dns - Registered Domain Name and Active Directory

07
2014-07
  • Kevin Oluseun Karimu

    I have a registered domain (ex. contoso.com) through GoDaddy. It's DNS records are managed on GoDaddy's site. How do I use this domain name for my FQDN for Active Directory?

    I managed to do it with the AD/DCPROMO wizard successfully, however it doesn't seem to let me log in with Network Level Authentication (which I want) when I am logging into a machine via RDP.

    Do I have to change the DNS records at GoDaddy.com in order to use the domain with Active Directory?

    **UPDATE** I fixed the issue regarding network level authentication by restarting the machine. However, I would still like to use my registered domain name and want to insure I am doing this the correct way. Do I have to change any DNS settings at GoDaddy.com?

  • Answers
  • techie007

    For DNS forwarding from GoDaddy, follow their guide:

    To Update Your Domain Name's IP Address for Forwarding

    • Log in to your Account Manager.
    • Next to Domains, click Launch.
    • Click the domain you want to use, and then select the DNS Zone File tab.
    • Select the A (Host) record you want to update, and then click Edit Record.
    • For Points to, type the public IP address of your internal network.
    • Click Save, and then click Save Changes.
    • For DNS forwarding on your router you need to forward port 53.

  • Related Question

    How to specify LDAP user name for connecting to Active Directory?
  • Ken

    I'm trying to integrate my program with LDAP. I have an Active Directory server here, which apparently speaks LDAP. I want to see what's on the server before I go off trying to debug my own code. I found a program called jxplorer which claims to be able to talk to LDAP servers.

    However, I can't seem to make it work. I'm using settings:

    • Host: (IP address of my AD server)
    • Port: 389
    • Protocol: LDAPv3
    • Base DN: OU=MyCompany,DC=domaincontroller,DC=local (a string I got from somebody else at my company who's written some LDAP code here before)
    • Level: User+Password
    • User DN, Password: (my user name and password on this Exchange server)

    The error I'm getting is:

    javax.naming.AuthenticationException: [LDAP: error code 49 - 80090308: LdapErr: DSID=0C090334, comment: AcceptSecurityContext error, data 525, vece ]
    

    The other LDAP dude here says 525 is "user not found", and hypothesizes that perhaps the user name needs to be specified in "LDAP nomenclature".

    Does anyone know how to connect to AD with jxplorer?


  • Related Answers
  • grawity

    Figured out the way: it's not your user log-in. It's an LDAP DN like:

    CN=My Name,OU=My Company,DC=server,DC=local
    
  • Sajith P

    Pass the LDAP user id and password directly hard coded.

    example:

         Hashtable env = new Hashtable();         
         env.put(Context.INITIAL_CONTEXT_FACTORY,"com.sun.jndi.ldap.LdapCtxFactory");
    env.put(Context.SECURITY_AUTHENTICATION,"simple");
    env.put(Context.REFERRAL, "follow");
    env.put(Context.SECURITY_PRINCIPAL,"adminuserid");
    env.put(Context.SECURITY_CREDENTIALS,"adminPassword");
    env.put(Context.PROVIDER_URL,"ldapUrllink");
    DirContext ctx = new InitialDirContext(env);
    

    This should work.

    thanks Sajith