Access GAL From Internet?

[bran2235]

Hello all!

Running Ex 2003... one FrontEnd and two BackEnd
My company will soon be using a hosted app that has it's own integrated mail client. Our users will access this hosted app over the internet. The integrated email has it's own address list. But, the hosted app users will need to be able to see our Exchange GAL when they are addressing an email in the hosted app...

Is there a way to make our Exchange GAL accessible over the internet (without placing our GC/DC outside of our network? Someone mentioned that we could use our Ex Front End (OWA) server to serve up the GAL...? Anyone have any ideas?

I know I could put one of my DCs out there and open port 389, etc... But I think that is too risky. I just need to know how in the world would this be possible...

THANKS IN ADVANCE!!
-Brandon

 

[ShackDaddy]

What if your firewall rule only forwarded port 389 queries from the IP that your hosted app uses? That would allow relatively secure LDAP queries from that organization.

Dave Shackelford
ThirdTier.net

 

[bran2235]

Yes, that may work- however, there is still a chance of someone spoofing the IP...

Anyone else have any ideas?

 

[ShackDaddy]

This thread is a great contribution to this discussion:

http://www.tech-archive.net/Archive...server.active_directory/2008-05/msg01251.html

Dave Shackelford
ThirdTier.net