LDAP and WLC

[ahurtadove]

Hi!

I'm kind of new in this type of implementation and I would like to know how would I configure that network users can authenticate with their own username and password from LDAP but through a TACACS+ or RADIUS, so the client would not supplicate directly to the LDAP but to the RADIUS or TACACS which would be the one that directly "asks" the user database. Also when this is configured how would I associate this type of authentication to the WLAN.

Thank you                  

[Amjad Abdullah]

Antonio:
What you ask is a radius server specification. You need to look into a radius server that supports your LDAP server and that piece of configuration is done on the radius server, not on the WLC.

On the WLC what you do is configure normal radius server ip address and shared secret and the WLC will communicate with the radius server. Now, when the radius server receives the request it should be configured to do a request to the LDAP server and check the credentials on an external LDAP DB, not in local users.

HTH

Amjad