I have a totally isolated newly installed Windows Server 2008. It is the forest root, DC, GC, DNS and Netbios server and has ACS installed directly on it. When using local database in ACS user account it works great to AAA Tacacs Auth. When trying to auth a dynamic mapped user on even local user pointed to windows database I get internal error. This is killing me. My company needs to move to native 2008 and ACS is stopping it at this point. We are runing 4.2.0.124 patch 6
Any assistance is greatly appreciated. In fact it would be nice to know if this works for anyone.
Pass and fail logs with all fields selected attached. Not Sure what the RDS log is. This is still failing. Works fine for local auth but fails when passing to AD. Thanks for the look. I hate to think this is not compatible with 2008 AD.
Cisco has conflicted information on this front. They are very unclear at to what exactly they support on the 2008 platform. This is unreal. I have actually begun to work on removing ACS all together for another radius platform. Microsoft NPS is working with mixed results however Cisco on many of my platforms sends malformed Radius packets to the NPS. This is after hours of packet captures to determine why a simple radius access request never gets back to the network device. Its because Cisco radius requests are broke. Very frustrating. If Cisco has anything to say on the matter it would be great but they are being very quite about ACS not working with 2008 AD.
