Cisco 2509 - Router - EN User Manual page 433

Chapter 11 Working with User Databases
o=corporation.com
dc=corporation,dc=com
ou=
o=corporation.com
dc=corporation,dc=com
78-14696-01, Version 3.1
If the tree containing users is the base DN, type:
or
as applicable to your LDAP configuration. For more information, refer to
your LDAP database documentation.
– Group Directory Subtree—The DN for the subtree that contains all
groups. For example:
organizational unit
[,ou=
If the tree containing groups is the base DN, type:
or
as applicable to your LDAP configuration. For more information, refer to
your LDAP database documentation.
UserObjectType—The name of the attribute in the user record that
–
contains the username. You can obtain this attribute name from your
Directory Server. For more information, refer to your LDAP database
documentation. Cisco Secure ACS provides default values that reflect
the default configuration of a Netscape Directory Server. Confirm all
values for these fields with your LDAP server configuration and
documentation.
UserObjectClass—The value of the LDAP "objectType" attribute that
–
identifies the record as a user. Often, user records have several values for
the objectType attribute, some of which are unique to the user, some of
which are shared with other object types. This box should contain a value
that is not shared.
– GroupObjectType—The name of the attribute in the group record that
contains the group name.
– GroupObjectClass—A value of the LDAP "objectType" attribute in the
group record that identifies the record as a group.
next organizational unit
User Guide for Cisco Secure ACS for Windows Server
Generic LDAP
]o=corporation.com
11-25