Configure the ACS 5.1 appliance to connect to the AD

[Boonkiat Tanomwongtana]

Pls advise.

This is a new installation.I did to configure the ACS to connect to the AD to authenticate users and retrieve the user information for group mapping as following step.

Go to Users and Identity Stores > External Identity Stores > Active Directory, and enter the domain

name and provide a username/password that will allow connect to the domain.Next, click on the Test Connection button to validate joining the domain.

I got success test connection. But when I click Save Changes. I got error .

How the problem is fixed ?

Best Regards

Boonkiat

[Nicolas Darchis · Accepted solution]

It can be numerous things.

How many DCs do you have in your domain ? Are they all reachable by ACS ?

Are you returning SRV records for your AD ?

[Boonkiat Tanomwongtana]

Dear Sir

There are 2 DCs in network. But some are reachable by ACS.

I am not sure for returning SRV records.

Pls advise.

Thank you

Boonkiat

[Nicolas Darchis]

Well you need to find it out (about the srv records). That's the expected operation of AD.

I can also think that maybe the ACS user account in AD doesn't have the needed permissions as stated in config guides ?

If you still have problems despite that, in-depth troubleshooting needs to be done and best done through a TAC case.

Nicolas

[Boonkiat Tanomwongtana]

Dear Nicolas

I will open TAC case as your suggestion.

Thank you very much for your advice.

[Vinay Sharma]

Hello Boonkiat,

I am glad Nicolas was able to provide you the information. Just to inform you that Nicolas is presentaing a LIVE webcast on Cisco Wireless CleanAir.

https://supportforums.cisco.com/videos/2296

Please register and get more info from Nicolas.

Thanks,

Vinay Sharma

Community Manager - Wireless

Cisco Support Community