in debug ldap 255, i see this message:
memberOf: value = CN=L-NOUSA-VPN_Access,OU=Security Groups,OU=NOUSA,OU=PROD,DC=wmh-ag,DC=org
[378534] mapped to Group-Policy: value = GroupPolicy_WM-Wisconsin
[378534] mapped to LDAP-Class: value = GroupPolicy_WM-Wisconsin
and
WM-Wisconsin# show run group-policy GroupPolicy_WM-Wisconsin
group-policy GroupPolicy_WM-Wisconsin internal
group-policy GroupPolicy_WM-Wisconsin attributes
wins-server none
dns-server value 10.155.17.246
vpn-tunnel-protocol ssl-client
default-domain value ABC-ag.org
and
WM-Wisconsin# show run tunnel-group WM-Wisconsin
tunnel-group WM-Wisconsin type remote-access
tunnel-group WM-Wisconsin general-attributes
address-pool Anyconnect-pool
authentication-server-group CA-LDAP-WM-AnyC
default-group-policy NO_VPN_ACCESS
tunnel-group WM-Wisconsin webvpn-attributes
group-alias WM-Wisconsin enable
When I try to login, it says "Login Failed"
it is evident from ldap debug that group policy is getting mapped to user, still failed.
When i change default group policy in tunnel group to GroupPolicy_WM-Wisconsin, it works ! but thats not the way i want....
