I am trying to setup acs 4.2 for auth to windows AD 2003, dial-in is enable.
I get this error msg in the ACS when I try to logon from our switch.
Service denied service=shell cmd*
It seems you have command authorization configured in acs. Make sure you have shell exec checked on acs --->group set.
Do rate helpful posts