So, this goes on the Cisco box:aaa authorization exec authentication-serverThen this goes on your RADIUS Server:User-Name = CoolUserGuy Service-Type = 6 Not sure your radius server, and your ASA versions but that's what finally worked for me....
Sorry, old post, but just wanted to thank Marvin and post another follow-up question to his response. I believe you're correct, and that Marius was missing those last steps(as his would only change from active/standby, and not the primary/secondary)...
I get it, old post...but was getting very frustrated with the Cisco-AVpair command not working with my ASA(as for whatever reason it works on the switch w/RADIUS), and following your post and using the Service-Type 6 instead fixed it. Thank you!!