{"id":12579,"date":"2026-03-09T01:37:00","date_gmt":"2026-03-08T16:37:00","guid":{"rendered":"https:\/\/chat-messenger.com\/?p=12579"},"modified":"2026-03-12T10:59:43","modified_gmt":"2026-03-12T01:59:43","slug":"xac-thuc-windows","status":"publish","type":"post","link":"https:\/\/chat-messenger.com\/vi\/manual\/camserver\/windows-auth","title":{"rendered":"\u0110\u0103ng nh\u1eadp m\u1ed9t l\u1ea7n (SSO) v\u1edbi x\u00e1c th\u1ef1c Windows t\u00edch h\u1ee3p."},"content":{"rendered":"<h2 class=\"wp-block-heading\">T\u1ed5ng quan<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Trong m\u00f4i tr\u01b0\u1eddng Active Directory, vi\u1ec7c s\u1eed d\u1ee5ng X\u00e1c th\u1ef1c Windows t\u00edch h\u1ee3p (Kerberos) cho ph\u00e9p ng\u01b0\u1eddi d\u00f9ng s\u1eed d\u1ee5ng c\u00f9ng th\u00f4ng tin \u0111\u0103ng nh\u1eadp m\u00e0 h\u1ecd d\u00f9ng \u0111\u1ec3 \u0111\u0103ng nh\u1eadp v\u00e0o Windows.<span class=\"swl-marker mark_orange\">\u0110\u0103ng nh\u1eadp m\u1ed9t l\u1ea7n (SSO) t\u1ef1 \u0111\u1ed9ng v\u00e0o CAMServer m\u00e0 kh\u00f4ng c\u1ea7n \u0111\u0103ng nh\u1eadp th\u00eam v\u00e0o C&amp;M.<\/span> C\u00f3 th\u1ec3.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Theo truy\u1ec1n th\u1ed1ng, h\u1ec7 th\u1ed1ng n\u00e0y y\u00eau c\u1ea7u x\u00e2y d\u1ef1ng b\u1eb1ng IIS\/ASP.NET, nh\u01b0ng v\u1edbi t\u00ednh n\u0103ng n\u00e0y, CAMServer tr\u1ef1c ti\u1ebfp x\u1eed l\u00fd x\u00e1c th\u1ef1c Kerberos. \u0110i\u1ec1u n\u00e0y cho ph\u00e9p c\u1ea5u h\u00ecnh SSO \u0111\u01a1n gi\u1ea3n h\u01a1n b\u1eb1ng c\u00e1ch s\u1eed d\u1ee5ng x\u00e1c th\u1ef1c Windows t\u00edch h\u1ee3p m\u00e0 kh\u00f4ng c\u1ea7n c\u00e1c m\u00e1y ch\u1ee7 b\u1ed5 sung nh\u01b0 IIS.<\/p>\n\n\n<div class=\"swell-block-postLink\">\t\t\t<div class=\"p-blogCard -internal\" data-type=\"type1\" data-onclick=\"clickLink\">\n\t\t\t\t<div class=\"p-blogCard__inner\">\n\t\t\t\t\t<span class=\"p-blogCard__caption\">C\u0169ng \u0111\u00e1ng \u0111\u1ecdc.<\/span>\n\t\t\t\t\t<div class=\"p-blogCard__thumb c-postThumb\"><figure class=\"c-postThumb__figure\"><img decoding=\"async\" src=\"https:\/\/chat-messenger.com\/wp-content\/themes\/swell\/assets\/img\/no_img.png\" alt=\"\" class=\"c-postThumb__img u-obf-cover\" width=\"320\" height=\"180\"><\/figure><\/div>\t\t\t\t\t<div class=\"p-blogCard__body\">\n\t\t\t\t\t\t<a class=\"p-blogCard__title\" href=\"https:\/\/chat-messenger.com\/vi\/manual\/camserver\/iis-sso\">\u0110\u0103ng nh\u1eadp m\u1ed9t l\u1ea7n (SSO) s\u1eed d\u1ee5ng x\u00e1c th\u1ef1c Windows t\u00edch h\u1ee3p trong IIS.<\/a>\n\t\t\t\t\t\t<span class=\"p-blogCard__excerpt\">Vui l\u00f2ng s\u1eed d\u1ee5ng nh\u1eefng th\u00f4ng tin sau trong m\u00f4i tr\u01b0\u1eddng m\u1edbi c\u1ee7a b\u1ea1n: [T\u1ed5ng quan v\u1ec1 X\u00e1c th\u1ef1c Windows T\u00edch h\u1ee3p] X\u00e1c th\u1ef1c Windows T\u00edch h\u1ee3p (IWA) l\u00e0 m\u1ed9t h\u1ec7 th\u1ed1ng trong \u0111\u00f3 IIS v\u00e0 ng\u01b0\u1eddi d\u00f9ng c\u00f9ng thu\u1ed9c m\u1ed9t mi\u1ec1n\u2026<\/span>\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t<\/div>\n\n\n<h2 class=\"wp-block-heading\">Lu\u1ed3ng SSO<\/h2>\n\n\n\n<div class=\"wp-block-columns\">\n<div class=\"wp-block-column\">\n<figure