ASA & LDAP Authorization

markbialik — Sun, 10 Mar 2019 21:49:26 GMT

Hello:

I have a LDAP server configured and authentication working just fine. My next goal is to provide SSL VPN services to some employees. Their Tunnel Group membership should depend upon their LDAP 'group' membership.

For example, our LDAP administrator has configured user entries like this:

dn: uid=jdoe,ou=People,o=company.com

givenName: John

sn: Doe

mail: jdoe@company.com

objectClass: top

objectClass: person

objectClass: organizationalPerson

objectClass: inetOrgPerson

objectClass: inetorgpersonsub1

uid: jdoe

cn: John Doe

description: Employee

description: Information Systems

He seems to like to use 'description' instead of OU for some reason, but that's out of my control. I assume I need to perform some sort of LDAP Attribute mapping to make this happen.

In the above example, I would like to create a Tunnel Group called 'IS' on the ASA, and if a user has 'description: Information Systems' in the ir LDAP, they would be mapped to the 'IS' tunnel group.

Can someone shed some light?

Thanks!

Mark

Re: ASA & LDAP Authorization

wong34539 — Wed, 08 Nov 2006 20:47:59 GMT

The SSL VPN Client (SVC) is a VPN tunneling technology that gives remote users the benefits of an IPSec VPN client without the need for network administrators to install and configure IPSec VPN clients on remote computers. REfer URL for SSL VPN Servies

http://www.cisco.com/en/US/products/ps6120/products_configuration_guide_chapter09186a0080565910.html

topic ASA & LDAP Authorization in Network Access Control

ASA & LDAP Authorization

Re: ASA & LDAP Authorization