Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

Forcing logon after Guest Self-Registration with Mac Caching

This thread has been viewed 1 times
  • 1.  Forcing logon after Guest Self-Registration with Mac Caching

    Posted Jan 14, 2018 05:19 PM

    I have setup Guest Self-Regisitration with MAC Caching using the Wizard.

     

    I have modfied it to send a text message to the user with their username and password.

     

    All that works great!

     

    However, I'd like to force the user to enter the username and password received via SMS before enabling MAC Caching, but I'm not sure how to do that.

     

    I tried creating a boolean GuestUser Attribute called "first_login" and modified the Role-Mappling and Enforcment polices to forcer the user back to the captive portal login page if it is set to TRUE, But I'm not sure where to set it to FALSE.

     

    Is their an easier way to setup this functionality?

     

    Thanks

    -Neil

     



  • 2.  RE: Forcing logon after Guest Self-Registration with Mac Caching

    EMPLOYEE
    Posted Jan 14, 2018 05:43 PM

    "mac caching" should only occur after the user logs in successfully.  What is your workflow?



  • 3.  RE: Forcing logon after Guest Self-Registration with Mac Caching

    Posted Jan 14, 2018 05:52 PM

    It's pretty much the standard workflow created by the Wizard, with the exception of sending  a receipt via SMS.

     

    Is there a way to modify the receipt page, so that instead of displaying the username and password, It asks for the username and password?

     

    -Neil

     



  • 4.  RE: Forcing logon after Guest Self-Registration with Mac Caching

    EMPLOYEE
    Posted Jan 14, 2018 05:58 PM

    See page 38 of the document here:  https://support.arubanetworks.com/Documentation/tabid/77/DMXModule/512/Command/Core_Download/Default.aspx?EntryId=10345

     

    Uncheck "Enable Login to a Guest Access Server"



  • 5.  RE: Forcing logon after Guest Self-Registration with Mac Caching

    Posted Jan 14, 2018 06:09 PM

    No that disables the ability to login to wireless via the captive portal completely.

     

    What I want is, instead of allowing the user to just click "login" button at the bottom of the receipt page, is to force the user back to the initial captive portal login page.

     

    -Neil

     



  • 6.  RE: Forcing logon after Guest Self-Registration with Mac Caching

    EMPLOYEE
    Posted Jan 14, 2018 09:47 PM

    I apologize.

     

    In receipt actions, Customize Self-Registration Form, you can try unchecking "Enable Download of Guest Receipt".



  • 7.  RE: Forcing logon after Guest Self-Registration with Mac Caching

    EMPLOYEE
    Posted Jan 16, 2018 05:38 PM

    You can send the user directly to the login page (skipping the receipt page) by adding this to the receipt page footer:

     

    <script type="text/javascript"><!--
    addLoadEvent(function() {ldelim}
    window.location.href='{$gsr_metadata.register_page|rawurlencode}_login.php?username={$username|rawurlencode}';
    {rdelim});
    //-->
    </script>


  • 8.  RE: Forcing logon after Guest Self-Registration with Mac Caching

    Posted Jan 17, 2018 01:10 PM

    I copied the code directly and it doesn't work. I just get stuck on the guest_receipt.php page.

     

    -Neil

     



  • 9.  RE: Forcing logon after Guest Self-Registration with Mac Caching

    EMPLOYEE
    Posted Jan 17, 2018 04:46 PM

    You put that on the receipt page?



  • 10.  RE: Forcing logon after Guest Self-Registration with Mac Caching

    Posted Jan 18, 2018 10:33 AM

    Yes.

     

    I am running a custom skin, could that be it.

     

    -Neil

     



  • 11.  RE: Forcing logon after Guest Self-Registration with Mac Caching

    Posted Jan 21, 2018 05:12 PM

    I tried with the default Galleria Skin, that didn't work either.

     

    -Neil

     



  • 12.  RE: Forcing logon after Guest Self-Registration with Mac Caching
    Best Answer

    Posted Jan 21, 2018 08:04 PM

    Try adding this in the receipt header, make sure you click to hide guest receipt contents

    {nwa_script src=jquery.min}

    {literal}

    <script>

    $(document).ready(function () {

        // Handler for .ready() called.

        window.setTimeout(function () {

            location.href = "guest_selfreg_login.php";

        }, 50)

    });

    </script>

    {/literal}

     

    Note: You need to change the guest_selfreg_login.php for your own login  page name