31-17
Cisco ASA 5500 Series Configuration Guide using ASDM
OL-20339-01
Chapter 31 Configuring AAA Servers and the Local Database
Configuring AAA Server Groups
HTTP Form Server Fields
This area appears only when the selected server group uses HTTP Form, and only the server group name
and the protocol are visible. Other fields are not available when using HTTP Form.
If you do not know what the following parameters are, use an HTTP header analyzer to extract the data
from the HTTP GET and POST exchanges when logging into the authenticating web server directly, not
through the adaptive security appliance.
The following table describes the unique fields for configuring HTTP Form servers, for use with the
“Adding a Server to a Group” section on page 31-10.
Group Base DN Used only for Active Directory servers using LDAP protocol. This DN
specifies the location in the LDAP hierarchy to begin searching for the
AD groups (that is, the list of memberOf enumerations). If this field is
not configured, the adaptive security appliance uses the Base DN for AD
group retrieval.
ASDM uses the list of retrieved AD groups to define AAA selection
criteria for dynamic access policies. For more information, see the show
ad-groups command.
Group Search Timeout Specifies the maximum time to wait for a response from an AD server that
was queried for available groups.
Field Description
Field Description
Start URL The complete URL of the authenticating web server location where a
pre-login cookie can be retrieved. This parameter must be configured
only when the authenticating web server loads a pre-login cookie with
the login page. A drop-down list offers both HTTP and HTTPS. The
maximum number of characters is 1024, and there is no minimum.
Action URI The complete Uniform Resource Identifier for the authentication
program on the authorizing web server. The maximum number of
characters for the complete URI is 2048 characters.
Username The name of a username parameter—not a specific username—that
must be submitted as part of the HTTP form used for SSO
authentication. The maximum number of characters is 128, and there is
no minimum.
Password The name of a user password parameter—not a specific password
value—that must be submitted as part of the HTTP form used for SSO
authentication. The maximum number of characters is 128, and there is
no minimum.
To Next Page
Loading...
Need help?
General
