Security

last person joined: 8 hours ago 

Enterprise security using ClearPass Policy Management, ClearPass Security Exchange, IntroSpect, VIA, 360 Security Exchange, Extensions and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

Explain the diffrent between Account Expiration to Account life time

  • 1.  Explain the diffrent between Account Expiration to Account life time

    Posted Jul 15, 2014 05:57 AM

    Hi Guys,

    When creating accounts via the guest manager.

    what is the diffrent between:

    Account Expiration

    to

    Account life time

     

    Please advise.

     

    (Expration = when the created guest account will be deleted/expire - iregadlress the usage)

    (Lifetime = when the account is used..when it will be over and deleted)

    Did i understand it right?

     

     



  • 2.  RE: Explain the diffrent between Account Expiration to Account life time

    Posted Jul 15, 2014 06:32 AM

    kdisc98,

     

    Account Expiration is the exact date and time an account expires.  It corresponds to the expiration_time (string), and the expire time (integer) parameter;

     

    expiration_time - String. Description of the account’s expiration time. This field is set when modifying an account. This field is available on the change_expiration and guest_enable forms. The value is generated from the do_expire, expire_time, expire_postlogin and expire_usage fields, and may be one of the following:

    * Account will expire at date andtime, or interval after first login, or after interval total usage
    * Account will expire at date andtime or interval after first login
    * Account will expire at date andtime or after interval total usage
    * Account will expire at date andtime
    * Expires interval after first login or after interval total usage
    * Expires interval after first login
    * Expires after interval total usage
    * No expiration time set

     

    expire_time - Integer. Time at which the account will expire. The expiration time should be specified as a UNIX timestamp.
    Setting an expire_time value also requires a non-zero value to be set for the do_expire field; otherwise, the account expiration time will not be used. Set this field to 0 to disable this account expiration timer.
    If the expire_timezone field is used in conjunction with expire_time and a time zone and date are selected, the date calculation is adjusted relative to the time zone.



    Account lifetime is an optional parameter where you can configure an account to expire X minutes or hours AFTER the user logs in.  It specfically corresponds to the expire_postlogin parameter (Account lifetime is the user-facing name for expire_postlogin).  If you want a user to only have 1 hour after he/she initially logs in, that is what you want

     

    Please look at https://<ip address of cppm>/guest/help/Default.htm#Configuration/BusinessLogicForAccountCreation.htm to see the specific business logic rules used whenever a guest account is created to shed some light on the processes needed to create the types guests you desire.  The perceived complexity is due to the many different types of guest logic that administrators need in their systems.

     

    I hope this even helps.