Security

last person joined: 22 hours ago 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

Post-Auth Endpoint Attribute Delete

This thread has been viewed 4 times

  • 1.  Post-Auth Endpoint Attribute Delete

    Posted Dec 02, 2016 11:04 AM

    Is there a way with a post-authentication enforcement profile to delete an existing attribute rather than update it to a different value?



  • 2.  RE: Post-Auth Endpoint Attribute Delete

    EMPLOYEE
    Posted Dec 02, 2016 11:05 AM

    No, but you can set it to null or 0.



  • 3.  RE: Post-Auth Endpoint Attribute Delete

    Posted Dec 02, 2016 11:07 AM

    If it is a string field, say "Username", wouldn't that just set the username to "null" or "0"?



  • 4.  RE: Post-Auth Endpoint Attribute Delete

    EMPLOYEE
    Posted Dec 02, 2016 11:24 AM

    Yes, it would.

     

    You could potentially make an API call back to ClearPass to remove the attribute. 



  • 5.  RE: Post-Auth Endpoint Attribute Delete

    Posted Dec 02, 2016 08:09 PM

    There's no way to delete an attribute, other than through the GUI. As Tim pointed out, you can only replace the value of an attribute with another value of the same type. This goes for the API as well.