External Auth: LDAP or Windows database?

[dmoorefnlc]

ACS 3.3.x. What is the diff between setting up ACS to use AD info via Ldap or Window database? All I want is for ACS to pass groups, users and password auth info to certain devices. Did a search but not much turned up. the userguide isn't full of suggestions or examples. I want to create a group in AD called VPN, and have that group allow people to use a vpn provided they are in that group and the group exists on the VPN device.

thanks

[didyap]

The various password protocols supported by CiscoSecure ACS for authentication are supported unevenly by the various databases supported by CiscoSecure ACS.

http://www.cisco.com/univercd/cc/td/doc/product/access/acs_soft/csacsapp/csapp32/user/o.htm#wp377221

[andrewclymer]

If you use LDAP to authenticate with AD then you can only do PAP style authentications.

If you wish to use MSCHAP you will need to access AD via the Windows Database.