topic Re: ACS and two Windows Active Directory Domains in Network Access Control

ACS and two Windows Active Directory Domains

ursshared — Tue, 26 Mar 2019 00:25:43 GMT

Can one ACS server authenticate users against two different AD domains? The server is a member server of one domain. We are not able to enumerate the groups from the second domain. There is a two way trust between the domains.

Re: ACS and two Windows Active Directory Domains

Ivan Martinon — Tue, 03 Feb 2009 01:59:20 GMT

Is there a 2 way trust with the two domains, have you checked that the user that ACS uses to read and query the Domains lies on both domains and has read privileges?

Re: ACS and two Windows Active Directory Domains

frbilbrey — Thu, 05 Mar 2009 23:43:11 GMT

We authenticate multiple domains like this, We have a proxy domain that contains the acs remote agents. The proxy domain trusts the domains to be authenticated against. In ACS you will be able to see all of the domains that the proxy trusts. When you go about mapping domain groups to acs groups you have to manually add the group name. ACS can enumerate the group to authenticate users, but ACS cannot seem to traverse multiple domains during the setup phase. Hope this helps.

Bob

Re: ACS and two Windows Active Directory Domains

aneelaka — Fri, 06 Mar 2009 23:12:38 GMT

are the users in multiple groups in the multiple domains, if so mapping should be done differently than you would if users were in a single group so that users are properly mapped to a group