ACS AAA authorization problem on ASA

hirenparekh12 — Mon, 11 Mar 2019 02:20:03 GMT

Hi All,

i have create a one profile on PIX/ASA Command Authorization Sets & MAP with Group & Ldap with My AD. but authentication is not done as per the set parameter on command authorization in ACS.

i am using Cisco ASA 5505 & ACS 4.2.

Regards,

ACS AAA authorization problem on ASA

mauzamor — Wed, 25 Jul 2012 12:25:02 GMT

Hi there,

Authentication and Authorization are two separate things in TACACS+, before you can get to authorization you need to successfully authenticate first. Your Command Authorization settings are not related to your authentication settings.

Once you are authenticated, the ACS will use the Command Authorization information configured in your ACS group, if you are not getting assigned the right authorization profile could be because you are not getting assigned into the right ACS group which points to a Group Mapping issue, however it will be a good idea if you can share more information with us like the failed/passed authentication, in which group your Command Authorization set is configured, how is your Group Mapping configured, etc.

topic ACS AAA authorization problem on ASA in Network Access Control

ACS AAA authorization problem on ASA

ACS AAA authorization problem on ASA