class=\"wp-block-image size-full is-style-border\"><img decoding=\"async\" width=\"1556\" height=\"1505\" src=\"https:\/\/chat-messenger.com\/wp-content\/uploads\/2026\/03\/image-8.png\" alt=\"\" class=\"wp-image-12633\"\/><\/figure>\n<\/div>\n\n\n\n<div class=\"wp-block-column\">\n<p class=\"wp-block-paragraph\">Lu\u1ed3ng x\u1eed l\u00fd SSO<\/p>\n\n\n\n<ol class=\"wp-block-list\"><li><strong>Truy c\u1eadp CAMServer<\/strong><br>Ng\u01b0\u1eddi d\u00f9ng truy c\u1eadp CAMServer th\u00f4ng qua tr\u00ecnh duy\u1ec7t. Khi truy c\u1eadp, m\u1ed9t m\u00e3 th\u00f4ng b\u00e1o t\u1ea1m th\u1eddi cho \u1ee9ng d\u1ee5ng s\u1ebd \u0111\u01b0\u1ee3c g\u1eedi qua ph\u01b0\u01a1ng th\u1ee9c POST.<\/li><li><strong>Y\u00eau c\u1ea7u x\u00e1c th\u1ef1c<\/strong><br>Sau khi x\u00e1c minh m\u00e3 th\u00f4ng b\u00e1o t\u1ea1m th\u1eddi, CAMServer y\u00eau c\u1ea7u x\u00e1c th\u1ef1c Windows (Negotiate) t\u1eeb tr\u00ecnh duy\u1ec7t.<\/li><li><strong>L\u1ea5y v\u00e9 Kerberos<\/strong><br>Tr\u00ecnh duy\u1ec7t s\u1eed d\u1ee5ng th\u00f4ng tin \u0111\u0103ng nh\u1eadp Windows.<br>L\u1ea5y v\u00e9 d\u1ecbch v\u1ee5 Kerberos t\u1eeb KDC c\u1ee7a Active Directory.<\/li><li><strong>G\u1eedi v\u00e9 Kerberos<\/strong><br>Tr\u00ecnh duy\u1ec7t s\u1eed d\u1ee5ng v\u00e9 Kerberos \u0111\u00e3 \u0111\u01b0\u1ee3c c\u1ea5p.<br>Ti\u00eau \u0111\u1ec1 HTTP \u0111\u01b0\u1ee3c th\u00eam v\u00e0o v\u00e0 th\u00f4ng b\u00e1o \u0111\u01b0\u1ee3c g\u1eedi l\u1ea1i cho CAMServer.<\/li><li><strong>X\u00e1c minh v\u00e9<\/strong><br>CAMServer s\u1eed d\u1ee5ng keytab \u0111\u1ec3 x\u00e1c minh v\u00e9 Kerberos. N\u1ebfu qu\u00e1 tr\u00ecnh x\u00e1c minh th\u00e0nh c\u00f4ng, n\u00f3 s\u1ebd truy xu\u1ea5t th\u00f4ng tin ng\u01b0\u1eddi d\u00f9ng Kerberos c\u00f3 trong v\u00e9.<\/li><li><strong>T\u00ecm ki\u1ebfm LDAP v\u00e0 \u0111\u1ed1i s\u00e1nh ng\u01b0\u1eddi d\u00f9ng CAM<\/strong><br>H\u1ec7 th\u1ed1ng th\u1ef1c hi\u1ec7n t\u00ecm ki\u1ebfm LADP b\u1eb1ng c\u00e1ch s\u1eed d\u1ee5ng th\u00f4ng tin ng\u01b0\u1eddi d\u00f9ng Kerberos \u0111\u00e3 truy xu\u1ea5t \u0111\u1ec3 l\u1ea5y th\u00f4ng tin ng\u01b0\u1eddi d\u00f9ng t\u1eeb AD v\u00e0 so s\u00e1nh th\u00f4ng tin \u0111\u00f3 v\u1edbi ng\u01b0\u1eddi d\u00f9ng \u0111\u00e3 \u0111\u0103ng k\u00fd trong CAMServer. N\u1ebfu t\u00ecm th\u1ea5y s\u1ef1 tr\u00f9ng kh\u1edbp, qu\u00e1 tr\u00ecnh \u0111\u0103ng nh\u1eadp s\u1ebd \u0111\u01b0\u1ee3c cho ph\u00e9p.<\/li><li><strong>\u0110\u0103ng nh\u1eadp th\u00e0nh c\u00f4ng<\/strong><br>CAMServer th\u1ef1c hi\u1ec7n m\u1ed9t phi\u00ean \u0111\u0103ng nh\u1eadp.<br>Ng\u01b0\u1eddi d\u00f9ng c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng CAMServer m\u00e0 kh\u00f4ng c\u1ea7n hi\u1ec3n th\u1ecb m\u00e0n h\u00ecnh \u0111\u0103ng nh\u1eadp.<\/li><\/ol>\n<\/div>\n<\/div>\n\n\n\n<p class=\"is-style-big_icon_point wp-block-paragraph\">N\u1ebfu b\u1ea1n truy c\u1eadp trang web b\u1eb1ng t\u00ean mi\u1ec1n kh\u00e1c v\u1edbi t\u00ean mi\u1ec1n \u0111\u1ea7y \u0111\u1ee7 (FQDN) \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng cho x\u00e1c th\u1ef1c Windows, ho\u1eb7c n\u1ebfu b\u1ea1n truy c\u1eadp t\u1eeb m\u00e1y t\u00ednh kh\u00f4ng \u0111\u01b0\u1ee3c k\u1ebft n\u1ed1i v\u1edbi mi\u1ec1n, qu\u00e1 tr\u00ecnh x\u00e1c th\u1ef1c \u0111\u0103ng nh\u1eadp s\u1ebd \u0111\u01b0\u1ee3c th\u1ef1c hi\u1ec7n tr\u00ean m\u00e1y ch\u1ee7 \u0111i\u1ec1u khi\u1ec3n v\u00e0 qu\u1ea3n l\u00fd (C&amp;M).<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Y\u00eau c\u1ea7u v\u1eadn h\u00e0nh<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u0110\u1ec3 s\u1eed d\u1ee5ng t\u00ednh n\u0103ng n\u00e0y, c\u1ea7n c\u00f3 c\u00e1c \u0111i\u1ec1u ki\u1ec7n m\u00f4i tr\u01b0\u1eddng sau.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">M\u00f4i tr\u01b0\u1eddng Active Directory<\/h3>\n\n\n\n<ul class=\"wp-block-list\"><li>C\u1ea7n ph\u1ea3i thi\u1ebft l\u1eadp m\u1ed9t mi\u1ec1n Active Directory.<\/li><\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">M\u00e1y ch\u1ee7 CAM<\/h3>\n\n\n\n<ul class=\"wp-block-list\"><li><a href=\"https:\/\/chat-messenger.com\/vi\/lien-he-chung-toi\/ke-hoach-may-quay\/\">K\u1ebf ho\u1ea1ch t\u1ed1i th\u01b0\u1ee3ng<\/a>S\u1eed d\u1ee5ng<\/li><li>CAMServer ph\u1ea3i c\u00f3 th\u1ec3 truy c\u1eadp \u0111\u01b0\u1ee3c th\u00f4ng qua T\u00ean mi\u1ec1n \u0111\u1ee7 \u0111i\u1ec1u ki\u1ec7n (FQDN) c\u1ee7a n\u00f3.<\/li><li>M\u00e1y ch\u1ee7 Windows ch\u1ea1y CAMServer ph\u1ea3i \u0111\u01b0\u1ee3c tham gia v\u00e0o m\u1ed9t mi\u1ec1n Active Directory.<br>\u0110\u1ec3 ki\u1ec3m tra xem m\u00e1y ch\u1ee7 Windows hi\u1ec7n t\u1ea1i \u0111ang tham gia v\u00e0o nh\u1eefng mi\u1ec1n n\u00e0o, h\u00e3y v\u00e0o &quot;Tr\u00ecnh qu\u1ea3n l\u00fd m\u00e1y ch\u1ee7&quot; \u2192 nh\u1ea5p v\u00e0o &quot;M\u00e1y ch\u1ee7 c\u1ee5c b\u1ed9&quot; trong menu b\u00ean tr\u00e1i \u2192 nh\u1ea5p v\u00e0o &quot;T\u00ean m\u00e1y t\u00ednh&quot; v\u00e0 tham kh\u1ea3o tr\u01b0\u1eddng mi\u1ec1n.<\/li><\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Ng\u01b0\u1eddi d\u00f9ng<\/h3>\n\n\n\n<ul class=\"wp-block-list\"><li>M\u00e1y t\u00ednh c\u1ee7a ng\u01b0\u1eddi d\u00f9ng ph\u1ea3i \u0111\u01b0\u1ee3c k\u1ebft n\u1ed1i v\u1edbi mi\u1ec1n v\u00e0 \u0111\u0103ng nh\u1eadp v\u00e0o Windows th\u00f4ng qua mi\u1ec1n \u0111\u00f3.<\/li><li>Ng\u01b0\u1eddi d\u00f9ng \u0111\u1ee7 \u0111i\u1ec1u ki\u1ec7n SSO l\u00e0 nh\u1eefng ng\u01b0\u1eddi d\u00f9ng c\u00f3 ID ng\u01b0\u1eddi d\u00f9ng l\u00e0 <em>T\u00ean ng\u01b0\u1eddi d\u00f9ng ch\u00ednh&nbsp;<\/em>(B\u1ea1n ph\u1ea3i \u0111\u0103ng k\u00fd tr\u01b0\u1edbc v\u1edbi CAMServer \u1edf \u0111\u1ecbnh d\u1ea1ng UPN (v\u00ed d\u1ee5: user@camtest.com))<\/li><\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">C\u00e1c tr\u00ecnh duy\u1ec7t \u0111\u01b0\u1ee3c h\u1ed7 tr\u1ee3<br><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">X\u00e1c th\u1ef1c SSO c\u1ee7a Windows kh\u1ea3 d\u1ee5ng tr\u00ean c\u00e1c tr\u00ecnh duy\u1ec7t sau.<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Microsoft Edge<\/li><li>Google Chrome<\/li><li><a href=\"https:\/\/chat-messenger.com\/vi\/thu-cong\/cai-dat-giam-gia\/ung-dung-web-cam\/\" target=\"_blank\" rel=\"noreferrer noopener\">\u1ee9ng d\u1ee5ng<\/a><\/li><\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">V\u1ec1 c\u1ea5u h\u00ecnh b\u1ed9 c\u00e2n b\u1eb1ng t\u1ea3i<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">X\u00e1c th\u1ef1c Windows (Kerberos) l\u00e0 m\u1ed9t ph\u01b0\u01a1ng th\u1ee9c x\u00e1c th\u1ef1c s\u1eed d\u1ee5ng c\u00e1c ti\u00eau \u0111\u1ec1 x\u00e1c th\u1ef1c HTTP \u0111\u1ec3 \u0111\u00e0m ph\u00e1n, do \u0111\u00f3 CAMServer ph\u1ea3i ti\u1ebfp t\u1ee5c ch\u1ea1y tr\u00ean c\u1ed5ng 443 v\u00e0 b\u1ed9 c\u00e2n b\u1eb1ng t\u1ea3i ph\u1ea3i l\u00e0 L4 (truy\u1ec1n qua TLS).