Solved: WebVPN Group Policy Mapping based on username not LDAP Group?

marcosgeorgopoulos · ‎07-18-2010

Hi guys,

As the title suggests I am looking for a way to map users who authenticate via LDAP to webvpn to a particular group policy.

The reason I want to do this, is to assign particular cifs on a per user basis. I know you can map an LDAP group to a group policy, but all of the user are in the same group. ( I cannot change this fact).

So I was wondering if there is a way to map a "username" who authenticates via LDAP to a group policy?

cheers.

Antonio Knox · ‎07-19-2010

Perhaps this is what you are looking for:

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a008089149d.shtml

It's similar to using RADIUS attribute 25, but for LDAP. Read through it carefully and you should find the solution.

Please rate helpful posts.

View solution in original post

Antonio Knox · ‎07-19-2010

Perhaps this is what you are looking for:

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a008089149d.shtml

It's similar to using RADIUS attribute 25, but for LDAP. Read through it carefully and you should find the solution.

Please rate helpful posts.

marcosgeorgopoulos · ‎07-21-2010

Excellent. Thanks!