Trying to setup AAA for login to the APIC-EM web console. Have added the APIC-EM to freeradius server and able to see an authorization request coming from APIC-EM to the server. The radius server does an LDAP check to see if the user belongs to a group _netops in this case and the user matches and is granted access.
When attempting to login from the web the response getting on the web is "Invalid Login Credentials".
Try - cisco-av-pair Scope=ALL:Role=ROLE_ADMIN