Configuring CSA 5.1 w/LDAP authentication

[cschear]

Has anyone configured their stand alone (non-Cisco Works 2k bundled) CSA 5.1 installations to use LDAP authentication to their Active Directory? I've been fumbling around with parameters and haven't had any success.

LDAP Configuration

------------------

Server: ldap://<serverIP>

Usersroot: dc=

Prefix: uid=

------------------

That is the unconfigured, default values in the Login Configuration option. The in-line help doesn't provide much information on getting this up and running. Do I need comma separated values for the "Prefix", such as "cn=users,dc=corp,dc=company,dc=com", etc.?

Please advise.

[drolemc]

Administrator LDAP authentication is explained here;

http://www.cisco.com/en/US/products/sw/secursw/ps5057/products_configuration_guide_chapter09186a008066e98e.html#wp994975

[cschear]

I appreciate your response, however, that information is the same as the in-line help, which I've read and found not to provide the information I'm looking for. Thanks.

[mgavel]

Here's a sample of the configuration line running in one of my pilot servers:

Server:

ldap://ldap.csalab.com

Usersroot:

ou=active,ou=employees,ou=people,o=csalab.com

Prefix:

uid=

[dodsonrs]

Do you put anything in the uid field?

[RichardSW]

If you're using Active Directory, and your domain looks like "yourdomain.local", then it should be like this:

LDAP Configuration:

-------------------

Server: ldap://10.1.2.33

Usersroot: dc=yourdomain,dc=local

Prefix: cn=Administrator

-------------------

And look at the note at the bottom - "Note: A local admin account matching the LDAP login name is mandatory for defining the administrator priveleges". I think this means if your AD admin account is "Administrator", then the mc needs an account called "Administrator" as well - but it doesn't require a local password because it will authenticate against AD.

I wish I could test this out for you, but I'm not running 5.1 yet.