Tim, Thanks for your input.
The difference between shared devices and personal devices may be the source of my problem.
The intention was for staff to be able to login to ourclearpass.com/guest
and then register their own personal devices. It looks like what is happening is that some staff members are creating shared devices while others are creating personal devices. What I cant figure out is why when all users should be creating devices as AirGroup Operators. The default should be Personal Device.
Here is an example of a device created by a staff member (airgroup operator) that looks to have been created correctly.
Attribute Value
1. Create Time = 2014-02-06 12:58:22+00
2. Visitor Name = terry's reflector
3. [Role ID] = 2
4. airgroup_device_type = apple-tv
5. airgroup_enable = 1
6. airgroup_shared =
7. airgroup_shared_user = C12660
8. do_expire = 0
9. expire_postlogin = 0
10. http_user_agent = Mozilla/5.0 (Windows NT 6.1; rv:26.0) Gecko/20100101 Firefox/26.0
11. mac = 00-22-FA-E7-C7-F4
12. mac_auth = 1
13. no_password = 1
14. no_portal = 1
15. remote_addr = 10.231.33.24
16. simultaneous_use = 1
17. source = mac_create
18. source2 = airgroup_personal_create
19. sponsor_profile_name = AirGroup Operator
This device, also created by a staff member is not as expected. I have highlited what I thing are the problems.
It looks to me like that this device is a shared device even though it is in the personal device list.
Attribute Value
1. Create Time = 2014-01-17 12:33:39+00
2. Visitor Name = NEPE-Vocal Room Apple TV
3. [Role ID] = 2
4. airgroup_device_type = apple-tv
5. airgroup_enable = 1
6. airgroup_shared = 1
7. airgroup_shared_location =
8. airgroup_shared_role =
9. airgroup_shared_user =
10. do_expire = 0
11. expire_postlogin = 0
12. http_user_agent = Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_1) AppleWebKit/537.73.11 (KHTML, like Gecko) Version/7.0.1 Safari/537.73.11
13. mac = 5C-F9-38-BC-9C-2A
14. mac_auth = 1
15. no_password = 1
16. no_portal = 1
17. remote_addr = 10.14.38.5
18. simultaneous_use = 1
19. source = mac_create
20. source2 = airgroup_personal_create
21. sponsor_profile_name = AirGroup Operator
Finally, just so that I am clear on this.
An airgroup personal device is always available to its owner.
If no users are entered in the shared with field, only the owner can see the device in AirPlay. Correct?