Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

How to Write an Ajax Code in the Login page to read the Unique Device Count from the Endpoint.

This thread has been viewed 5 times

  • 1.  How to Write an Ajax Code in the Login page to read the Unique Device Count from the Endpoint.

    Posted Nov 07, 2016 10:48 AM

    Hi Team,

     

    Any one has any idea if we can write an Ajax Code in the Login page that will return the Unique device count Value from the Endpoint and if it equals a certain value the Login page will display a message (for example: This Mobile Number is already registered with another device).

     

    The Case is that the customer allow the user to register his mobile number with one device and if he/she tried to use the same credentials on another device the login page will prompt him/her a message.

     

     



  • 2.  RE: How to Write an Ajax Code in the Login page to read the Unique Device Count from the Endpoint.

    Posted Nov 10, 2016 06:18 AM

    How about thinking about this problem in another way.

     

    You could just enforce that the guest username is their phone number and restrict the session limit to 1.



  • 3.  RE: How to Write an Ajax Code in the Login page to read the Unique Device Count from the Endpoint.

    EMPLOYEE
    Posted Nov 10, 2016 07:32 AM
    @Interceptor wrote:

    Hi Team,

     

    Any one has any idea if we can write an Ajax Code in the Login page that will return the Unique device count Value from the Endpoint and if it equals a certain value the Login page will display a message (for example: This Mobile Number is already registered with another device).

     

    The Case is that the customer allow the user to register his mobile number with one device and if he/she tried to use the same credentials on another device the login page will prompt him/her a message.

     

     

    If your goal is to notify a guest user that he has exceeded his limit, starting in ArubaOS 6.5.0.0 you can customize the "Reply-Message" radius attribute which will send a message to users upon rejection or successful authentication:  http://www.arubanetworks.com/techdocs/ArubaOS/6.5.x.x/Default.htm#ReleaseNotes/FeaturesIn6.5.xReleases/Features6.5.x.htm?Highlight=Reply-Message.

     

    You can send the Reply-Message attribute in both successful:

    Screenshot 2016-11-10 at 06.28.19.png

     

    ..and unsuccessful radius authentication:

    Screenshot 2016-11-10 at 06.29.13.png

     

    This will add better context to rejects as well as successful authentications to Captive Portal.

     

    You can even debug what is sent:

    config t

    logging level debugging system process httpd subcat webserver

     

    For Auth Failure Logs from System Process

    Nov 4 02:49:16 :32674: <399828> <DBUG> |httpd| |webserver| aruba-login.c:612) User:2001:470:ed6c:0:a9ac:30c0:359e:903c - Auth result 1 reason Authentication failed, as password is wrong on server1

     

    For Auth Success Logs from System Process

    Nov 4 02:53:09 :922: <399828> <DBUG> |httpd| |webserver| aruba-login.c:740) User:2001:470:ed6c:0:a9ac:30c0:359e:903c - Internal welcome success message User has authenticated successfully from first server1



  • 4.  RE: How to Write an Ajax Code in the Login page to read the Unique Device Count from the Endpoint.

    Posted Nov 23, 2016 06:49 AM
    Thanks a lot that makes sense. Please do you have any idea from where i can customize it. Is its from Cleaprass: "Radius:IETF:Reply-Message" ? Or there is some options in the controller?


  • 5.  RE: How to Write an Ajax Code in the Login page to read the Unique Device Count from the Endpoint.

    Posted Dec 07, 2016 10:09 AM
    Thanks a lot that makes sense. Please do you have any idea from where i can customize it. Is its from Cleaprass: "Radius:IETF:Reply-Message" ? Or there is some options in the controller? Zahran, ACCP,ACMP,ASE