Cisco Systems OL-24201-01 manual Configuring Internal Identity Attributes, 18-11

Chapter 18 Managing System Administration Configurations

Managing Dictionaries

Configuring Internal Identity Attributes

Table 18-10describes the fields in the internal <users hosts> identity attributes.

Table 18-10 Identity Attribute Properties Page

Option

Description

General

Attribute	Name of the attribute.
Description	Description of the attribute.
Attribute Type
Attribute Type	(Optional) Use the drop-down list box to choose an attribute type. Valid options are:

•String—Populates the Maximum Length and Default Value fields in the page. When you select String as attribute type and enter a non-null value for a user, the user is authenticated against the ID store with the name that matches with the already set value, for the attribute on the user details (ACS-RESERVED-Authen-ID-Store).

•Unsigned Integer 32—Populates the Valid Range From and To fields in the page.

•IPv4 Address—Populates the Default Value field in the page.

•Boolean—Populates the Default Value check box in the page.When you set the value of the Boolean attribute as true, it overrides the global settings for password expiration policy and deactivate the policy (ACS-RESERVED-Never-Expired).

•Date—Populates the Default Value field and calendar icon in the page.

•Enumeration—Populates the ID and Value fields and the Add, Edit, Replace, and Delete buttons.

Maximum Length	(Optional) For the String attribute type only. Enter the maximum length of your attribute. The
	valid range is from 1 to 256. (Default = 32)
Value Range	(Optional) For the Unsigned Integer attribute type only.
	• From—Enter the lowest acceptable integer value. The valid range is from 0 to 2^31-1
	(2147483647). This value must be smaller than the Valid Range To value.
	• To—Enter the highest acceptable integer value. The valid range is from 0 to 2^31-1
	(2147483647). This value must be larger than the Valid Range From value.
Default Value	Enter the default value for the appropriate attribute:

•String—Up to the maximum length. (Follow the UTF-8 standard.) You can use the letters a to z, A to Z, and the digits 0 to 9.

•Unsigned Integer 32—An integer in the range from 0 to 2^31-1 (2147483647).

•IPv4 Address—Enter IP address you want to associate with this attribute, in the format: x.x.x.x, where x.x.x.x is the IP address (no subnet mask).

•Date—Click the calendar icon to display the calendar popup and select a date.

•Boolean Value—Select True or False.

	User Guide for Cisco Secure Access Control System 5.3
OL-24201-01		18-11