Skip to content

Commit

Permalink
Updated instructions
Browse files Browse the repository at this point in the history
  • Loading branch information
@stenio123
stenio123 committed Sep 5, 2018
1 parent a50b9a0 commit fc011ff
Showing 1 changed file with 4 additions and 3 deletions.
7 changes: 4 additions & 3 deletions secrets/ad-secret/README.md
View file
Original file line number Diff line number Diff line change
Expand Up @@ -70,7 +70,7 @@ mmc
```
Add snap-in: Certificate > Computer account > Local Computer.

Click on Certificates > Personal > Certificates
Click on Certificates > Trusted Root Certification Authorities > Certificates

Find your certificate with column "Intended Purposes - Client Auth", right click, All Tasks, Export

Expand Down Expand Up @@ -142,11 +142,12 @@ Note: ensure you have updated your hosts file to point the "YOUR-AD-ROOT-DOMAIN"

In a workstation with Vault client and a copy of the above cert, execute
```
vault secrets enable ad
# Example userdn if your users are in the default "Users" folder:
# userdn="CN=Users,DC=example,DC=net"
export USERNAME=YOUR-VAULT-USERNAME@YOUR-AD-ROOT-DOMAIN
export PASSWORD=YOUR-VAULT-USER-PASSWORD
export USERNAME=YOUR-VAULT-USERNAME-IN-AD@YOUR-AD-ROOT-DOMAIN
export PASSWORD=YOUR-VAULT-USER-IN-AD-PASSWORD
vault write ad/config binddn=$USERNAME bindpass=$PASSWORD url=ldaps://YOUR-AD-ROOT-DOMAIN-HERE userdn="SEE-EXAMPLE-ABOVE" certificate=@PATH-TO-CERTIFICATE
Expand Down

0 comments on commit fc011ff

Please sign in to comment.