Do u have a TACACS server configured and TACACS is the primary database for management authentication???? Then make the priority as local then TACACS. It should work

Can you explain me wht do u mean by group membership???Let me know how the user in different ou works for u. Let me know if it is not working or u r facing any issue

If you are using ACS as your radius server there is an option tosee the logged in usersgoto Report and activity>>Passed authentications

You can use users in another location for authenticated binding of LDAP, in that case while writing the the username you should mention entire path instead of username.for eg: you should specify the username as cn=user,ou=cisco,ou=wireless,dc=com.If...

pkcs12 -in MYCERTS.pfx -out MYCERTS.pem