AAA ldap Active directory

[pavel.sazonov]

I'm searching for any good example or mb article, how to use microsoft active directory servers as aaa ldap server, becouse as I understood it's seems possible, without any radius server from now. If anyone can help me, mb someone done this and have config? I will be grateful for any help.

[Bastien Migette]

Hello Pavel,

By default, you can use a microsoft AD via LDAP. For example, I use softerra's LDAP Browser which is a free tool, and I can browse my AD Servers with the following connection strings (assuming my domain is wlaaan2003.com):

Base DN: DC=wlaaan2003,DC=com

Authentication user principle name: cn=administrator,CN=Users,DC=wlaaan2003,dc=com

Password: Active directory password for my administrator account.

Make sure you have port TCP 389 opened.

I hope this helps.

[pavel.sazonov]

I already found solution with help of cisco support. I mean cisco ios 15.3, 1921 router. All magic begins with this ldap server config:

ldap attribute-map admap

map type sAMAccountName username

!

ldap server dc01

ipv4 10.0.0.1

attribute map admap

bind authenticate root-dn adminlogin password adminpassword

base-dn dc=mydomain,dc=local

Now a problem is to understand, how to use groups, my current config gives MemberOf ldap to supplicant-group

conformity.