CIsco ACS 3.3 for windows

[Csteinsv]

Hi I have setup the ACS server and it works with RSA authentication, but only if i make a username in the ACS database. I dont fancy making 900 useracounts so i would like the usernames form win2003 AD.

Anyone know how i can import the users from ad and into the Cisco ACS server? or make ACS server get them from AD in realtime?

 

[KickStartIt]

There are two ways of getting authenticated through AD. You can setup the ACS as a member server or have it pull from the domain controller. I have mine setup to use AD and it works really well. Check this link out....

http://www.cisco.com/en/US/customer...tallation_guide09186a0080238b18.html#wp981552

 

[mbilgrav]

What are your unknown user policy ?
You can enable this, and set up a external database, pointing to the RSA, in this way any users not known by ACS will be looked up in RSA, hence you need only to have users in ACS, who you will assign special RADIUS attributes to.

Also the manual states that you can import users via csutil.exe - RTM ...
8)
HTH
Martin