Allow agent: Logon denied due to validation error, Error Code: 3003 (No Network Access resource assigned)

We have one F5 SSL VPN user who is having his second round of trouble getting logged in.   We use LDAP to query AD for group membership, and allow access based on that.   the most relevant erro...