Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

Guest Account created by who?

This thread has been viewed 1 times

  • 1.  Guest Account created by who?

    Posted May 26, 2014 04:08 AM

    Hi,

     

    I would like to find out whitch guest administrator created the specific guest user.

    How can I do that?

     

    Aruba3200

    6.3.1.5

     

    Thanks!



  • 2.  RE: Guest Account created by who?

    Posted May 26, 2014 05:19 AM

    try to see it with this command:

     

    show audit-trail

     

    via CLI

     


    If you want to see what commands other people have done when configuring a controller, then you can use the "show audit-trail" command.
    This command will give you a log trace of all the commands performed by all the system administrators, when it was done and what it was. I strongly recommend you provision management authentication against an external server because this way you can automatically trust the user name present. If everyone always uses "admin" then you have no idea who actually did the command.
    Here is an example:
    (Greig) #show audit-trail 10
    Jul 12 02:29:40 fpcli: USER:admin@172.19.2.250 COMMAND:
    Jul 12 02:45:27 fpcli: USER: admin connected from 172.19.2.250 has logged out.
    Jul 12 03:34:54 fpcli: USER:admin@172.19.2.244 COMMAND:
    Jul 12 03:34:56 fpcli: USER:admin@172.19.2.244 COMMAND:
    Jul 12 03:35:04 fpcli: USER:admin@172.19.2.244 COMMAND:
    Jul 12 03:36:09 fpcli: USER:admin@172.19.2.244 COMMAND:
    Jul 12 03:36:16 fpcli: USER:admin@172.19.2.244 COMMAND:
    Jul 12 03:36:21 fpcli: USER:admin@172.19.2.244 COMMAND:
    Jul 12 03:36:26 fpcli: USER:admin@172.19.2.244 COMMAND:
    Jul 12 03:52:20 fpcli: USER: admin connected from 172.19.2.244 has logged out.

     



  • 3.  RE: Guest Account created by who?
    Best Answer

    Posted May 26, 2014 05:23 AM

    Hi,

     

    thx for the answer.

    I found the sollution, it displays the generator name...

    show local-userdb-guest