Radius-Based Group Specification - Cisco 2509 - Router - EN User Manual

Database Group Mappings
Step 4
Step 5
Step 6
Step 7
Step 8
Step 9

RADIUS-Based Group Specification

User Guide for Cisco Secure ACS for Windows Server
12-22
If you are configuring Windows NT/2000 group mapping order, click the domain
name for which you want to configure group set mapping order.
Result: The Group Mappings for Domain: domainname table appears.
If you are configuring Novell NDS group set mapping order, click the name of the
Novell NDS tree for which you want to configure group set mapping order.
Result: The Group Mappings for NDS Users table appears.
Click Order mappings.
The Order mappings button appears only if more than one group set
Note
mapping exists for the current database.
Result: The Order mappings for database page appears. The group mappings for
the current database appear in the Order list.
Select the name of a group set mapping you want to move, and then click Up or
Down until it is in the position you want.
Repeat Step 7 until the group mappings are in the order you need.
Click Submit.
Result: The Group Mappings for database page displays the group set mappings
in the order you defined.
For some types of external user databases, Cisco Secure ACS supports the
assignment of users to specific Cisco Secure ACS groups based upon the
RADIUS authentication response from the external user database. This is
provided in addition to the unknown user group mapping described in
Mapping by External User Database, page
specification overrides group mapping. The database types that support
RADIUS-based group specification are as follows:
• LEAP Proxy RADIUS server
CRYPTOCard token server
•
• PassGo token server
Chapter 12 Administering External User Databases
12-12. RADIUS-based group
Group
78-14696-01, Version 3.1