ACS 5.5 External User with Internal Attribute

[alek.gozali]

Hi Guys,

i'm wondering, if i using LDAP for external authentication, can i use the internal identity attribute?

for example :

i create an user X , his password type is LDAP, but the identity group is "Group 1"

can i define rules

Idenitty Group in "Group 1" permit access ?

or i need to do group mapping first?
Thanks,

Regards,
 

[jrabinow · Accepted solution]

It is possible to define an internal user whose password is taken from an external store.

In internal user definition select "Password Type" to be the LDAP database and then define the rest of the user definition, including identity groups, as desired

[alek.gozali]

@jrabinow

thanks, your answer are correct.

but, it seems i changed the identity in RADIUS / TACACS Identity with Internal Identity Sequence that refer to External Identity First,

i need to revert it back to Internal Identity.