/api-documentation/AD807/list-wiki-page-revision-restTue, 17 May 2022 01:49:00 GMTce2a2671-8a8a-4f4b-bf55-68c8b1789e45:2e5b8192-469b-4b9a-8556-19bd248e3f92系统管理员 URLs GET api/v1/wikis/{wikiid}/pages/{pageid}/revisions.xml (or .json) LIST wiki page revisions. GET api/v1/wikis/{wikiid}/pages/{pagekey}/revisions.xml (or .json) LIST wiki page revisions. 请求参数 名称 类型 描述 必需 默认值 选项 PageId int? Either Id or WikiId and PageKey should be specified. 否 PageKey string Either Id or WikiId and PageKey should be specified. 否 WikiId int? Wiki Id 是 PostTarget string Do not document this property. 否 SortOrder string Options include Ascending, Descending. Default is Descending. 否 PageSize int? Specify the number of results to return per page. If not set the default is 20. The max is 100. 否 PageIndex int? Specify the page number of paged results to return. Zero-based index. If not specified the default is 0. 否 https://limyee.com/helps/a/api-documentation/AD806/delete-wiki-page-revision-restTue, 17 May 2022 01:47:00 GMTce2a2671-8a8a-4f4b-bf55-68c8b1789e45:16f7c470-86d9-4a01-b700-fbb36cd30cf9系统管理员 URLs DELETE api/v1/wikis/{wikiid}/pages/{pageid}/revisions/{revisionnumber}.xml (or .json) DELETE a wiki page revision. 请求参数 名称 类型 描述 必需 默认值 选项 RevisionNumber int? Revision Number 是 PageId int? Page Id 是 WikiId int? Wiki Id 否