|
Configuring for Member Server Authentication
After you install Cisco ACS remote agent on a Windows member
server, you must authenticate users with a Windows user database.
To do that, you need to configure the server for the authentication
following these steps:
.
1. Verify domain membership.
Open The properties of My Computer. Make
sure teh computer has been joining the domain.
2. Add the CISCO workstation.
To satisfy Windows requirements for authentication requests, ACS
must specify the Windows
workstation in to which the user is attempting to log. Because
ACS cannot determine this information
from authentication requests that AAA clients send, it uses a
generic workstation name for all requests.
Use CISCO as the name of the workstation.
To do that, open ADUC
from Administrative Tools. Add a computer account named called
CISCO.
3.
Verify the server
service status.
On
the computer that is running the remote agent, make sure that the Server service is
running and that its Startup Type is
set to Automatic.
4.
Verify the NTLM
version.
This step is
required only if ACS authenticates users who belong to trusted
domains or child domains.
ACS supports
authentication of Windows credentials by using LAN Manager (LM),
NTLM version 1,
or NTLM version 2
protocols.
Post your questions, comments, feedbacks and suggestions
Contact a consultant
Related Topics
|
