12-15
Cisco Secure ACS 3.0 for Windows 2000/NT Servers User Guide
78-13751-01, Version 3.0
Chapter 12 Administering External User Databases
Database Group Mappings
For more information about editing an existing group mapping, see the “Editing
a Windows NT/2000, Novell NDS, or Generic LDAP Group Set Mapping”
section on page 12-17.
Creating a Cisco Secure ACS Group Mapping for Windows NT/2000, Novell NDS,
or Generic LDAP Groups
To map a Windows NT/2000, Novell NDS, or generic LDAP group to a
Cisco Secure ACS group, follow these steps:
Step 1 In the navigation bar, click External User Databases.
Step 2 Click Database Group Mappings.
Step 3 Click the external user database name for which you want to configure a group
mapping.
Result: If you are mapping a Windows NT/2000 group set, the Domain
Configurations table appears. If you are mapping an NDS group set, the NDS
Trees table appears. Otherwise, the Group Mappings for database Users table
appears.
Step 4 If you are mapping a Windows NT/2000 group set for a new domain, follow these
steps:
a. Click New configuration.
Result: The Define New Domain Configuration page appears.
b. If the Windows domain for which you want to create a group set mapping
configuration appears in the Detected domains list, select the name of the
domain.
Tip To clear your domain selection, click Clear Selection.
c. If the Windows domain for which you want to create a group set mapping
does not appear in the Detected domains list, type the name of a trusted
Windows NT/2000 domain in the Domain box.
d. Click Submit.
Result: The new Windows NT/2000 domain appears in the list of domains in
the Domain Configurations page.