ACS 4.2 Service denied service=shell cmd*

[Jan Rockstedt]

Hi,

I am trying to setup acs 4.2 for auth to windows AD 2003, dial-in is enable.

I get this error msg in the ACS when I try to logon from our switch.

Service denied service=shell cmd*

Any sugestion?

Regdars Jan

[Jagdeep Gambhir · Accepted solution]

Jan,

It seems you have command authorization configured in acs. Make sure you have shell exec checked on acs --->group set.

Regards,

~JG

Do rate helpful posts