ACS 3.3 - External Database Users

[apepacisco]

Hi all,

I'm trying to let ,external users from a trusted domain,authenticate on the ACS via dialup.

I've configured the unknown user policy, and database mapping.

Only local users from the domain in which the ACS server is in can authenticate successfully via RAS.

External users from a trusted domain cant not, and get the following Authen-Failure-Code:" Windows domain controller not found".

The ACS can "see" all trusted domains.

ACS version is 3.3

The OS is Win2000 Server SP4.

what can i do?

[gfullage]

This is fairly common and all depends on whether the ACS server is a member server or a domain controller. In general you have far fewer permission-type problems (which this is) when ACS is installed on a DC, so if you can upgrade that server to a BDC then I would suggest you do that.

Failing that, if it's simply a member server, then follow all the instructions outlined here:

http://www.cisco.com/univercd/cc/td/doc/product/access/acs_soft/csacs4nt/acs33/install/inst02.htm#wp981718

In particular, steps 5, 6 and 7 are the most important.