ACS 5.2 integration with LDAP for user authentication.

[Sreejith Vanjipattu]

Hi All,

While configuring LDAP , I got struck in  “Step 3 - Directory Organization”. Could anyone tell me how to make this work?
My aim is to make users authenticated from their windows domain usernames and passwords while they login to AAA clients.

[Patrick Tran]

Hi,

This configuration could be fine if you use Active Directory

Subject Objectclass: Person

Subject Name Attribute: sAMAccountName (if you want to use username as login@domain : use UserPrincipalName)

Group Objectclass: Group

Group Map Attribute: memberOf

Subject Objects Contain Reference To Groups (if you want to check authorization with LDAP groups)

Subject Search Base: Your base DN (DC=CISCO, DC=COM for example)

Group Search Base: Your base DN (DC=CISCO, DC=COM for example)

Other fields are optionals.

HTH,

Patrick