Cisco NAC V4.7 LDAP Mapping users to certain Roles

[yasmena_adel]

i jave a problem on using the LDAP mapping to certain users roles , as using the active directory as SSO service and use the LDAP-Look UP  sever for the map function and i need to ask abput the diffrence between the Auth Sever -LDAP Server and the LDAP-Look UP server and if there is a way tpo map with the LDAP Server and as using the LDAP-Look UP server , how to set the users notto

[Lauren Sullivan]

Hi Yasmena,

Basically you can use the same configuration for an LDAP authentication server as an LDAP lookup servr - the differences are that one is used for authentication (which you are already doing by using AD SSO) and one is for mapping purposes.  So, if you're having problems with the mapping portion, you can duplicate the LDAP server and mappings as an authentication server, and then use the Auth Test to see what you're being mapped to.

Thanks,

Lauren