I'm getting closer: THANK YOU FOR ALL YOUR HELP SO FAR!!!! I'm sending this but also looking into the failure reason. I'm a n00b at this version . . . working to get off a Win Radius . . .
Here is the latest authorization report:
Status:
Failed
Failure Reason:
13025 Command failed to match a Permit rule
Logged At:
May 18, 2010 2:42 PM
ACS Time:
May 18, 2010 2:42 PM
ACS Instance:
NAWDM1ACS-A01-DC03
Authentication Method:
None
Authentication Type:
Header Privilege Level:
0
Command Set:
[ CmdAV=enable ]
User
User Name:
abc123
Remote Address:
Network Device
Network Device Name:
TestPrintroom3750
Netwok Device Group:
Device Type:All Device Types:Switches:West, Location:All Locations
Device IP Address:
10.32.128.9
Access Policy
Access Service:
Default Device Admin
Identity Store:
Selected Shell Profile:
Matched Command Set:
Selected Command Set:
DenyAllCommands
Active Directory Domain:
Identity Group:
All Groups:Administrators:NetEng
Access Service Selection Matched Rule:
Rule-2
Identity Policy Matched Rule:
Default
Selected Identity Stores:
Query Identity Stores:
Selected Query Identity Store:
Group Mapping Policy Matched Rule:
Authorization Policy Matched Rule:
NetEng
Authorization Exception Policy Matched Rule:
Other
ACS Session ID:
NAWDM1ACS-A01-DC03/63492254/359
Author Reply Status:
Other Attributes:
ACSVersion=acs-5.1.0.44-B.2347
ConfigVersionId=38
Device Port=22378
Protocol=Tacacs
Type=Authorization
Service=None
Port=tty1
Remote-Address=10.32.128.26
Service-Argument=shell
AuthenticationIdentityStore=Internal Users
AuthenticationMethod=Lookup
SelectedAuthenticationIdentityStores=Internal Users
UserIdentityGroup=IdentityGroup:All Groups:Administrators:NetEng
