WLC 2504 Management Admin Authentication with RADIUS not giving admin privileges

[Joseph E Spoon]

We have a WLC 2504 and are using RADIUS to authenticate to access the management interface.  When we do this, we are unable to make system wide changes.  We get an "insufficient privileges" error.  This is going to a Windows 2008 server with NPS running.

[Saurav Lodh]

configuring Tacacs

http://www.cisco.com/c/en/us/td/docs/wireless/controller/7-0MR1/configuration/guide/wlc_cg70MR1/cg_security_sol.html#pgfId-1697872

[rosaho]

This discussion has been reposted from Additional Communities to the AAA, Identity and NAC community.

[jan.nielsen]

I believe you need to return the ietf radius av-pair  "Service-Type"="Administrative" to get admin access.

http://www.cisco.com/c/en/us/support/docs/wireless-mobility/wlan-security/71989-manage-wlc-users-radius.html