ACS 3.3 windows external database authentication

[j.schell]

Hi,

We use Aironet 1210, ASC 3.3 Radius Server, LEAP authentication and we trust the Active Directory for the username and password.

ACS is installed on the Domain Controller CC. We can authenticate users from the domain CC but we cannot authenticate user from other domains like DD. The trust relation ship works well between them.

In the installation guide of ACS, they talk about a computer account CISCO wich has to be present in all the domain.

That step isn't clear to us.

Is someone can explain that more precisely ?

Thanks

[dimitri.smit]

yes you do need to create the CISCO computer account in all windows domains that you want user accounts to be authenticated against.

Just open up AD Users+Computers, and add the CISCO computer in the default 'computers' folder.

I trust that you see all your necessary domains in "ACS Windows User database configuration"?

Do you have a 1-way or 2-way trust between the dmns?