Wireless Access

Reply
Occasional Contributor I
Posts: 5
Registered: ‎12-09-2015

Clearpass - Expired accounts loop after renewal (Mac -Auth)

[ Edited ]

When registering for the network with an expired account you get redirected back to the registration page (after successful registration) when you try to browse to a website.  The only way to get it to work from a user standpoint is to disconnect from the network and reconnect, then it's fine.

 

New accounts do not have this issue. After registration you can start to browse without problem.

 

The fix I have right now is to delete the accounts set to expire, so the mac address is treated as new and the looping issue won't occur.

 

Jordan Guthrie

MVP
Posts: 4,309
Registered: ‎07-20-2011

Re: Clearpass - Expired accounts loop after renewal (Mac -Auth)

Try to include a delay of 5-10 on the page and see if that helps
Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
Occasional Contributor I
Posts: 5
Registered: ‎12-09-2015

Re: Clearpass - Expired accounts loop after renewal (Mac -Auth)

I'm on Clearpass Guest - Configuration - Pages - Guest Self-Registrations

 

I'm on the last Submit/Redirect portion.  I tried the login delay at 5 seconds, and the update endpoint option under Post-Authentication.  For some reason the account is still not being updated until a new connection is made.

 

Could it be something wrong with my service in policy manager?

Occasional Contributor I
Posts: 5
Registered: ‎12-09-2015

Re: Clearpass - Expired accounts loop after renewal (Mac -Auth)

 Authentication source attributes:

 

Filter

 SELECT user_credential(password) AS User_Password,
       CASE WHEN enabled = FALSE THEN 225
            WHEN ((expire_time is not null AND expire_time <= now())) THEN 226
            ELSE 0
       END AS Account_Status, sponsor_name,
       CASE WHEN expire_time > now() THEN CAST(EXTRACT(epoch FROM (expire_time - NOW())) AS INTEGER)
            ELSE 0
       END AS remaining_expiration
FROM tips_guest_users
WHERE ((guest_type = 'DEVICE') AND (user_id = UPPER('%{Connection:Client-Mac-Address-Hyphen}')))

 

Attributes:

NameAlias NameData typeEnabled as
 1. sponsor_nameSponsorNameString-
 2. remaining_expirationRemainingExpirationInteger-
 3. account_statusAccountStatusInteger-

Could it be something wrong in this?

Search Airheads
Showing results for 
Search instead for 
Did you mean: