Integrating HashiCorp Vault & Active Directory: Pretty Fly for a Windows Guy
summary
Walks through running Vault as a single Windows executable, enabling LDAP auth against Active Directory, and enabling the AD secrets engine to rotate passwords on checkout so short‑lived Windows service accounts can be issued programmatically. Shows a PowerShell flow that checks out credentials, maps a network drive from a non-domain machine obtains AD creds, and demonstrates the password rotation causing an initial hiccup then successful access. Notes use of root token for demo, recommends LDAPS for reset rights and TTLs for reduced blast radius.
AI-written summary · about
chapters (9)
- 0:00Introduction and setup
- 1:46Installing the Vault binary
- 4:50Integrating Active Directory
- 7:11Cloud security philosophy
- 11:29Vault functionality
- 13:46Configuring secrets engine
- 16:59Dynamic credential demo
- 24:58Vault free vs enterprise
- 27:30Enterprise features and wrap
related talks
20mAzure Authentication With Vault
27mManaging VMware Environments with HashiCorp Vault
28mSecret Management with Hashicorp´s Vault
29mIntro to secrets management using Vault
55mOffensive Azure Security
32mIntegrating HashiCorp Vault and K8s Apps - No Code Changes Needed
24mAuthenticating to HashiCorp Vault in a VMware vSphere Environment
40mA Better Way To Manage Secrets