Jennifer,
Below is a procedure which may help resolve your issue.
Regards,
Mike Korenbaum
Cisco Data Center PDI Help Desk
http://www.cisco.com/go/pdihelpdesk
Configuring Auto-Assignment of User Roles for WAAS with TACACS+ Authentication
This document describes how to automatically assign roles to users existing on an external user database. The level of access is based on the role assigned to user groups existing in the WAAS central manager.
It is possible to authenticate and assign roles to users existing in an external user database such as a TACACS+ server user DB. The user does not have to be defined directly in the CM.
For this to work, a user group has to be created in the CM and the desired role needs to be assigned to that same user group.
The following figure shows a user group ‘testgroup’ with three different roles assigned, including the ‘admin’ role.
A user group with the same name needs to be created in the ACS server, along with the respective users that will need to authenticate to WAAS CM and WAAS application accelerator devices.
In the ACS server, the user needs to be associated with the specific group and a custom AV pair (Attribute Value pair) has to be added in the custom attributes field of the user setup page.
The next figure shows the user ‘rjavier’ as being associated with the ‘testgroup’ group in ACS:
The next figure shows the custom AV pair being added to the custom attributes field in the user setup page:
In the above figure, ‘waas_rbac_groups’ is a custom AV pair used to specify the associated group name for each user in the TACACS+ user database or configuration file.
For each user, use the ‘waas_rbac_groups’ custom AV pair to list the user groups they belong to. Separate each group from the next with a comma as in the following example.
Waas_rbac_groups=groupname1,groupname2,and so on…
