Security

Reply
MVP
Posts: 777
Registered: ‎03-25-2009

Guest / Tips device database

Pretty confused as to why the /tips endpoint repository and the /guest device database are separate.

 

I have a request from a customer to have an operator profile that allows removal of devices. We're currently allowing a limit on the number of devices a user may bring on the network. Unfortunatally its the /tips endpoint repository that's used to get this working. 

And I don't know of a way to allow operators access to just that bit.

Something like this would be easy if we could use the /guest device database  for this.

 

Is there a way to achieve what is requested here? Or am I missing something obvious here?

 

Koen (ACMX #351 | ACDX #547 | ACCP)

-- Found something helpful, important, or cool? Click the Kudos Star in a post.
-- Problem Solved? Click "Accept as Solution" in a post.
Guru Elite
Posts: 21,291
Registered: ‎03-29-2007

Re: Guest / Tips device database

Please download the CPPM 6.2 policy manager User Guide and search for "custom admin privileges"



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Guru Elite
Posts: 8,649
Registered: ‎09-08-2010

Re: Guest / Tips device database

Here is the custom role we use for our Help Desk.

 

This allows access to the following:

 

MONITORING

  Live Monitoring:

     - Access Tracker

     - Analysis & Trending

     - Endpoint Profiler

 

CONFIGURATION

  Identity:

     - Endpoints

     - Guest Users

 

 

 

<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<TipsContents xmlns="http://www.avendasys.com/tipsapiDefs/1.0">
  <TipsHeader exportTime="Wed Jan 08 14:55:46 EST 2014" version="6.2"/>
  <AdminPrivileges>
    <AdminPrivilege allowPasswords="true" accessType="FULL" name="Brandeis-HelpDesk" description="Role for Brandeis help desk">
      <AdminTask taskid="mon.li.ep">
        <AdminTaskAction type="RWD"/>
      </AdminTask>
      <AdminTask taskid="con.id.ep">
        <AdminTaskAction type="RWD"/>
      </AdminTask>
	  <AdminTask taskid="con.id.gu">
        <AdminTaskAction type="RWD"/>
      </AdminTask>
      <AdminTask taskid="mon.li.ad">
        <AdminTaskAction type="RWD"/>
      </AdminTask>
      <AdminTask taskid="mon.li.sp">
        <AdminTaskAction type="RWD"/>
      </AdminTask>
    </AdminPrivilege>
  </AdminPrivileges>
</TipsContents>

 


Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
MVP
Posts: 777
Registered: ‎03-25-2009

Re: Guest / Tips device database

Guess I did miss the obvious on this one. :smileyembarrassed:

 

thanks for the pointer but  I guess I'll have to check it out tomorrow Colin.

Currently ClearPass Policy Manager 6.2 User Guide from support site link goes here: https://d1x3hnhct7p62q.cloudfront.net/SupportSite/ProductionFiles/6265d2a4-9565-4e7d-8b3c-f7d6487e6e1f/Aruba_CPPM_User_Guide.pdf?Expires=1389212317&Signature=I7OGedJxllWUuUi7iZgFc0GSQEG1KuvZA5S~QcPoJodnp~n8ce0Ka6tPugsXhkJy~86IFZFCn3NsGCJI4ktaGuVg0b3I...

 

and gives me:

This XML file does not appear to have any style information associated with it. The document tree is shown below.
<Error>
<Code>AccessDenied</Code>
<Message>Access denied</Message>
</Error>
 
 
Tim, thanks a bunch for the example!
Koen (ACMX #351 | ACDX #547 | ACCP)

-- Found something helpful, important, or cool? Click the Kudos Star in a post.
-- Problem Solved? Click "Accept as Solution" in a post.
Guru Elite
Posts: 21,291
Registered: ‎03-29-2007

Re: Guest / Tips device database

http://support.arubanetworks.com/DOCUMENTATION/tabid/77/DMXModule/512/Command/Core_Download/Default.aspx?EntryId=11862

 

Please try that link above.



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

MVP
Posts: 777
Registered: ‎03-25-2009

Re: Guest / Tips device database

[ Edited ]

Same redirect to cloudfront and an access denied xml error.

No worries, I'll check it out tomorrow at work.

 

Koen (ACMX #351 | ACDX #547 | ACCP)

-- Found something helpful, important, or cool? Click the Kudos Star in a post.
-- Problem Solved? Click "Accept as Solution" in a post.
MVP
Posts: 777
Registered: ‎03-25-2009

Re: Guest / Tips device database

For those running into the same download issues:  these were caused by my HTTPS Everywhere plugin.

It forced the cloudfront.net link that housed the actual files to use https and apparently it didn't like that.

Koen (ACMX #351 | ACDX #547 | ACCP)

-- Found something helpful, important, or cool? Click the Kudos Star in a post.
-- Problem Solved? Click "Accept as Solution" in a post.
Search Airheads
Showing results for 
Search instead for 
Did you mean: