title: What's the most secure way to connect to Active Directory from a DMZ?
body: <p>I got a web DMZ server, that hosts an "Extranet" ASP.NET application. I want that users should authenticate to this application using the same user and password that they use on their Windows at work. (we are using Active Directory)</p>
  
  <p>I want to know what the best way is -the most secure way - to connect from the DMZ web server to the Active Directory.</p>
  
  <p>For now I saw two possibilities:<br>
  - RODC<br>
  - LDAP Over SSL (LDAPS)</p>
  
  <p>Are there any other option you recommend? What other options should I consider? Any limitation, or potential problems with any of those solution?</p>