ACS 4.2 custom attribute problem

[Cisco Freak]

Hi,

I am configuring a user account in ACS 4.2. I assigned privilege level 15 and exec access to user and it works.User can get into config mode.

Now I am adding a few custom attribute to that user to enable configuration access to a ace context.

After that the user loses the privilege level 15 and he gets privilege level 1 and the customer attributes takes effect.

Is there anyway I can keep both custom attributes and privilege level 15.

CF

[Javier Henderson]

Given the problem description, I suspect the custom attribute/value pairs are configured as mandatory. Since the IOS devices don't know what to do with them, and they are mandatory, authorization will fail, per design.

Try making the custom a/v pairs optional (i.e., use * instead of = when defining them).

[Cisco Freak]

This is how I defined the custom attribute:

shell:Context1*Admin default-domain

There is no = in the definition.

[Cisco Freak]

How do I assign privilege level 15 and exec access through custom attribute?

[Cisco Freak]

Anyone got idea about this problem?

How do I assign privilege level 15 and exec access through custom attribute?