Controllerless Networks

Reply
Occasional Contributor I

Disable edit and delete button @Guest Provisioning Interface

Hello, I'm traying to give access for provisioning guests to everyone on the company (to provide a guest user for their guests). but i need to disable the edit and delete button in order to deny for the "provisioning user" account at the controller to modify or delete the guest users created by others employees that used already the account. Is it possible?

 

Thank you

 

Gabriel

Guru Elite

Re: Disable edit and delete button @Guest Provisioning Interface

http://www.arubanetworks.com/techdocs/ArubaOS_65x_WebHelp/Web_Help_Index.htm#ArubaFrameStyles/Management_Utilities/Guest_Provisioning.htm

"Starting with ArubaOS 3.4 release, a guest user account that is created by a guest provisioning user can only be viewed, modified or deleted by the guest provisioning user who created the account or the network administrator. A guest user account that is created by the network administrator can only be viewed, modified or deleted by the network administrator."

 

You cannot disable buttons.  It seems you would only be able to accomplish that if guest provisioners were using unique usernames to log into the controller...



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor I

Re: Disable edit and delete button @Guest Provisioning Interface

And you know if there is a possibility to enable access to the controller as guest-provisioning account to an Active Directory group?

Guru Elite

Re: Disable edit and delete button @Guest Provisioning Interface

You can do this via management authentication.  If you have a radius server that can authenticate users via AD group, you can return the Aruba-admin-role attribute of "guest-provisioning" to have those users authenticate and see the guest page.



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor I

Re: Disable edit and delete button @Guest Provisioning Interface

Could you explain me how to do this? I can't find where i have to set the things that you said.

Guru Elite

Re: Disable edit and delete button @Guest Provisioning Interface

You would need:

 

- An external radius server to authenticate management users, sending back the "guest-provisioning" value for the "Aruba-Admin-Role".

- To configure the Aruba Controller to accept management authentication from a radius server

 

How to configure your radius server varies, depending on the radius server.  If you have IAS, vanilla instructions are here:  http://www.arubanetworks.com/techdocs/ArubaOS_63_Web_Help/Content/ArubaFrameStyles/802.1x_XPClient_IAS_Config/Configure_Management_Aut.htm



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: