topic ACS 5.x: Authenticating nested LDAP groups in Network Access Control

ACS 5.x: Authenticating nested LDAP groups

Nadav — Mon, 11 Mar 2019 06:35:28 GMT

Hi everyone,

Is it possible with ACS 5.x (specifically 5.8) to authenticate ldap groups nested in other ldap groups? For example Operational_Users is an LDAP group which contains a group called Florida_Operations. Can I via LDAP integration add Operational_Users and assign it to an Access Policy, so that all the groups within it are also authenticated by this Access Policy?

Hi,

Aditya Ganjoo — Thu, 17 Mar 2016 17:36:47 GMT

Hi,

Nested groups with LDAP is not supported on ACS 5.8.

However, nested and transitive groups are supported with AD.

Regards,

Aditya

Please rate helpful posts.

Thanks Aditya!

Nadav — Fri, 18 Mar 2016 11:58:41 GMT

Thanks Aditya!

Is this documented in the white papers? I found information regarding nested groups with AD but nothing regarding nested groups with LDAP.