If anyone can help with this I'd really appreciate it. NAC Guest Server version 2.0.1
We've delpoyed the NAC Guest Server and successfully integrated it into AD. This is a large organisation and they have thousands of AD groups. The AD sponsor group was created within a specific OU and the NGS could never find this group when the Base DN: string was set to the root of the AD - because of the large number of groups - you would only ever see the last 1000 results or the first 1000 results or whatever.
The solution to this was to set the Base DN: to be the specific OU which contains the sponsor group (ie one level down from the root), now we can find the sponsor group on the NGS under Active Directory Mapping as there are fewer results and it all works. Super.
Now the problem is that it turns out that sponsors have to be a member of the OU as well of the AD group, so only people whose AD profile lives in the same OU as the sponsor group and are members of that group can log in to the NGS.
Somone who's AD account is in a different OU can be made a member of the WGA Sponsor group in AD, but the NGS will not authenticate them.
Is this a bug? Any ideas?