10-23-2009 05:37 AM - edited 03-10-2019 04:45 PM
At the moment I'm evaluating ACS 5.0.0.21 (Eval-Version).
I defined a Service Selection that leads to an Access Service named "DeviceAdmin".
Within this I defined Authorization Rules (Standard Policy) with Conditions an Identity Group and/or UserName.
The problem ist that they never match.
Even if I define an (existing) Identity Group (also All Users) or an (existing) Username, the Authorization Policy always hits to default rule.
Any hint, what's wrong? A known bug?
10-26-2009 04:06 PM
Can you clarify which identity store you are authenticating against in the identity policy?
Also a good place to look for troubleshooting is at:
Monitoring & Reports: ... > Reports > Catalog > AAA Protocol > RADIUS_Authentication
Get to see a list of all recent attempts and any failure reasons. Can select the magnifying glass icon to drill down on the details of the request processing
10-27-2009 12:07 AM
Thanks for your reply.
Yesterday I purged all identity groups, applied them again and it worked.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: