Understanding Fallback Options For Non-Acs Mode; Setting The Login Module To Acs - Cisco CISCOWORKS COMMON SERVICES 3.0 User Manual

Chapter 3 Configuring the Server

Understanding Fallback Options for Non-ACS mode

Setting the Login Module to ACS

78-16571-01
Fallback options allow you to access the software if the login module fails, or you
accidentally lock yourself or others. There are three login module fallback
options. These are available on all platforms. The
Table 3-2 Login Module Fallback Options
Option
Allow all CiscoWorks Local users to
fall back to the CiscoWorks Local
login.
Allow only the following user(s) to fall
back to the CiscoWorks Local login if
preceding login fails: username.
Allow no fall backs to the CiscoWorks
Local login.
The Login Module determines the type of authentication and authorization
Common Services uses. By default, the login module is set to local authentication
and authorization.
You can change this default value to use Cisco Secure ACS for user
authentication and authorization.
When you change login module to ACS ensure that:
The CiscoWorks Server is added as an AAA client in the ACS server. For the
•
first time, it can be done at the Network Configuration UI in ACS server. You
can add the host (with IP Address), and configure the secret key there.
The same secret key should be entered in the AAA Mode Setup dialog box.
The username you enter while logging in to CiscoWorks is a valid ACS user
•
name. In ACS mode, authentication takes place from the ACS server.
Setting the Login Module to ACS
Table 3-2
Description
All users can access CiscoWorks using
the Local login if the current login
module fails.
Specified users can access CiscoWorks
using the Local login if the current
login module fails. Use commas
between user names.
No access is allowed if the current
login module fails.
User Guide for CiscoWorks Common Services
gives details:
3-35