<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">C\u1ea5u h\u00ecnh \u0111\u01b0\u1ee3c \u0111\u1ec1 xu\u1ea5t<\/h4>\n\n\n\n<p class=\"is-style-bg_stripe wp-block-paragraph\">Ng\u01b0\u1eddi d\u00f9ng \u2500\u2500HTTPS\u2500\u2500\u25b6 B\u1ed9 c\u00e2n b\u1eb1ng t\u1ea3i L4 (Truy\u1ec1n qua TLS) \u2500\u2500HTTPS\u2500\u2500\u25b6 M\u00e1y ch\u1ee7 CAM(443)<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">C\u1ea5u h\u00ecnh NG<\/h4>\n\n\n\n<p class=\"is-style-bg_stripe wp-block-paragraph\">Ng\u01b0\u1eddi d\u00f9ng\u2500\u2500HTTPS\u2500\u2500\u25b6 B\u1ed9 c\u00e2n b\u1eb1ng t\u1ea3i L7 (Ch\u1ea5m d\u1ee9t SSL) \u2500\u2500HTTP\u2500\u2500\u25b6 M\u00e1y ch\u1ee7 CAM (8080)<\/p>\n\n\n\n<p class=\"is-style-icon_info wp-block-paragraph\">Trong b\u1ed9 c\u00e2n b\u1eb1ng t\u1ea3i L7, qu\u00e1 tr\u00ecnh ch\u1ea5m d\u1ee9t TLS v\u00e0 t\u00e1i t\u1ea1o HTTP di\u1ec5n ra.<br>C\u00f3 v\u1ebb nh\u01b0 nhi\u1ec1u h\u1ec7 th\u1ed1ng kh\u00f4ng h\u1ed7 tr\u1ee3 \u0111\u00e0m ph\u00e1n x\u00e1c th\u1ef1c Windows (Kerberos).<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Quy tr\u00ecnh x\u00e2y d\u1ef1ng<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Quy tr\u00ecnh thi\u1ebft l\u1eadp sau \u0111\u00e2y s\u1ebd \u0111\u01b0\u1ee3c gi\u1ea3i th\u00edch d\u1ef1a tr\u00ean &quot;V\u00ed d\u1ee5 c\u1ea5u h\u00ecnh&quot;.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">V\u00ed d\u1ee5 c\u1ea5u h\u00ecnh<\/h3>\n\n\n\n<ul class=\"wp-block-list\"><li>T\u00ean mi\u1ec1n \u0111\u1ea7y \u0111\u1ee7 (FQDN) d\u00f9ng \u0111\u1ec3 x\u00e1c th\u1ef1c tr\u00ean Windows:<code>https:\/\/test.chat-messenger.com<\/code><\/li><li>T\u00ean mi\u1ec1n Active Directory:<code>camtest.com<\/code><\/li><li>T\u00e0i kho\u1ea3n d\u1ecbch v\u1ee5:<code>cam-svc@camtest.com<\/code> (<code>CAMTEST\\cam-svc<\/code>)<\/li><\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">T\u1ed5ng quan v\u1ec1 \u0111\u0103ng k\u00fd SPN<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">T\u00ean ch\u00ednh c\u1ee7a d\u1ecbch v\u1ee5 (SPN) l\u00e0 t\u00ean \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng trong x\u00e1c th\u1ef1c Kerberos \u0111\u1ec3 x\u00e1c \u0111\u1ecbnh duy nh\u1ea5t m\u1ed9t d\u1ecbch v\u1ee5 c\u1ee5 th\u1ec3 tr\u00ean Active Directory. Khi truy c\u1eadp m\u1ed9t d\u1ecbch v\u1ee5 b\u1eb1ng T\u00ean mi\u1ec1n \u0111\u1ee7 \u0111i\u1ec1u ki\u1ec7n (FQDN) c\u1ee7a n\u00f3, vi\u1ec7c \u0111\u0103ng k\u00fd SPN cho ph\u00e9p m\u00e1y kh\u00e1ch y\u00eau c\u1ea7u ch\u00ednh x\u00e1c v\u00e9 Kerberos cho d\u1ecbch v\u1ee5 m\u00e0 n\u00f3 \u0111ang truy c\u1eadp.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">V\u00ed d\u1ee5 <code>https:\/\/test.chat-messenger.com<\/code> Khi truy c\u1eadp d\u1ecbch v\u1ee5, m\u00e1y kh\u00e1ch (tr\u00ecnh duy\u1ec7t) y\u00eau c\u1ea7u m\u1ed9t v\u00e9 x\u00e1c th\u1ef1c t\u1eeb Active Directory v\u1edbi n\u1ed9i dung: &quot;T\u00f4i mu\u1ed1n k\u1ebft n\u1ed1i v\u1edbi d\u1ecbch v\u1ee5 c\u00f3 t\u00ean HTTP\/test.chat-messenger.com.