topic Cisco ACS 4.2 integration with Active Directory in Network Access Control

Cisco ACS 4.2 integration with Active Directory

Junior Mateus — Mon, 11 Mar 2019 02:14:47 GMT

Hello,

I´m new in the administration of ACS, we have recently implemented on server ACS version 4.2

for manager all users authorization for our Network.

We are in one environement which have an Active Directory, group and users.

Now, i´m just able to creat a new user in ACS and work with on the Client SWITCH, what i need to do, is to integrate my ACS 4.2 with Active Directory.

for work with the user and Group that a register in my AD.

Someon can help me please?

Cisco ACS 4.2 integration with Active Directory

gouravbathla — Wed, 27 Jun 2012 09:49:02 GMT

If you are using windows server for installation of acs 4.2 you just need to make this server a member of domain.

Re: Cisco ACS 4.2 integration with Active Directory

Junior Mateus — Wed, 27 Jun 2012 10:03:10 GMT

Yes, i already did it,

But what i want now, is that from my ACS to see the user that are in the AD groups.

And then i´ll work with this User for AAA or other service,

Do you know how can i perform that?

Message was edited by: Junior Mateus

Re: Cisco ACS 4.2 integration with Active Directory

Jatin Katyal — Wed, 27 Jun 2012 11:36:06 GMT

You can't actually see the user's membership from ACS. All you can do, create group-mapping under external database >> group mapping section. This would give you an option to map external (AD) group with an Internal group.The group memberrship need to be modified under Active Directory.

Once user is succussfully authenticated and learned as a dynamic user in ACS user setup database, it would be mapped with an ACS internal group based on group mapping we did.

Let me know if you have any doubts.

Regards,

Jatin

Cisco ACS 4.2 integration with Active Directory

gouravbathla — Wed, 27 Jun 2012 11:44:52 GMT

No We can't see users in group.

We only have groups to play with.

Cisco ACS 4.2 integration with Active Directory

Junior Mateus — Wed, 27 Jun 2012 16:29:37 GMT

But how from Active Directory can i configure this membership, this mean, that i can from active directory add a user on this group that i will mapp on the ACS, and the authentication will work ?

I finish to mapp a group on the external database, i can see the group of my AD, but i can´t work with the user that i add into the AD group?

Should i perform another step?