Cisco 2509 - Router - EN User Manual page 438

Generic LDAP
d.
e.
Step 9 If you want to enable Cisco Secure ACS to strip domain qualifiers from
usernames before submitting them to an LDAP server, follow these steps:
Note
a.
b.
c.
Under Common LDAP Configuration, in the User Directory Subtree box, type the
Step 10
DN of the tree containing all your users.
In the Group Directory Subtree box, type the DN of the subtree containing all your
Step 11
groups.
User Guide for Cisco Secure ACS for Windows Server
11-30
If you want Cisco Secure ACS to remove the domain qualifier before
submitting it to the LDAP database, select the Strip domain before
submitting username to LDAP server check box.
If you want Cisco Secure ACS to pass the username to the LDAP database
without removing the domain qualifier, clear the Strip domain before
submitting username to LDAP server check box.
For information about domain filtering, see
page 11-18.
Under Domain Filtering, select Process all usernames after stripping
domain name and delimiter.
If you want Cisco Secure ACS to strip prefixed domain qualifiers, select the
Strip starting characters through the last X character check box, and then
type the domain-qualifier delimiting character in the X box.
The X box cannot contain the following special characters:
Note
# ? " * > <
If any of these characters are in the X box, stripping fails.
If you want Cisco Secure ACS to strip suffixed domain qualifiers, select the
Strip ending characters from the first X character check box, and then
type the domain-qualifier delimiting character in the X box.
The X box cannot contain the following special characters:
Note
# ? " * > <
If any of these characters are in the X box, stripping fails.
Chapter 11 Working with User Databases
Domain Filtering,
78-14696-01, Version 3.1