&quot; Active Directory ki\u1ec3m tra xem SPN \u0111\u01b0\u1ee3c li\u00ean k\u1ebft v\u1edbi t\u00e0i kho\u1ea3n n\u00e0o v\u00e0 c\u1ea5p v\u00e9 d\u1ecbch v\u1ee5 t\u01b0\u01a1ng \u1ee9ng. N\u1ebfu SPN kh\u00f4ng \u0111\u01b0\u1ee3c \u0111\u0103ng k\u00fd ch\u00ednh x\u00e1c, qu\u00e1 tr\u00ecnh x\u00e1c th\u1ef1c Kerberos s\u1ebd th\u1ea5t b\u1ea1i.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"serviceAccounts\">T\u00e0i kho\u1ea3n d\u1ecbch v\u1ee5<\/h4>\n\n\n\n<div class=\"wp-block-columns\">\n<div class=\"wp-block-column\">\n<p class=\"wp-block-paragraph\">T\u1ea1o t\u00e0i kho\u1ea3n d\u1ecbch v\u1ee5 \u0111\u1ec3 x\u00e1c th\u1ef1c Kerberos. M\u1eb7c d\u00f9 \u0111i\u1ec1u n\u00e0y c\u00f3 th\u1ec3 th\u1ef1c hi\u1ec7n \u0111\u01b0\u1ee3c v\u1edbi ng\u01b0\u1eddi d\u00f9ng mi\u1ec1n, nh\u01b0ng nh\u00ecn chung n\u00ean t\u00e1ch bi\u1ec7t t\u00e0i kho\u1ea3n ng\u01b0\u1eddi d\u00f9ng v\u00e0 t\u00e0i kho\u1ea3n d\u1ecbch v\u1ee5 \u0111\u1ec3 tr\u00e1nh c\u00e1c l\u1ed7i kh\u00f4ng mong mu\u1ed1n v\u00e0 l\u00e0m r\u00f5 ph\u1ea1m vi \u00e1p d\u1ee5ng ch\u00ednh s\u00e1ch m\u1eadt kh\u1ea9u.<code>OU = T\u00e0i kho\u1ea3n d\u1ecbch v\u1ee5<\/code> Nh\u01b0 th\u1ebf n\u00e0y, OU <code>Ng\u01b0\u1eddi d\u00f9ng<\/code> \u0110\u1ec3 ph\u00e2n bi\u1ec7t n\u00f3 v\u1edbi b\u1ed9 \u0111i\u1ec1u khi\u1ec3n mi\u1ec1n Active Directory,<code>d\u1ecbch v\u1ee5 camera<\/code> H\u00e3y t\u1ea1o ra n\u00f3.<\/p>\n\n\n\n<p class=\"is-style-icon_pen wp-block-paragraph\"><span class=\"swl-fz u-fz-xs\">N\u1ebfu b\u1ea1n \u0111\u00e3 ch\u1ec9 \u0111\u1ecbnh t\u00e0i kho\u1ea3n d\u1ecbch v\u1ee5 khi kh\u1edfi \u0111\u1ed9ng CAMServer nh\u01b0 m\u1ed9t d\u1ecbch v\u1ee5 Windows, b\u1ea1n c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng c\u00f9ng m\u1ed9t ng\u01b0\u1eddi d\u00f9ng \u0111\u00f3.<\/span><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Vui l\u00f2ng ki\u1ec3m tra c\u00e1c t\u00f9y ch\u1ecdn sau trong t\u00e0i kho\u1ea3n c\u1ee7a b\u1ea1n.<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>H\u00e3y thi\u1ebft l\u1eadp m\u1eadt kh\u1ea9u c\u1ee7a b\u1ea1n kh\u00f4ng bao gi\u1edd h\u1ebft h\u1ea1n.<\/li><li>T\u00e0i kho\u1ea3n n\u00e0y h\u1ed7 tr\u1ee3 m\u00e3 h\u00f3a Kerberos AES 256-bit.<\/li><\/ul>\n\n\n\n<p class=\"is-style-icon_pen wp-block-paragraph\"><span class=\"swl-fz u-fz-xs\">Nh\u01b0 m\u00f4 t\u1ea3 b\u00ean d\u01b0\u1edbi <code>ktpass<\/code> \u0110\u1ec3 ch\u1ec9 \u0111\u1ecbnh AES256-SHA1, b\u1ea1n c\u1ea7n b\u1eadt h\u1ed7 tr\u1ee3 m\u00e3 h\u00f3a AES 256-bit. N\u1ebfu kh\u00f4ng ch\u1ec9 \u0111\u1ecbnh, n\u00f3 s\u1ebd m\u1eb7c \u0111\u1ecbnh s\u1eed d\u1ee5ng RC4, lo\u1ea1i m\u00e3 h\u00f3a n\u00e0y s\u1ebd b\u1ecb lo\u1ea1i b\u1ecf trong t\u01b0\u01a1ng lai do c\u00e1c l\u1ed7 h\u1ed5ng b\u1ea3o m\u1eadt.