Cisco 2509 - Router - EN User Manual page 432

Generic LDAP
ou=
User Guide for Cisco Secure ACS for Windows Server
11-24
For example, if the delimiter character is "\" and the username is
"DOMAIN\echamberlain", Cisco Secure ACS submits "echamberlain"
to an LDAP server.
Note The X box cannot contain the following special characters:
# ? " * > <
Cisco Secure ACS does not allow these characters in usernames;
therefore, if any of these characters are in the X box, stripping fails.
Strip ending characters through the first Y character—When
–
"Process all usernames after stripping domain name and delimiter" is
selected, this option specifies that Cisco Secure ACS attempts to strip a
suffixed domain qualifier. If, in the username, Cisco Secure ACS finds
the delimiter character that is specified in the Y box, it strips all
characters from the delimiter character through the end of the username.
If the username contains more than one of the character specified in the
Y box, Cisco Secure ACS strips characters starting with the first
occurrence of the delimiter character.
For example, if the delimiter character is "@" and the username is
"jwiedman@domain", then Cisco Secure ACS submits "jwiedman" to an
LDAP server.
The X box cannot contain the following special characters:
Note
# ? " * > <
Cisco Secure ACS does not allow these characters in usernames;
therefore, if any of these characters are in the X box, stripping fails.
Common LDAP Configuration—This table contains options that apply to
•
all LDAP authentication performed using this configuration.
Cisco Secure ACS uses the settings in this section regardless of whether the
authentication is handled by the primary or secondary LDAP server. This
table contains the following options:
User Directory Subtree—The distinguished name (DN) for the subtree
–
that contains all users. For example:
organizational unit
[,ou=
Chapter 11
next organizational unit
Working with User Databases
]o=corporation.com
78-14696-01, Version 3.1