Using SSL to Secure LDAP Traffic to Microsoft Domain Controllers

As Microsoft's Active Directory continues to gain momentum as a primary user authentication directory more application owners are requesting the use of Lightweight Directory Access Protocol (LDAP) for user authentication within their applications. By default Microsoft domain controllers do not provide a secure method for third party connections when using LDAP. This can create a false sense of security and the potential for loss of confidentiality. This paper will explain the configuration of LDAP over Secure Sockets Layer (SSL) to secure communication between application servers and Microsoft domain controllers.