<\/span><\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-column\">\n<figure class=\"wp-block-image size-full is-resized is-style-border\"><img decoding=\"async\" src=\"https:\/\/chat-messenger.com\/wp-content\/uploads\/2026\/03\/image-4.png\" alt=\"\" class=\"wp-image-12586\" width=\"379\" height=\"189\"\/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img decoding=\"async\" src=\"https:\/\/chat-messenger.com\/wp-content\/uploads\/2026\/03\/image-7.png\" alt=\"\" class=\"wp-image-12613\" width=\"312\" height=\"387\"\/><\/figure>\n<\/div>\n<\/div>\n\n\n\n<h4 class=\"wp-block-heading\">\u0110\u0103ng k\u00fd SPN b\u1eb1ng t\u00e0i kho\u1ea3n d\u1ecbch v\u1ee5 c\u1ee7a b\u1ea1n.<\/h4>\n\n\n\n<div class=\"hcb_wrap\" data-no-translation=\"\"><pre class=\"prism line-numbers lang-plain\"><code>setspn -S HTTP\/test.chat-messenger.com CAMTEST\\cam-svc<\/code><\/pre><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">Ch\u00fang t\u00f4i s\u1ebd \u0111\u0103ng k\u00fd SPN b\u1eb1ng t\u00e0i kho\u1ea3n d\u1ecbch v\u1ee5 \u0111\u00e3 t\u1ea1o \u1edf tr\u00ean.<\/p>\n\n\n\n<p class=\"is-style-crease wp-block-paragraph\">B\u1ea5t k\u1ef3 thi\u1ebft b\u1ecb n\u00e0o \u0111\u01b0\u1ee3c k\u1ebft n\u1ed1i v\u1edbi mi\u1ec1n \u0111\u1ec1u \u0111\u01b0\u1ee3c ch\u1ea5p nh\u1eadn. Tuy nhi\u00ean, c\u1ea7n c\u00f3 quy\u1ec1n qu\u1ea3n tr\u1ecb vi\u00ean mi\u1ec1n.<br>\u2022 SPN c\u0169ng \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng trong giao ti\u1ebfp HTTPS.<code>HTTP\/t\u00ean m\u00e1y ch\u1ee7<\/code>B\u1ea1n ph\u1ea3i \u0111\u0103ng k\u00fd theo m\u1eabu n\u00e0y.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">S\u1eed d\u1ee5ng l\u1ec7nh sau \u0111\u1ec3 x\u00e1c minh r\u1eb1ng SPN \u0111\u00e3 \u0111\u01b0\u1ee3c \u0111\u0103ng k\u00fd.<\/p>\n\n\n\n<div class=\"hcb_wrap\" data-no-translation=\"\"><pre class=\"prism line-numbers lang-plain\"><code>setspn -L CAMTEST\\cam-svc<\/code><\/pre><\/div>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"keytab\">T\u1ea1o keytab<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u0110\u1ec3 cho ph\u00e9p CAMServer x\u00e1c th\u1ef1c v\u00e9 Kerberos, h\u00e3y t\u1ea1o t\u1ec7p keytab cho t\u00e0i kho\u1ea3n d\u1ecbch v\u1ee5. Ch\u1ea1y l\u1ec7nh sau tr\u00ean m\u00e1y ch\u1ee7 qu\u1ea3n l\u00fd Active Directory:<\/p>\n\n\n\n<div class=\"hcb_wrap\" data-no-translation=\"\"><pre class=\"prism line-numbers lang-plain\"><code>ktpass \/out CAMServer\\config\\windowsAuth\\cam.keytab \/princ HTTP\/test.chat-messenger.com@CAMTEST.COM \/mapuser CAMTEST\\cam-svc \/ptype KRB5_NT_PRINCIPAL \/crypto AES256-SHA1 \/pass &quot;*******&quot;<\/code><\/pre><\/div>\n\n\n\n<p class=\"is-style-icon_info wp-block-paragraph\">- \/out: T\u1ea1o m\u1ed9t th\u01b0 m\u1ee5c c\u00f3 t\u00ean windowsAuth v\u00e0 xu\u1ea5t ra t\u1ec7p CAMServer\\config\\windowsAuth\\cam.keytab.<br>\/princ: HTTP\/ \u0110\u1ecbnh d\u1ea1ng nh\u01b0 sau: @&lt;t\u00ean mi\u1ec1n vi\u1ebft hoa&gt;<br>- M\u1eadt kh\u1ea9u \u0111\u01b0\u1ee3c ch\u1ec9 \u0111\u1ecbnh trong \/pass: ph\u1ea3i l\u00e0 m\u1eadt kh\u1ea9u c\u1ee7a t\u00e0i kho\u1ea3n d\u1ecbch v\u1ee5.<br>N\u1ebfu b\u1ea1n thay \u0111\u1ed5i m\u1eadt kh\u1ea9u t\u00e0i kho\u1ea3n d\u1ecbch v\u1ee5, b\u1ea1n s\u1ebd c\u1ea7n t\u1ea1o l\u1ea1i t\u1ec7p keytab.