Security

Reply
Occasional Contributor II
Posts: 13
Registered: ‎05-23-2016

Clearpass Sponsor Email Group

Hey Guy´s,

 

i have created a guest Portal with sponsor confirmation. It works fine. I have a field with Sponsor_email, where the guest hast to write in the mail from the sponsor. In the moment he can write there everthing. Is it possible to only allow there a spezial AD Group? 

 

That means, when the guest writes an email from a user, which is not in this ad group the mail is not send?

 

Regards Stefan

 

 

MVP
Posts: 4,174
Registered: ‎07-20-2011

Re: Clearpass Sponsor Email Group

A couple options :
You could setup a static email group (distribution group) and add a nickname and the user won't be able to edit or entirely just hide the field
http://community.arubanetworks.com/t5/AAA-NAC-Guest-Access-BYOD/How-create-a-sponsors-list-on-self-registration-login-on-CP/m-p/194729#M14469

Use LDAP with a restriction to anAD group
http://community.arubanetworks.com/t5/AAA-NAC-Guest-Access-BYOD/LDAP-Lookup-for-Sponsor-Restriction/m-p/161876#M12095

Get Outlook for iOS
Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
MVP
Posts: 727
Registered: ‎03-25-2009

Re: Clearpass Sponsor Email Group

Why not simply configure LDAP sponsor lookup and then point that config to look only into the group you want?

 

Saves your guests from having to type the email address even.

 

Koen (ACMX #351 | ACDX #547 | ACCP)

-- Found something helpful, important, or cool? Click the Kudos Star in a post.
-- Problem Solved? Click "Accept as Solution" in a post.
Occasional Contributor I
Posts: 8
Registered: ‎09-09-2016

Re: Clearpass Sponsor Email Group

 

You should be able to use an LDAP v3 URL which includes an LDAP filter to filter the results of your LDAP query:

 

ldap://host:port/dn?attributes?scope?filter?extensions

 

where filter could be (memberOf=<adgroup>).

 

Check the Managing LDAP Operator Authentication Servers section of the ClearPass Guest user guide.

Occasional Contributor II
Posts: 13
Registered: ‎05-23-2016

Re: Clearpass Sponsor Email Group

Hello Viktor. 

 

I tried it like in the Post you send, but it does not work. When i test my Server i get an ok and also see the right email. When i try to register a guest, i get an error that the sponsor email is not valid. I am not sure if i have to configure under the DO_LDAP_Lookup field. 

 

Regards Stefan

 

Search Airheads
Showing results for 
Search instead for 
Did you mean: