enable_client_authentication

DirectoryService.Client.enable_client_authentication(**kwargs)

Enables alternative client authentication methods for the specified directory.

See also: AWS API Documentation

Request Syntax

response = client.enable_client_authentication(
    DirectoryId='string',
    Type='SmartCard'|'SmartCardOrPassword'
)

Parameters

• DirectoryId (string) --

  [REQUIRED]

  The identifier of the specified directory.

• Type (string) --

  [REQUIRED]

  The type of client authentication to enable. Currently only the value SmartCard is supported. Smart card authentication in AD Connector requires that you enable Kerberos Constrained Delegation for the Service User to the LDAP service in your self-managed AD.

Return type

dict

Returns

Response Syntax

{}

Response Structure

• (dict) --

Exceptions

• DirectoryService.Client.exceptions.DirectoryDoesNotExistException
• DirectoryService.Client.exceptions.UnsupportedOperationException
• DirectoryService.Client.exceptions.InvalidClientAuthStatusException
• DirectoryService.Client.exceptions.AccessDeniedException
• DirectoryService.Client.exceptions.NoAvailableCertificateException
• DirectoryService.Client.exceptions.ClientException
• DirectoryService.Client.exceptions.ServiceException