We have a VPN and a WiFi authentications thru an ACS @ 4.x to an external database. Using the unknown user policy pointing to an windwos database this config works at one of our sites (main site). The main site replicates to our backup site but does not of course replicate the dynamic users. The problem is that our backup site does not authenticate any users via the windows DB - both sites are configured the same. Also the backup site does work once in a while but u must preface your account with the domain.
Here is the error as reported by windows;
help - tnks!
Logon Failure:
Reason: Unknown user name or bad password
User Name: doherty
Domain: usc
Logon Type: 3
Logon Process: CISCO
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: CISCO
Caller User Name: COSC-LAN-RADIUS$
Caller Domain: USC
Caller Logon ID: (0x0,0x3E7)
Caller Process ID: 1424
Transited Services: -
Source Network Address: -
Source Port: -
