Scenario: Users belong to three Authentication, Authorization and Auditing (AAA) groups: Corporate, Finance and Software. show aaa groups: show aaa group 1. GroupName: Corporate 2. GroupName: Finance 3. GroupName: Software Done show aaa group Corporate GroupName: Corporate Weight: 0 Authorization Policy: pol_1, Type: Classic, Priority: 0 add authorization policy pol_1 ns_true ALLOW bind aaa group Corporate -policy pol_1 The user is being denied resources while aaad.debug shows: Group 'corporate' being extracted for user User1 Why is the user being denied access?

Question

Scenario: Users belong to three Authentication, Authorization and Auditing (AAA) groups: Corporate, Finance and Software. show aaa groups: > show aaa group 1. GroupName: Corporate 2. GroupName: Finance 3. GroupName: Software Done > show aaa group Corporate GroupName: Corporate Weight: 0 Authorization Policy: pol_1, Type: Classic, Priority: 0 > add authorization policy pol_1 ns_true ALLOW > bind aaa group Corporate -policy pol_1 The user is being denied resources while aaad.debug shows: Group 'corporate' being extracted for user User1 Why is the user being denied access?

Accepted Answer

D. LDAP Base DN is incorrect.

Answer

A. The Authorization policy is NOT configured property.

Answer

B. The group attribute is NOT configured in the LDAP policy.

Answer

C. AAA group names are NOT the same as those in Active Directory.

Scenario: Users belong to three Authentication, Authorization and Auditing (AAA) groups: Corporate, Finance and Software. show aaa groups: > show aaa group 1. GroupName: Corporate 2. GroupName…

Question

Options

How the community answered

Community Discussion