ACS 4.2 machine authenction - user group exempt

[steven_chan]

Hi, I am trying to configure "User Groups that are exempt from passing machine authentication:". I use this for 7921 users.

I have tried that if I put the user in default group and exempt the default group, it works fine.

But if I put the user in group 1 and exempt group 1, it does not work and user get denied due to MAR.

Do I miss something here? Or it is a bug?

TIA

[hadbou]

You can use ACS 4.2 to grant and deny access to users who are authenticated through a LDAP database based on the LDAP group to which the users belong. This feature is called group filtering at the NAP level.