[Lam-public] Local Copy of AD Forests

[Mark S. <ma...@zt...>]

Design:

  1.
Ubuntu 20 LTS with LAM, LDAP.
  2.
DC/Contoso.local server Forest with many servers
  3.
DC/LitWareInc.local server Forest with many servers
  4.
IdP - Server farm for authentication
  5.
AWS Cloud
  6.
Azure Cloud

I have successfully connected LAM to both DC's and can see the tree view.  All is good.

For security reasons I do not want to expose the DC's to external sources.  I want the LDAP databases for both forests on the Ubuntu host.  Does your tool make that happen? The IdP should only point to the LDAP server to verify authentication. The LDAP server should be getting near realtime updates of the AD changes.  Ultimately I have probably 100 AD forests I need to integrate into this.


Mark R. Sigsbee, CISSP



SUNet PKI Support Team

Mark@ZTISolutions.com<mailto:Mark@ZTISolutions.com>

(301)509-7592 (cell)



[cid:2b613cae-9b8b-4cbe-a232-1a91589eec32]