Configuring remote account authentication using
LDAP
The LDAP configuration page (Users > LDAP configuration) is used to configure an LDAP connection to
a remote directory service for administrator account authentication. It can also provide user account
authentication if you are using FindMe without Cisco TMS.
The configurable options are:
Field Description Usage tips
Remote account authentication: this section allows you to enable or disable the use of LDAP for remote account
authentication.
Administrator
authentication
source
Defines where administrator login credentials are
authenticated.
Local only: credentials are verified against a local
database stored on the system.
Remote only: credentials are verified against an
external credentials directory.
Both: credentials are verified first against a local
database stored on the system, and then if no
matching account is found the external credentials
directory is used instead.
The default is Local only.
Both allows you to continue to use
locally-defined accounts. This is useful
while troubleshooting any connection or
authorization issues with the LDAP
server.
You cannot log in using a locally-
configured administrator account,
including the default admin account, if
Remote only authentication is in use.
Note: do not use Remote only if VCS is
managed by Cisco TMS.
FindMe
authentication
source
Defines where FindMe account credentials are
authenticated:
Remote: credentials are verified against an external
credentials directory (the VCS currently supports
only Windows Active Directory).
Local: credentials are verified against a local
database stored on the VCS.
The default is Local.
This option applies only if you are using
FindMe without Cisco TMS.
LDAP server configuration: this section specifies the connection details to the LDAP server.
FQDN
address
resolution
Defines how the LDAP server address is resolved.
SRV record: DNS SRV record lookup.
Address record: DNS A or AAAA record lookup.
IP address: entered directly as an IP address.
The default is Address record.
Cisco VCS Administrator Guide (X8.1.1) Page 265 of 507
User accounts
Configuring remote account authentication using LDAP