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">C\u00e0i \u0111\u1eb7t CAMServer<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u0110\u1ec3 s\u1eed d\u1ee5ng x\u00e1c th\u1ef1c Windows, h\u00e3y th\u00eam \u0111o\u1ea1n m\u00e3 sau v\u00e0o t\u1ec7p c\u1ea5u h\u00ecnh CAMServer (boot.ini). Vui l\u00f2ng thay th\u1ebf t\u1eebng gi\u00e1 tr\u1ecb cho ph\u00f9 h\u1ee3p v\u1edbi m\u00f4i tr\u01b0\u1eddng c\u1ee7a b\u1ea1n.<\/p>\n\n\n\n<div class=\"hcb_wrap\" data-no-translation=\"\"><pre class=\"prism line-numbers lang-plain\"><code># Kerberos \u30ec\u30eb\u30e0\uff08\u901a\u5e38\u306f Active Directory \u30c9\u30e1\u30a4\u30f3\u540d\u3092\u5927\u6587\u5b57\u3067\u6307\u5b9a\uff09\n# \u4f8b: camtest.com \u30c9\u30e1\u30a4\u30f3 \u2192 CAMTEST.COM\ncam.windowsAuth.realm=CAMTEST.COM\n\n# Windows\u8a8d\u8a3c\u3092\u884c\u3046FQDN\ncam.windowsAuth.FQDN=test.chat-messenger.com\n\n# Kerberos KDC\n# \u901a\u5e38\u306f Active Directory \u306e\u30c9\u30e1\u30a4\u30f3\u30b3\u30f3\u30c8\u30ed\u30fc\u30e9\u306eFQDN\u3002\u30dd\u30fc\u30c8TCP\/UDP 88 \u306f Kerberos \u6a19\u6e96\u30dd\u30fc\u30c8\u3067\u30ea\u30c3\u30b9\u30f3\u3055\u308c\u3066\u3044\u308b\ncam.windowsAuth.kdc=ad.camtest.com:88\n<\/code><\/pre><\/div>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"internet-options-settings\">C\u00e0i \u0111\u1eb7t T\u00f9y ch\u1ecdn Internet<\/h3>\n\n\n\n<div class=\"wp-block-columns\">\n<div class=\"wp-block-column\">\n<h4 class=\"wp-block-heading\">Th\u00eam t\u00ean mi\u1ec1n \u0111\u1ea7y \u0111\u1ee7 (FQDN) c\u1ee7a CAMServer v\u00e0o v\u00f9ng intranet. <\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Ch\u1ecdn T\u00f9y ch\u1ecdn Internet, nh\u1ea5p v\u00e0o tab &quot;B\u1ea3o m\u1eadt&quot; v\u00e0 ch\u1ecdn &quot;M\u1ea1ng n\u1ed9i b\u1ed9 c\u1ee5c b\u1ed9&quot;. Nh\u1ea5p v\u00e0o n\u00fat &quot;Trang web&quot;, ch\u1ecdn &quot;N\u00e2ng cao&quot; v\u00e0 th\u00eam URL c\u1ee7a trang web (https:\/\/test.chat-messenger.com).<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">X\u00e1c minh \u0111\u0103ng nh\u1eadp t\u1ef1 \u0111\u1ed9ng. <\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Nh\u1ea5p v\u00e0o &quot;T\u00f9y ch\u1ec9nh c\u1ea5p \u0111\u1ed9&quot;, sau \u0111\u00f3 trong ph\u1ea7n &quot;X\u00e1c th\u1ef1c ng\u01b0\u1eddi d\u00f9ng&quot; \u2192 &quot;\u0110\u0103ng nh\u1eadp&quot;, h\u00e3y \u0111\u1ea3m b\u1ea3o r\u1eb1ng t\u00f9y ch\u1ecdn &quot;T\u1ef1 \u0111\u1ed9ng \u0111\u0103ng nh\u1eadp v\u00e0o v\u00f9ng m\u1ea1ng n\u1ed9i b\u1ed9&quot; \u0111\u01b0\u1ee3c ch\u1ecdn.<\/p>\n\n\n\n<p class=\"is-style-icon_pen wp-block-paragraph\"><span class=\"swl-fz u-fz-s\">Thi\u1ebft l\u1eadp n\u00e0y l\u00e0 b\u1eaft bu\u1ed9c \u0111\u1ed1i v\u1edbi t\u1ea5t c\u1ea3 c\u00e1c thi\u1ebft b\u1ecb \u0111\u1ea7u cu\u1ed1i c\u1ee7a ng\u01b0\u1eddi d\u00f9ng C&amp;M, nh\u01b0ng c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c qu\u1ea3n l\u00fd t\u1eadp trung b\u1eb1ng B\u1ea3ng \u0111i\u1ec1u khi\u1ec3n qu\u1ea3n l\u00fd ch\u00ednh s\u00e1ch nh\u00f3m.