Problems with AAA via AD (ACS5.3+Windows 2008 AD)

[d_volkovsky]

Dear colleagues,

Please help as I could not find a solution.

I have ACS 5.3 installed and connected to Microsoft AD.

I have created new access policy based on "Default Device Admin". Under this rule I have selected AD Identity and create new rule-0 where I selected AD1 as place where client should be authenticated and Shell profile "Prov_15" where by default users shoudl get priviledge access 15 but ACS passed me directly to "Default" where I have "denyaccess" profile.

If I change Authorization from AD to internal DB everything works.

Please give me a clue what I dod wrong.

Thanks.                 

[maldehne]

remove AD1 external groups condition and try

------------------------------------------------------------------

Please make sure to rate correct answers

[d_volkovsky]

Hi,

I have sorted out this topic.

Issue was with misprinting into AD groups.

[maldehne]

good to know that