Cisco 3.3 User Manual page 530

Generic LDAP
Note
a.
b.
c.
Under Common LDAP Configuration, in the User Directory Subtree box, type the
Step 10
DN of the tree containing all your users.
In the Group Directory Subtree box, type the DN of the subtree containing all your
Step 11
groups.
In the User Object Type box, type the name of the attribute in the user record that
Step 12
contains the username. You can obtain this attribute name from your Directory
Server. For more information, refer to your LDAP database documentation.
Note
User Guide for Cisco Secure ACS for Windows Server
13-46
For information about domain filtering, see
page 13-34.
Under Domain Filtering, select Process all usernames after stripping
domain name and delimiter.
If you want Cisco Secure ACS to strip prefixed domain qualifiers, select the
Strip starting characters through the last X character check box, and then
type the domain-qualifier delimiting character in the X box.
The X box cannot contain the following special characters:
Note
# ? " * > <
If any of these characters are in the X box, stripping fails.
If you want Cisco Secure ACS to strip suffixed domain qualifiers, select the
Strip ending characters from the first X character check box, and then
type the domain-qualifier delimiting character in the X box.
The X box cannot contain the following special characters:
Note
# ? " * > <
If any of these characters are in the X box, stripping fails.
The default values in the UserObjectType and following fields reflect the
default configuration of the Netscape Directory Server. Confirm all values
for these fields with your LDAP server configuration and documentation.
Chapter 13 User Databases
Domain Filtering,
78-16592-01