I am getting the following error message in my CSWinAgent log when I try to authenticate an AD account that is in a different tree in our active domain forest than the one in which the ACS Agent is in.
xxx.root.com yyy.root.com Agent PC User does not authenticate User authenticates
CSWinAgent 02/27/2006 20:31:37 A 0048 1636 NTLIB: MprAdminUserGetInfo returned error 0x6ba
The failure code in the failed attempts log on the CiscoSecure ACS v3.3 is External DB account Restriction.
Any help on this issue is appreciated.