The middle one with quotes will do the trick. Try 'debug ldap 255' and 'test aaa autho .....' to see the output for testing.
Sent from handheld On Nov 25, 2010, at 4:29 AM, "John Kougoulos" <[email protected]> wrote: > > > On Thu, 25 Nov 2010, Jason Charlton wrote: > >> I am trying to setup my ASA to do authentication for VPN useres, where >> specific group-policy will be assigned based on the AD group membership. >> >> I know this can be achieved though the below commands: >> >> ldap attribute-map CISCOMAP >> map-name memberOf IETF-Radius-Class >> map-value memberOf CN=Test Users,OU=PlaceHolder,OU=Outside >> Contacts,OU=xedixxx,DC=xxxrite,DC=local >> >> >> The values have been changed to different names for this thread, but the >> basics are the same. The issue I seem to be having is with the bold >> portion, where I have spaces in my CN & OU names for the map-value. This is >> an existing infrastructure, and it is not really feasible to change the CNs >> & OU's to not have spaces. Are there any other work arounds? Is this fixed >> in a later code? I am running 8.0(4). >> > > I didn't understand what type of problem you see, but have you tried the > classic approaches? > > eg. cn=Test\ Users > or "cn=Test Users" > or cn=Test%20Users > > Regards, > John > _______________________________________________ > cisco-nsp mailing list [email protected] > https://puck.nether.net/mailman/listinfo/cisco-nsp > archive at http://puck.nether.net/pipermail/cisco-nsp/ _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
