Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

ASA LDAP doesn't see constructed attribute

I'm in the process of configuring an ASA running 8.4(4)1 for AnyConnect and I'm using certificate authentication with LDAP authorization.  I would like to use a DAP to check the value of LDAP attribute mSDS-User-Account-Control-Computed. However, apparently because this attribute is a constructed attribute, it doesn't show up in the ldap debug or the dap trace on the ASA.  My research seems to indicate that because this attribute is constructed, it won't be sent unless specifically requested. 

Is there anything on the ASA that can be done to request this attribute?  Does anyone have any experience with LDAP on the ASAs?

Thanks.

-Ben

2 REPLIES
Hall of Fame Super Gold

ASA LDAP doesn't see constructed attribute

Wrong forum, post in Security. You can move your post using the actions panel on the right.

New Member

ASA LDAP doesn't see constructed attribute

Moved. Thanks.

241
Views
0
Helpful
2
Replies