Hey, when I create an LDAP user with 'Domain users" as its primary group and I add the RADIUS group for the SSL VPN authentication using PrivacyIDEA, everything works fine.
But when I create a user with only the RADIUS group, without the Domain users group, the authentication fails, it’s also the case if I create a user first with Domain users and RADIUS group, and only then removing the Domain users group from the user, then the authentication breaks and fails.
Our goal is to have the user a part of only the RADIUS group, instead of Domain users group, is there an option anywhere to do that? Is it known behaviour?