Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Group Mappings for Domain in the ACS external user databases

Hi gurus!

I might skipped the answer to my question in the security section of this forum. The list huge and sorry if the question is asked again.

I have a concern regarding adding mappings for Domain in the ACS external user database. The point is that every NT group has an asterisk after the comma, and the ACS documentation says:

"The asterisk (*) at the end of a group mapping indicates that the mapping applies users who belong to other groups in addition to those specified by the mapping."

Would it mean that every user who doesn't belong to the NT group in question will be successfully authenticated?

Eugene

1 REPLY
Silver

Re: Group Mappings for Domain in the ACS external user databases

The asterisk at the end of each set of groups indicates that users who are authenticated with the external user database can belong to other groups besides those in the set.

For the further description for the group mapping for the for Cisco Secure Access Control Server following guide may help you

http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.2/user/guide/GrpMap.html#wpxref41938

263
Views
0
Helpful
1
Replies
CreatePlease to create content