ADS groupbased rolemapping - broken in 6.0R2?

[ben_]

Hi folks,

we just had the problem after upgrading to 6.0r2, that ADS authentication with rolemapping based on ADS groupmemberships did not work anymore. Policy trace pointed out, that the IVE does not seem to get any group information anymore.
However I opened a ticked @Juniper regarding this I found out, that 6.0R3 that is just a bugfix release fixes this problem even if I did not find anything regarding our problem in the changelogs.
So does anyone here have the same problems?

[Frac_]

Hi,

we had the same problem. open jtac ticket, i some situations there is a fix. (deleting your ad server and deleting your SA in the computer store, then recreate the ad)

BUT jtac will give detail information.

GreetZ,
Frac

[ben_]

Hi,

thanks for the info. Well I deleted the AD in Auth. Servers, what I did not do was to delete it from the store.
Nevertheless, with 6.0r3 it seems to be fixed, whatever it was.

EDIT: ok as the support told me today, there was an undocument fix in 6.0R3 regarding this problem...

Ben

Message Edited by ben on 12-11-2007 01:13 PM