Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

clear pass guest Manager lifetime Option

This thread has been viewed 0 times
  • 1.  clear pass guest Manager lifetime Option

    Posted Jul 31, 2015 06:10 AM

    Hello,

     

    I need user accounts wich follow :

     

    - Never expire, but logout after 24h lifetime

    - 24h lifetime after first login

     

    We use this for guests all the time just activate again after use.

     

    I have accounts with expire_postlogin of 24h, but after the first login the account reset the value to 0 and is never expire.

     

    Can someone help?

     

    Thank you



  • 2.  RE: clear pass guest Manager lifetime Option

    Posted Jul 31, 2015 06:34 AM

    I assume you have set the value as 60 (the option is specified in minutes) and not 24h?

     

    Can you post a screenshot of the form field?



  • 3.  RE: clear pass guest Manager lifetime Option

    Posted Jul 31, 2015 06:39 AM

    Yes is set to 2 minutes for testing.

    Could it be something with enforcement?

    After the account log


     



  • 4.  RE: clear pass guest Manager lifetime Option

    Posted Jul 31, 2015 06:42 AM

    On you Clearpass service which authenticates the web logins, do you have a post authentication enforcement profile configured with the attributes as shown below:

     

    Capture.JPG



  • 5.  RE: clear pass guest Manager lifetime Option

    Posted Jul 31, 2015 06:46 AM

    Yes I have:

     

    service.PNG



  • 6.  RE: clear pass guest Manager lifetime Option

    Posted Jul 31, 2015 07:01 AM

    Can you post a screenshot of the account details after the first login has taken place to compare with the details from the inital account creation.

    Thanks



  • 7.  RE: clear pass guest Manager lifetime Option

    Posted Jul 31, 2015 07:10 AM

    Now they don´t lose the liftime seeting again, bute they still active over 5 minutes.....

     

    after login.PNG



  • 8.  RE: clear pass guest Manager lifetime Option

    Posted Jul 31, 2015 07:22 AM
      |   view attached

    Now I have the expire time update.

    but expiry action two times and didn´t log out.

    Is the do expire right?-Attached

     

    update expire.PNG



  • 9.  RE: clear pass guest Manager lifetime Option

    Posted Aug 24, 2015 10:19 AM

    Hello community,

     

    I found something confused.

     

    I can edit the lifetime option for some user accounts and it works, but for other not.

    The only diffrent of this Accounts:

    - Create with guest: Liftime edit working

    - Create with multi: Liftime didn´t work

    - Imported: Liftime didn´t work

     

    Can someone explain me that?

     

    Regards,

     

    Marco



  • 10.  RE: clear pass guest Manager lifetime Option

    Posted Jul 31, 2015 07:04 AM

    I think the enforcement didn´t published correctly?

     

    account^1.PNG