ACS Group Not Working

[dtom]

Currently running ACS 4.2.  Trying to assign UCS access using a group.  Did the following:

1) Created a group call Server Admin

2) In the TACACS+ Settings - select Shell (exec)

3) In the TACACS+ Settings - select Custom attributes

4) In the TACACS+ Settings - enter - cisco-av-pair=shell:roles="admin"

5) Assign a user (with default user settings) to Server Admin group

When the user tries to login to UCS they get the following error message:

Login Error: Failed login info: Authentication failed.

If I assign the above settings (from the group information above) to the user, the user (not using a group) can login to UCS.  Isn't the  purpose of the Group is to allow you tooup of  assign security attributes to a group of users instead of assigning these attributes to each user seperatly?

[Tarik Admani]

Please change the av-pair format. It looks as if your are using the radius format and not the TACACS try using shell:roles*admin (keep in mind the using = will break tacacs authentications to your IOS devices). * makes this attribute optional.

Give it a try and that should get your rolling.