Cisco Systems Servers Manuale Utente

Pagina di 654
Chapter 12      Administering External User Databases
Database Group Mappings
12-20
Cisco Secure ACS 3.0 for Windows 2000/NT Servers User Guide
78-13751-01, Version 3.0
Changing Group Set Mapping Order
You can change the order in which Cisco Secure ACS checks group set mappings 
for users authenticated by Windows NT/2000, Novell NDS, and generic LDAP 
databases. To order group mappings, you must have already mapped them. For 
more information about creating group mappings, see the 
 To change the order of the group mappings for a Windows NT/2000, Novell NDS, 
or generic LDAP group mapping, follow these steps:
Step 1
In the navigation bar, click External User Databases.
Step 2
Click Database Group Mappings.
Step 3
Click the external user database name for which you want to configure group set 
mapping order.
Result: If you are ordering Windows NT/2000 group set mappings, the Domain 
Configurations table appears. If you are ordering NDS group set mappings, the 
NDS Trees table appears. Otherwise, the Group Mappings for database Users 
table appears.
Step 4
If you are configuring Windows NT/2000 group mapping order, click the domain 
name for which you want to configure group set mapping order.
Result: The Group Mappings for Domain: domainname table appears.
Step 5
If you are configuring Novell NDS group set mapping order, click the name of the 
Novell NDS tree for which you want to configure group set mapping order.
Result: The Group Mappings for NDS Users table appears.
Step 6
Click Order mappings.
Note
The Order mappings button appears only if more than one group set 
mapping exists for the current database.
Result: The Order mappings for database page appears. The group mappings for 
the current database appear in the Order list.
Step 7
Select the name of a group set mapping you want to move, and then click Up or 
Down until it is in the position you want.