Cisco 500 Series, Configuration Manual

Page: 1070 / 1140

E-20
Cisco Security Appliance Command Line Configuration Guide
OL-12172-03
Appendix E Configuring an External Server for Authorization and Authentication
Configuring an External LDAP Server
Example 2: Configuring LDAP Authentication with Microsoft Active Directory
This example presents a configuration procedure for LDAP authentication with Microsoft Active
Directory. To secure the user credentials during transmission, this procedure configures the security
appliance to exchange messages with the LDAP directory over a SSL connection. It also configures the
security appliance to interpret the department attribute in the Microsoft AD user record as the group
policy to which the user is assigned. The authorization attributes for this group are retrieved from a
RADIUS server.
View the user records by clicking the User folder in the Active Directory Users and Computers window
as shown in
Figure E-3 .
Figure E-3 Active Directory Users and Computers Window Showing User Folder
Review specific user attributes and values by right-clicking the username and clicking Properties. The
Username Properties dialog box appears as shown in
Figure E-4 .