Re: [ActiveDir] Slightly OT: Cisco ACS and Active Directory

[Steve Schofield]

The good i've gotten it to work, the bad is some current version of ACS (sorry don't know off the top of my head) appears to have a (cached user) that happens on the ACS box.  Our cisco guys have worked with the vendor on at times things work then after awhile cached users (think that is the right term) is retained on the server (windows 2000 server) running the ACS processes.  The only way we've found is to flush the cached users on the ACS box then users start to log into ACS again.  I've not done anything with SSL or CERTS authentication to AD.   Sorry I don't have more info but this is my experiences with ACS and AD.  PS:  I couldn't get ACS to install on Windows 2003 server (the ACS server) with the services installed on it.  I didn't have to grant very many groups for ACS to function.  Adminstrator, User, and one other group.    Steve ----- Original Message ----- From: Fuller, Stuart To: [EMAIL PROTECTED] Sent: Tuesday, August 31, 2004 12:28 PM Subject: [ActiveDir] Slightly OT: Cisco ACS and Active Directory Has anyone gone down the path of using Cisco ACS for regular and wireless network access control AND authenticating it with their Active Directory?   If so, can you share any the good, the bad, or the indifferent information on setup, use, etc...??   Specifically I am looking for information on use of AD groups, AD authentication method & setup, use of a MS certificate authority, and distribution of certs.   Thanks,   Stuart Fuller State of Montana