Hello,
our company uses NT Domain authentication over a radius server (Cisco ACS) for vpn authentication. There is little problem with users who belong to more than one group in the NT Domain. A user who is a member in more groups the authetication is overidden by the other group he belongs to (Log entry on the vpn concentrator: Group [xxx] is overridden by group [yyy]) and he gets an ip address for the vpn tunnel of the other group. What could be the problem? Is it caused by some attributes on the radius server?! And how could it be configured to have one user in more than one NT Domain group and he will be authenticated to the group he tried to connect over vpn?!
Regards
Christian
