Connect GLPI to NS7 Active Directory

[mrmarkuz (Markus Neuberger)]

@uebmaster

It works!!!

Great!

@uebmaster

What i must to do?

I think easiest way for testing is to create a subdomain like subdomain.example.com and point it to your Nethserver’s public IP address. Usually this can be done in the host providers web UI.

Alternatively you could get a free dyndns domain for example at https://www.dynu.com/. This is also useful if your public IP is dynamic.

As soon as your Nethserver is reachable from the new domain the letsencrypt cert should be obtained. Just enter the new domain and request the certificate.

For AD to work with the certificate you need to add the nsdc host to the letsencrypt domain list:

SSL certificates for Samba AD (NSDC host)

So, basically, all I need for this to work like I already expect it to work, would be for the letsencrypt routine to a) add the nsdc-hostname.domainname.tld to the list of requested CN’s, or ‘Domains’ as they are called in the Gui b) Next step is to simply copy the created certificate and key to the expected locations. Defaults are: cp /etc/pki/tls/certs/localhost.crt /var/lib/machines/nsdc/var/lib/samba/private/tls/cert.pem cp /etc/pki/tls/private/localhost.key /var/lib/machines/nsdc/var/l…