Configure Confluence Server to Authenticate using LDAPS

[Andrew Schaner]

Hi everyone,

First, thanks in advance for your time and responses.

I'm a little nieve on PKI. I'm configuring our Confluence server to authenticate users against AD over port 636. I've been reading this:

https://confluence.atlassian.com/adminjiraserver073/connecting-to-an-ldap-directory-861253200.html

But it doesn't quite hit the mark. We have our own PKI infrastructure- offline root, online intermediaries, etc. So my questions are:

• Wouldn't we just import the intermediary cert chain instead of individual AD servers?
• If we have multiple domain controllers supporting our domain, do we have to import the cert issued for each domain controller? Or just importing the cert for one suffices?

Or.... am I completely misunderstanding- which is quite possible!