Security

 View Only
last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

ClearPass Guest Password Complexitiy

This thread has been viewed 15 times

  • 1.  ClearPass Guest Password Complexitiy

    Posted Jan 31, 2024 03:48 PM

    Hi,

    We are trying to setup two guest accounts, 1 with no password complexitiy 6 digits, 2nd with password complexitiy 24 random characters.

    we can create the accounts as we expected, but if we tried to "Reset Password" or "Edit", ClearPass always prefer password with no complexitiy.

    we did not modified any parameters under Guets Manager.

    are we missing something?

    Notes:

    1. duplicated the filed "random_password" to "random_password_complex" with this value to generate complex password array('generator' => 'NwaGuestManagerGenerateRandomPassword', 'generator_args' =>   array(array('random_password_length' => '24', 'random_password_method' => 'nwa_complex_password')))
    2. Filed "modify_password"  and included random_password_complex in the drop down list
    3. Form "guest_edit" and included random_password_complex 



    ------------------------------
    NHN
    ------------------------------


  • 2.  RE: ClearPass Guest Password Complexitiy

    Posted Feb 13, 2024 07:59 AM

    Not fully sure how you want this to behave, as you have the option to select which password type you want. What makes that an account will have a simple or complex password?

    What you probably could do is to use different Operator Profiles and lock one Operator Profile to simple passwords (or give the option like you now have) and another to lock to complex passwords (or simple passwords). On the Operator profile you can select custom forms for create or edit user. With Operator profiles you can also prevent operators from editing guest accounts created by other users or another Operator Profile.

    As it is not fully clear to me what you exactly want, it may be best to work with Aruba Support to see if what you want can be done.



    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------

    Original Message