This is a known bug in 4.1.1 I will quote Jackie Cheng from Cisco from a
message on this list on 6/20/2007

CSCsi78024 will be fixed in 4.1.2 release which is expected to be
released in mid-end July.  

Thanks,
--Jackie

-----Original Message-----
From: Cisco Clean Access Users and Administrators
[mailto:[log in to unmask]] On Behalf Of Mark Duling
Sent: Thursday, June 28, 2007 4:32 PM
To: [log in to unmask]
Subject: [CLEANACCESS] Default provider

After upgrading from 3.6.x to 4.1.1, the guest access behavior seems
different.  We had a guest button that people could use, but now it
seems
that only the default provider is tried.  Before it would try the
default
authentication provider and then check the other available providers.
Now
it stops after the default.  If I expose "local db" in addition to my
ldap
service, I can get guest access by selecting provider "local db" and
then
clicking the guest button.  But with 3.6.x I din't need to do that.
Does
anyone know how to solve this?

Mark