Cloned from https://bugzilla.redhat.com/show_bug.cgi?id=1176439
Description of problem:

Problems setting up authentication for Satellite 6.0 with Active directory server.

Version-Release number of selected component (if applicable):

Satellite 6.0

How reproducible:

Have not.

Additional info:

There is no documentation on Active Directory + Sat 6 except a small excerpt in the API guide. Nothing in KCS.

Customer is receiving this error:

Processing by UsersController#login as HTML
Rendered users/login.html.erb within layouts/login (2.2ms)
Rendered layouts/base.html.erb (1.1ms)
Completed 200 OK in 5ms (Views: 4.4ms | ActiveRecord: 0.0ms)
Processing by UsersController#login as HTML
Parameters: {"utf8"=>"✓", "authenticity_token"=>"JFaluuMmlndm6MbpboR4G9A/RVCcJzq1rfwz2uNqjHQ=", "login"=>{"login"=>"mamarcha", "password"=>"[FILTERED]"}, "commit"=>"Login"}
Search Result: 49
Search Message: Invalid Credentials
invalid user
Redirected to https://w0575ntipsnms05sw.int.bellmobility.ca/users/login
Completed 302 Found in 100ms (ActiveRecord: 2.3ms)

Although the system reply with invalid user, the packet trace shows decryption error. Where should he install the AD servers certificate?