Security

Reply
Contributor I
Posts: 27
Registered: ‎10-31-2014

clear pass guest Manager lifetime Option

[ Edited ]

Hello,

 

I need user accounts wich follow :

 

- Never expire, but logout after 24h lifetime

- 24h lifetime after first login

 

We use this for guests all the time just activate again after use.

 

I have accounts with expire_postlogin of 24h, but after the first login the account reset the value to 0 and is never expire.

 

Can someone help?

 

Thank you

Regular Contributor II
Posts: 226
Registered: ‎03-03-2011

Re: clear pass guest Manager liftime Option

I assume you have set the value as 60 (the option is specified in minutes) and not 24h?

 

Can you post a screenshot of the form field?

David
ACDX #98 | ACMP | ACCP
Contributor I
Posts: 27
Registered: ‎10-31-2014

Re: clear pass guest Manager liftime Option

[ Edited ]

Yes is set to 2 minutes for testing.

Could it be something with enforcement?

After the account log


 

Regular Contributor II
Posts: 226
Registered: ‎03-03-2011

Re: clear pass guest Manager liftime Option

On you Clearpass service which authenticates the web logins, do you have a post authentication enforcement profile configured with the attributes as shown below:

 

Capture.JPG

David
ACDX #98 | ACMP | ACCP
Contributor I
Posts: 27
Registered: ‎10-31-2014

Re: clear pass guest Manager liftime Option

Yes I have:

 

service.PNG

Regular Contributor II
Posts: 226
Registered: ‎03-03-2011

Re: clear pass guest Manager liftime Option

Can you post a screenshot of the account details after the first login has taken place to compare with the details from the inital account creation.

Thanks

David
ACDX #98 | ACMP | ACCP
Contributor I
Posts: 27
Registered: ‎10-31-2014

Re: clear pass guest Manager liftime Option

I think the enforcement didn´t published correctly?

 

account^1.PNG

Contributor I
Posts: 27
Registered: ‎10-31-2014

Re: clear pass guest Manager liftime Option

Now they don´t lose the liftime seeting again, bute they still active over 5 minutes.....

 

after login.PNG

Contributor I
Posts: 27
Registered: ‎10-31-2014

Re: clear pass guest Manager liftime Option

[ Edited ]

Now I have the expire time update.

but expiry action two times and didn´t log out.

Is the do expire right?-Attached

 

update expire.PNG

Contributor I
Posts: 27
Registered: ‎10-31-2014

Re: clear pass guest Manager liftime Option

[ Edited ]

Hello community,

 

I found something confused.

 

I can edit the lifetime option for some user accounts and it works, but for other not.

The only diffrent of this Accounts:

- Create with guest: Liftime edit working

- Create with multi: Liftime didn´t work

- Imported: Liftime didn´t work

 

Can someone explain me that?

 

Regards,

 

Marco

Search Airheads
Showing results for 
Search instead for 
Did you mean: