beautypg.com

Cisco 3.3 User Manual

Page 530

background image

Chapter 13 User Databases

Generic LDAP

13-46

User Guide for Cisco Secure ACS for Windows Server

78-16592-01

Note

For information about domain filtering, see

Domain Filtering,

page 13-34

.

a.

Under Domain Filtering, select Process all usernames after stripping
domain name and delimiter
.

b.

If you want Cisco Secure ACS to strip prefixed domain qualifiers, select the
Strip starting characters through the last X character check box, and then
type the domain-qualifier delimiting character in the X box.

Note

The X box cannot contain the following special characters:
# ? " * > <
If any of these characters are in the X box, stripping fails.

c.

If you want Cisco Secure ACS to strip suffixed domain qualifiers, select the
Strip ending characters from the first X character check box, and then
type the domain-qualifier delimiting character in the X box.

Note

The X box cannot contain the following special characters:
# ? " * > <
If any of these characters are in the X box, stripping fails.

Step 10

Under Common LDAP Configuration, in the User Directory Subtree box, type the
DN of the tree containing all your users.

Step 11

In the Group Directory Subtree box, type the DN of the subtree containing all your
groups.

Step 12

In the User Object Type box, type the name of the attribute in the user record that
contains the username. You can obtain this attribute name from your Directory
Server. For more information, refer to your LDAP database documentation.

Note

The default values in the UserObjectType and following fields reflect the
default configuration of the Netscape Directory Server. Confirm all values
for these fields with your LDAP server configuration and documentation.