Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

ClearPass: guest authentication using radius and local database

This thread has been viewed 2 times

  • 1.  ClearPass: guest authentication using radius and local database

    Posted May 20, 2016 02:02 PM

    Using ClearPass, I can authenticate guest users (username, password) using either radius (i.e. Active Directory) or the local database (i.e. Guest Accounts).   Is it possible to use both identity stores in sequence?  For example, I would like CP to check AD first and if not found check the local store.  It appears that the "Web Login" configuration page forces me to choose one or the other but not both in sequence.  Advice on how to do the sequential check would be appreciated.

    Thanks. 



  • 2.  RE: ClearPass: guest authentication using radius and local database
    Best Answer

    EMPLOYEE
    Posted May 20, 2016 02:20 PM
    Yes you can, but you would need to change the pre-auth check to be either a
    RADIUS or App Auth request (instead of a local check). Then you just need to
    build a service to handle those requests.


  • 3.  RE: ClearPass: guest authentication using radius and local database

    Posted May 20, 2016 02:50 PM

    I tested it and it's working for me.  Thank-you.