Enabling a Smart card logon to AD using a value in subjectAltName that is not UPN
Hello,
In the project I am working on, the client would like to authenticate Smart Cards that have a certificate with a value in subjectAltName that is not a UPN. The value will be an alphanumeric GUID@mydomain.com format. For example: 1891ADDA010@MYFIRM.ORG
How can AD be configured to do a one-to-one mapping based on this value in this X.509 certificate attribute?
From what I have read in all the KB articles AD requires a UPN in the subjectAltName for locating the user. The client is not happy about having to update that certificate with a UPN, as this would be solution specific to AD. Other directories such as eDirectory do not have this requirement.
Has anyone found a way around this restriction for AD and is it MS supported?
Thanks in advance!!
Software/Hardware used:
Active Directory
In the project I am working on, the client would like to authenticate Smart Cards that have a certificate with a value in subjectAltName that is not a UPN. The value will be an alphanumeric GUID@mydomain.com format. For example: 1891ADDA010@MYFIRM.ORG
How can AD be configured to do a one-to-one mapping based on this value in this X.509 certificate attribute?
From what I have read in all the KB articles AD requires a UPN in the subjectAltName for locating the user. The client is not happy about having to update that certificate with a UPN, as this would be solution specific to AD. Other directories such as eDirectory do not have this requirement.
Has anyone found a way around this restriction for AD and is it MS supported?
Thanks in advance!!
Software/Hardware used:
Active Directory
ASKED:
Aug 11, 2011 9:06 PM GMT
UPDATED:
March 31, 2012 6:47:17 PM GMT
RELATED QUESTIONS
- Form for Subject Alternate Names in Exchange UCC SSL
- Folder redirection and re-mapping
- VBS - Taking input from one spreadsheet and output to another
- Auto-Populate an Access form using a table of values
- Script to add a Period after a Middle Inital- Then query AD for User ID
- Active Directory Users and Computers Microsoft Exchange System objects duplicates
- Windows Server 2008 - Error 0x80094801 Denied by Policy Module
- Help with Exchange 2003 SMTP virtual servers, connectors, and TLS security.
- SAP FICO CERTIFICATION
- ACCESS 2007 and SQL Server 2005 Schema Updates
5 pts.
