Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
561
Views
0
Helpful
1
Replies

it is possible to map each user in AAA to CN field located in certificat?

saad_filali
Level 1
Level 1

‎02-25-2010 08:30 AM - edited ‎03-10-2019 04:58 PM

hello

I am using certificate for VPN remote access.

it is possible to map each user in AAA to CN field located in certificat?

thank you for your help

Labels:
0 Helpful
1 Reply 1

Erick Delgado
Level 1
Level 1

‎03-03-2010 06:17 AM

Hi,

Please see this configuration example.

ldap attribute-map memberOf
  map-name  memberOf IETF-Radius-Class
  map-value memberOf CN=VPN,CN=Users,DC=cisco,DC=com CAC-Users

aaa-server LDAP protocol ldap
aaa-server LDAP (outside) host 192.168.250.27
ldap-base-dn DC=cisco,DC=com
ldap-scope subtree
ldap-naming-attribute sAMAccountName
ldap-login-password *
ldap-login-dn CN=asaldap,CN=Users,DC=cisco,DC=com
server-type microsoft
ldap-attribute-map memberOf

tunnel-group vpnclient type remote-access
tunnel-group vpnclient general-attributes
address-pool VPN
authorization-server-group LDAP
authorization-required
username-from-certificate CN
tunnel-group vpnclient ipsec-attributes
trust-point LDAP
isakmp ikev1-user-authentication none

group-policy CAC-Users internal
group-policy CAC-Users attributes
dns-server value 192.168.250.27
split-tunnel-policy tunnelspecified
split-tunnel-network-list value split

If you have any question let me know.

0 Helpful
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Customers Also Viewed These Support Documents