12-21
User Guide for Cisco Secure ACS for Windows Server
78-14696-01, Version 3.1
Chapter 12 Administering External User Databases
Database Group Mappings
To delete a Windows NT/2000 group mapping, follow these steps:
Step 1
In the navigation bar, click External User Databases.
Step 2
Click Database Group Mappings.
Step 3
Click the name of the Windows NT/2000 external user database.
Step 4
Click the domain name whose group set mapping you want to delete.
Step 5
Click Delete Configuration.
Result: Cisco Secure ACS displays a confirmation dialog box.
Step 6
Click OK in the confirmation dialog box.
Result: Cisco Secure ACS deletes the selected external user database group
mapping configuration.
Changing Group Set Mapping Order
You can change the order in which Cisco Secure ACS checks group set mappings
for users authenticated by Windows NT/2000, Novell NDS, and generic LDAP
databases. To order group mappings, you must have already mapped them. For
more information about creating group mappings, see
Creating a
Cisco Secure ACS Group Mapping for Windows NT/2000, Novell NDS, or
Generic LDAP Groups, page 12-16
.
To change the order of group mappings for a Windows NT/2000, Novell NDS, or
generic LDAP group mapping, follow these steps:
Step 1
In the navigation bar, click External User Databases.
Step 2
Click Database Group Mappings.
Step 3
Click the external user database name for which you want to configure group set
mapping order.
Result: If you are ordering Windows NT/2000 group set mappings, the Domain
Configurations table appears. If you are ordering NDS group set mappings, the
NDS Trees table appears. Otherwise, the Group Mappings for database Users
table appears.