Google Postini Directory Sync Configuration Guide - Manual (Page 33)

Microsoft Active Directory 33
Enable SSL
Configure Basic Authentication for Default Web Site and /dsml
There are several web site authentication methods available in Windows IIS.
Directory Sync tool uses Basic Authentication over SSL, which is the most
common and secure method for HTTP communication.
To use Basic Authentication, you must have a user account with rights to log on
locally and to have access to necessary files.
To select and enable Basic Authentication for the DSML module in IIS:
1. Launch IIS Manager from Start -> All Programs -> Administrative Tools -> IIS
Manager.
2. In (local machine), navigate to Web Sites -> Default Web Sites.
3. Click on the Directory Security tab.
4. In the Authentication and access control box, click Edit…
5. Uncheck Enable anonymous access.
6. Check Basic authentication.
A dialog will appear to warn you that your user name and password will be
sent over the net in clear text. Since the connection will be through SSL, this
warning does not apply. Click Yes to continue.
7. In Authenticated access, make sure all other boxes besides Basic
Authentication are unchecked.
8. Click OK to close the dialog box.
Also, configuration Basic Authentication in the /dsml directory
1. In (local machine), navigate to Web Sites -> Default Web Sites.
2. Click on the Directory Security tab.
3. In the Authentication and access control box, click Edit…
4. Uncheck Enable anonymous access.
5. Check Basic authentication.
A dialog will appear to warn you that your user name and password will be
sent over the net in clear text. Since the connection will be through SSL, this
warning does not apply. Click Yes to continue.
6. In Authenticated access, make sure all other boxes besides Basic
Authentication are unchecked.
7. Click OK to close the dialog box.