apologies for stupid question

[wigneysm_]

I have a Juniper SA 2000 (7.0R8) and I'm trying to create a role mapping rule based on group membership in a realm where the primary authentication is a PINSafe SWivel server and secondary is AD.  I have no option for "Group Membership" in the role mapping page of the realm.  I know I'm missing something basic - any help much appreciated...

cheers,

[wigneysm_ · Accepted solution]

worked it out.  Need to create LDAP server additionally and use it provide directory information to the RADIUS authentication process.

[zanyterp_]

Glad you found it.

Yes, you need the LDAP instance to do authorization.