Turning Off External User Database Authentication - Cisco Servers User Manual

Chapter 12 Administering External User Databases
Step 3
Step 4
Step 5

Turning off External User Database Authentication

Step 1
Step 2
78-13751-01, Version 3.0
To deny authentication requests for any unknown user, select the Fail the attempt
option.
To allow authentication requests for unknown users, follow these steps:
Select the Check the following external user databases option.
a.
For each database you need Cisco Secure ACS to use when attempting to
b.
authenticate unknown users, select the database in the External Databases list
and click —> (right arrow button) to move it to the Selected Databases list.
To remove a database from the Selected Databases list, select the database,
and then click <— (left arrow button) to move it back to the External
Databases list.
To assign the order in which Cisco Secure ACS should use the selected
c.
external databases when attempting to authenticate an unknown user, click a
database name in the Selected Databases list and click Up or Down to move
it into the position you want.
d. Repeat Steps a through c until the selected databases are in the order needed.
Click Submit.
Result: Cisco Secure ACS saves and implements the Unknown User Policy
configuration you created. Cisco Secure ACS attempts to authenticate unknown
users using the databases in the order listed in the Selected Databases list.
You can configure Cisco Secure ACS so that users who are not in the
Cisco Secure ACS database are not permitted to authenticate.
To turn off external user database authentication, follow these steps:
In the navigation bar, click External User Databases.
Click Unknown User Policy.
Cisco Secure ACS 3.0 for Windows 2000/NT Servers User Guide
Unknown User Processing
12-9