Security

Reply
Contributor II
Posts: 53
Registered: ‎11-24-2014

Post-Auth Endpoint Attribute Delete

Is there a way with a post-authentication enforcement profile to delete an existing attribute rather than update it to a different value?

Guru Elite
Posts: 8,456
Registered: ‎09-08-2010

Re: Post-Auth Endpoint Attribute Delete

[ Edited ]

No, but you can set it to null or 0.


Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Contributor II
Posts: 53
Registered: ‎11-24-2014

Re: Post-Auth Endpoint Attribute Delete

If it is a string field, say "Username", wouldn't that just set the username to "null" or "0"?

Guru Elite
Posts: 8,456
Registered: ‎09-08-2010

Re: Post-Auth Endpoint Attribute Delete

Yes, it would.

 

You could potentially make an API call back to ClearPass to remove the attribute. 


Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Community Administrator
Posts: 33
Registered: ‎11-01-2012

Re: Post-Auth Endpoint Attribute Delete

There's no way to delete an attribute, other than through the GUI. As Tim pointed out, you can only replace the value of an attribute with another value of the same type. This goes for the API as well.

Search Airheads
Showing results for 
Search instead for 
Did you mean: