Changing Group Set Mapping Order - Cisco 3.3 User Manual

Group Mapping by Group Set Membership
Step 6

Changing Group Set Mapping Order

Step 1
Step 2
Step 3
Step 4
Step 5
Step 6
User Guide for Cisco Secure ACS for Windows Server
16-12
Click OK in the confirmation dialog box.
Cisco Secure ACS deletes the selected external user database group mapping
configuration.
You can change the order in which Cisco Secure ACS checks group set mappings
for users authenticated by Windows, Novell NDS, and generic LDAP databases.
To order group mappings, you must have already mapped them. For more
information about creating group mappings, see
Group Mapping for Windows, Novell NDS, or Generic LDAP Groups, page
To change the order of group mappings for a Windows, Novell NDS, or generic
LDAP group mapping, follow these steps:
In the navigation bar, click External User Databases.
Click Database Group Mappings.
Click the external user database name for which you want to configure group set
mapping order.
If you are ordering Windows group set mappings, the Domain Configurations
table appears. If you are ordering NDS group set mappings, the NDS Trees table
appears. Otherwise, the Group Mappings for database Users table appears.
If you are configuring Windows group mapping order, click the domain name for
which you want to configure group set mapping order.
The Group Mappings for Domain: domainname table appears.
If you are configuring Novell NDS group set mapping order, click the name of the
Novell NDS tree for which you want to configure group set mapping order.
The Group Mappings for NDS Users table appears.
Click Order mappings.
The Order mappings button appears only if more than one group set
Note
mapping exists for the current database.
Chapter 16 User Group Mapping and Specification
Creating a Cisco Secure ACS
16-7.
78-16592-01