What does the full shell profile look like? For WCS, you'll need 1 or more virtual domains, 1 role, and 1 or more tasks listed in the shell profile.
Regards, Jeff Rensink : Sr Instructor : iPexpert <http://www.ipexpert.com/> CCIE # 24834 :: Wireless / R&S :: World-Class Cisco Certification Training Direct: +1.810.326.1444 :: Free Videos <http://www.youtube.com/ipexpertinc> :: Free Training / Product Offerings <http://www.facebook.com/ipexpert> :: CCIE Blog <http://blog.ipexpert.com/> :: Twitter <http://www.twitter.com/ipexpert> On Wed, Jan 15, 2014 at 7:00 PM, Jay Killion (jakillio) <[email protected]>wrote: > I'm hoping someone can tell me what I'm doing wrong here… > > - I created a virtual domain in WCS called 'View' and assign the > appropriate tasks. > > - After clicking the virtual domain I select "export" and end with the > following values.. > - virtual-domain0=root > - virtual-domain1=View > > - After creating a user in ACS for TACACS, under the 'Shell Profile' I > include "virtual-domain" as the attribute and "root" as the value, > "virtual-domain1" and "View" Then create an access policy matching the > user and calling the shell profile. > > But when I try to login to WCS with the user assigned to this > authorization policy, I get "Error: User has no usergroups assigned" > > Any idea what I'm missing? > > Thanks - > > _______________________________________________ > Free CCIE R&S, Collaboration, Data Center, Wireless & Security Videos :: > > iPexpert on YouTube: www.youtube.com/ipexpertinc >
_______________________________________________ Free CCIE R&S, Collaboration, Data Center, Wireless & Security Videos :: iPexpert on YouTube: www.youtube.com/ipexpertinc
