Security

Reply
MVP
Posts: 721
Registered: ‎03-25-2009

returning %{GuestUser:role_id} as aruba-user-role?

Anyone that can provide the answer to this one?

 

Say we have created a guest user with role_id=1.

This role_id of 1 as mapped to the value employee

 

Is there a way to have clearpass return an aruba-user-role with that alfanumeric value instead of the numeric value? Returning %{GuestUser:role_id} gives the numeric value.

Koen (ACMX #351 | ACDX #547 | ACCP)

-- Found something helpful, important, or cool? Click the Kudos Star in a post.
-- Problem Solved? Click "Accept as Solution" in a post.
Guru Elite
Posts: 8,168
Registered: ‎09-08-2010

Re: returning %{GuestUser:role_id} as aruba-user-role?

You'd have to write rules that statically return the value.

 

Guest Role ID = 1, return enforcement profile: aruba-user-role: guest

Guest Role ID = 2, return enforcement profile: aruba-user-role: employee


Tim Cappalli | Aruba ClearPass TME
@timcappalli | ACMX #367 / ACCX #480 / ACEAP / CWSP
MVP
Posts: 721
Registered: ‎03-25-2009

Re: returning %{GuestUser:role_id} as aruba-user-role?

You're positive?

Bah! I was hoping I could shortcut a dozen conditions and profiles somehow here..

Koen (ACMX #351 | ACDX #547 | ACCP)

-- Found something helpful, important, or cool? Click the Kudos Star in a post.
-- Problem Solved? Click "Accept as Solution" in a post.
Guru Elite
Posts: 8,168
Registered: ‎09-08-2010

Re: returning %{GuestUser:role_id} as aruba-user-role?

You can make it more automated for a MAC-cache, but for the initial web-login, you'll have to map the role ID to a user-role.


Tim Cappalli | Aruba ClearPass TME
@timcappalli | ACMX #367 / ACCX #480 / ACEAP / CWSP
Search Airheads
Showing results for 
Search instead for 
Did you mean: