Luke Anderson stuntguy3000

Enable LDAP over SSL (LDAPS) for Microsoft Active Directory servers

Tip

Microsoft active directory servers by default provide LDAP connections over unencrypted connections (boo!).

The steps below will create a new self signed certificate appropriate for use with and thus enabling LDAPS for an AD server. Of course the "self-signed" portion of this guide can be swapped out with a real vendor purchased certificate if required.

Steps have been tested successfully with Windows Server 2012R2, but should work with Windows Server 2008 without modification. Requires a working OpenSSL install (ideally Linux/OSX) and (obviously) a Windows Active Directory server.

Create root certificate

	private static byte[] intToLittleEndian(long numero) {
	ByteBuffer bb = ByteBuffer.allocate(4);
	bb.order(ByteOrder.LITTLE_ENDIAN);
	bb.putInt((int) numero);
	return bb.array();
	}

	// OR ...

	private static byte[] intToLittleEndian(long numero) {

	hugeexplosion
	largeexplode
	fireworksSpark
	bubble
	suspended
	depthsuspend
	townaura
	crit
	magicCrit
	smoke

	import java.lang.reflect.Constructor;
	import java.lang.reflect.Field;
	import java.lang.reflect.Method;
	import java.util.Arrays;
	import java.util.HashMap;
	import java.util.List;
	import java.util.Map;
	import java.util.Map.Entry;

	import org.bukkit.Bukkit;

	public class Foo {
	public static void main(String[] args) {
	String x = "This is weird: \u0022\u003B\u0069\u006E\u0074\u0020\u0079\u003D\u0031\u002F\u0030\u003B\u0078\u003D\u0022???";
	System.out.println("x = " + x);
	}
	}

	import com.google.common.base.Charsets;
	import com.google.common.base.Splitter;
	import com.google.common.collect.Lists;
	import org.bukkit.Bukkit;
	import org.bukkit.ChatColor;
	import org.bukkit.OfflinePlayer;
	import org.bukkit.entity.Player;
	import org.bukkit.scoreboard.*;

	import java.lang.reflect.Constructor;