Cisco Systems Servers Server User Manual


 
Chapter 12 Administering External User Databases
Database Group Mappings
12-20
Cisco Secure ACS 3.0 for Windows 2000/NT Servers User Guide
78-13751-01, Version 3.0
Changing Group Set Mapping Order
You can change the order in which Cisco Secure ACS checks group set mappings
for users authenticated by Windows NT/2000, Novell NDS, and generic LDAP
databases. To order group mappings, you must have already mapped them. For
more information about creating group mappings, see the Creating a
Cisco Secure ACS Group Mapping for Windows NT/2000, Novell NDS, or
Generic LDAP Groups section on page 12-15.
To change the order of the group mappings for a Windows NT/2000, Novell NDS,
or generic LDAP group mapping, follow these steps:
Step 1 In the navigation bar, click External User Databases.
Step 2 Click Database Group Mappings.
Step 3 Click the external user database name for which you want to configure group set
mapping order.
Result: If you are ordering Windows NT/2000 group set mappings, the Domain
Configurations table appears. If you are ordering NDS group set mappings, the
NDS Trees table appears. Otherwise, the Group Mappings for database Users
table appears.
Step 4 If you are configuring Windows NT/2000 group mapping order, click the domain
name for which you want to configure group set mapping order.
Result: The Group Mappings for Domain: domainname table appears.
Step 5 If you are configuring Novell NDS group set mapping order, click the name of the
Novell NDS tree for which you want to configure group set mapping order.
Result: The Group Mappings for NDS Users table appears.
Step 6 Click Order mappings.
Note The Order mappings button appears only if more than one group set
mapping exists for the current database.
Result: The Order mappings for database page appears. The group mappings for
the current database appear in the Order list.
Step 7 Select the name of a group set mapping you want to move, and then click Up or
Down until it is in the position you want.