Security

Hello -

I am trying to tie in a TrippLite SNMPWEB card with ClearPass RADIUS authentication.

I've imported the dictionary in ClearPass, and have been able to log into my device.  My problem is that ClearPass is not repsonding with the TrippLite attributes that will give read/write access to the device.

Any thoughts about how this was implemented?

Here's the implementation:

ClearPass Policy Manager v6.2.2.56621
TrippLite SNMPWEBCard Firmware v12.06.0061

TrippLite Dictionary requirements in Free Radius format

TrippLite Dictionary redefined in ClearPass XML

TrippLite Dictonary Imported

ClearPass Enforcement Policy

Access Tracker Results w/ Radius Response (no TrippLite-Authorization).

Errors in the access tracker log:

2014-04-03 16:40:53,622     [RequestHandler-1-0x7f864cbe5700 h=642781 c=R0000000c-01-533de375] ERROR Common.RadiusDictTable - No Dictonary for VendorId = 850
2014-04-03 16:40:53,622     [RequestHandler-1-0x7f864cbe5700 h=642781 c=R0000000c-01-533de375] ERROR Common.RadiusVendorAttrMap - Invalid attribute Id=1 Vendor=TrippLite
2014-04-03 16:40:53,622     [RequestHandler-1-0x7f864cbe5700 h=642781 c=R0000000c-01-533de375] ERROR Common.BaseRadiusEnfProfileCacheObj - Failed to insert Vendor=TrippLite attrId=1 Value="default=rw"



Thanks in advance for any guidance/feedback,

Did you restart your clearpass (i believe the radius server service is enough) after editing/adding your custom radius dictionary?

Messing with the dictionaries requires a restart if I remember correctly.

Thank you.  That did the trick!

     Awesome post here with lots of good info.

     I've added a new attribute to your TrippLite UPS dictionary file:

<TipsContents xmlns="http://www.avendasys.com/tipsapiDefs/1.0">
<TipsHeader exportTime="Wed Apr 02 16:51:19 MDT 2014" version="6.2"/>
<Dictionaries>
<Vendor vendorEnabled="true" prefix="TrippLite" name="Radius:TrippLite" id="850">
<RadiusAttributes>
<Attribute profile="in out" type="String" name="TrippLite-Authorization" id="1"/>
<Attribute profile="in out" type="String" name="TrippLite-Outlet-Realms" id="2"/>
<Attribute profile="in out" type="String" name="TrippLite-Message" id="3"/>
<Attribute profile="in out" type="String" name="TrippLite-User-Role" id="4"/>
</RadiusAttributes>
</Vendor>
</Dictionaries>
</TipsContents>

     I've also used a dictionary for APC UPSs.