Problems with group mappings

[Darthkim_2]

I am testing 802.1x with dynamic vlan assignment on an ACS 3.3.3 for windows with a cat 3750.

When a new users logs into the machine, ACS is able to poll the AD for the users credentials, however the users gets placed int the default group, rather than the group mappings associated with Active Directory.

The error messages in CSAuth.log i see are the following

AUTH 08/24/2005 23:25:25 E 0365 1000 External DB [NTAuthenDLL.dll]: NetUserGetLocalGroups failed with result [5]

AUTH 08/24/2005 23:25:25 E 0365 1000 External DB [NTAuthenDLL.dll]: nt_GetUsersNTGroups failed

I Can manually move the users to the proper groups, however, why are they not being moved to their proper groups? Anyone else seen the problem/error messages above?

[owillins]

Can you check if it is mapped to an enabled group. Also try mapping to a new group.

[allan.flintoff]

Hi,

Did you ever get to the bottom of this issue. I have the same issue with ACS 3.3.3 for windows. I have not seen this issue on any other ACS Win / Appliance installs.

Thanks in advance

Allan

[allan.flintoff]

Managed to fix the problem by getting the ACS services to start with an account with Domain Admin privileges.

Allan