TACACS+ on ACS 5.1 and LDAP

HaikoHertes · ‎01-15-2010

Hey Guys,

I've set up a ACS 5.1 Server an want to use it with our LDAP System. Therefor, I'm trying to login to a Cisco 1841 by using my LDAP Account, but it dosent work. The ACS seems not to know that it should use LDAP, because I get:

"22056 Subject not found in applicable identity stores"

LDAP is configured as Identitiy Store, the bind test works successfully and I created a sequence, where LDAP is at first position. What goes wron?? (TATACS for loal ACS Users works)

Kent Heide · ‎01-16-2010

I had problems with this on 5.0, but haven't tried on 5.1. I will check it now and post back.

dcmgash · ‎01-16-2010

Hi Haiko,

Did you select the store in the Identity Policy for the service?

(Access Policies/Access Services//Identity

By default the "Internal Users" store is set, you can configure it to go either to your LDAP store directly, or to the identity Sequence you have created.

Steve W · ‎03-22-2013

Thank you dcmgash, this resolved my issue!