custom ldap attributes on acs

[ocram12345]

Hi, I'm wondering if the acs can in some way read a custom per-user attribute that the ldap server is sending. As far as I know the attributes are only per-group, because the acs asks the ldap server about certain user id and the server looks for the group, replying with the attributes of that group.

Any ideas?

[harvisin]

Hello,

My this link help you out:-

http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_system/5.2/user/guide/users_id_stores.html

[Jatin Katyal]

Hi Ocram,

I was going through your post and just want to know what is your end goal. What ACS version are you using?

If you want to use ldap-attribute map with ASA for VPN users this can even work better without ACS.

Regards,

Jatin

*Do rate helpful posts*