<\/span><\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-column\">\n<figure class=\"wp-block-image size-full is-resized is-style-border\"><img decoding=\"async\" src=\"https:\/\/chat-messenger.com\/wp-content\/uploads\/2025\/01\/image-9.png\" alt=\"\" class=\"wp-image-11464\" width=\"279\" height=\"214\"\/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full is-resized is-style-border\"><img decoding=\"async\" src=\"https:\/\/chat-messenger.com\/wp-content\/uploads\/2025\/01\/image-10.png\" alt=\"\" class=\"wp-image-11465\" width=\"247\" height=\"309\"\/><\/figure>\n<\/div>\n<\/div>\n\n\n\n<h2 class=\"wp-block-heading\">Di chuy\u1ec3n t\u1eeb SSO s\u1eed d\u1ee5ng x\u00e1c th\u1ef1c Windows t\u00edch h\u1ee3p trong IIS<\/h2>\n\n\n\n<ol class=\"wp-block-list\"><li>G\u1ee1 c\u00e0i \u0111\u1eb7t ch\u1ee9c n\u0103ng IIS (Tr\u00ecnh qu\u1ea3n l\u00fd m\u00e1y ch\u1ee7 &gt; Qu\u1ea3n tr\u1ecb &gt; G\u1ee1 b\u1ecf vai tr\u00f2 v\u00e0 t\u00ednh n\u0103ng)<\/li><li>G\u1ee1 c\u00e0i \u0111\u1eb7t g\u00f3i l\u01b0u tr\u1eef ASP.NET Core<\/li><li>T\u00e0i kho\u1ea3n d\u1ecbch v\u1ee5 l\u00e0<a href=\"https:\/\/chat-messenger.com\/vi\/thu-cong\/may-chu-camera\/xac-thuc-windows\/#serviceAccounts\" data-type=\"post\">T\u00e0i kho\u1ea3n n\u00e0y h\u1ed7 tr\u1ee3 m\u00e3 h\u00f3a Kerberos AES 256-bit.<\/a>&quot;ki\u1ec3m tra<\/li><li><a href=\"https:\/\/chat-messenger.com\/vi\/thu-cong\/may-chu-camera\/xac-thuc-windows\/#keytab\" data-type=\"post\">keytab <\/a>t\u1ea1o n\u00ean<\/li><li>Trong ph\u1ea7n c\u00e0i \u0111\u1eb7t T\u00f9y ch\u1ecdn Internet, h\u00e3y th\u00eam t\u00ean mi\u1ec1n \u0111\u1ea7y \u0111\u1ee7 (FQDN) c\u1ee7a CAMServer v\u00e0o v\u00f9ng M\u1ea1ng n\u1ed9i b\u1ed9 (n\u1ebfu ch\u01b0a \u0111\u01b0\u1ee3c th\u00eam).<\/li><li>\u00a0N\u1ebfu b\u1ed9 c\u00e2n b\u1eb1ng t\u1ea3i \u0111\u01b0\u1ee3c k\u1ebft n\u1ed1i v\u1edbi CAMServer \u1edf l\u1edbp L7, h\u00e3y \u0111\u1eb7t ch\u1ee9ng ch\u1ec9 SSL tr\u00ean CAMServer v\u00e0 k\u1ebft n\u1ed1i \u1edf l\u1edbp L4.<\/li><\/ol>","protected":false},"excerpt":{"rendered":"<p>\u6982\u8981 Active Directory \u74b0\u5883\u3067\u306f\u3001\u7d71\u5408 Windows \u8a8d\u8a3c\uff08Kerberos\uff09 \u3092\u5229\u7528\u3059\u308b\u3053 [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"swell_btn_cv_data":"","footnotes":""},"categories":[17],"tags":[],"class_list":["post-12579","post","type-post","status-publish","format-standard","hentry","category-camserver"],"_links":{"self":[{"href":"https:\/\/chat-messenger.com\/vi\/wp-json\/wp\/v2\/posts\/12579","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/chat-messenger.com\/vi\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/chat-messenger.com\/vi\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/chat-messenger.com\/vi\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/chat-messenger.com\/vi\/wp-json\/wp\/v2\/comments?post=12579"}],"version-history":[{"count":10,"href":"https:\/\/chat-messenger.com\/vi\/wp-json\/wp\/v2\/posts\/12579\/revisions"}],"predecessor-version":[{"id":12676,"href":"https:\/\/chat-messenger.com\/vi\/wp-json\/wp\/v2\/posts\/12579\/revisions\/12676"}],"wp:attachment":[{"href":"https:\/\/chat-messenger.com\/vi\/wp-json\/wp\/v2\/media?parent=12579"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/chat-messenger.com\/vi\/wp-json\/wp\/v2\/categories?post=12579"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/chat-messenger.com\/vi\/wp-json\/wp\/v2\/tags?post=12579"}],"curies":[{"name":"trang web","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}