Security

 View Only
Expand all | Collapse all

Hidden field "epire_after" in ClearPass guest self-registration form

This thread has been viewed 21 times
  • 1.  Hidden field "epire_after" in ClearPass guest self-registration form

    Posted Nov 01, 2021 03:05 PM
    Edited by Ahmad Enaya Nov 01, 2021 03:16 PM
    in Aruba self-registration form, there one default field "expire_after" which has the initial value of 24 hours. This field is hidden so guest users dont see the field in web page, but they can still see the field and its value when they view the source of this page.


    some customers are concerned about the possibility of guest users modifying this filed and sending post command to ClearPass with different value not approved by administrator.




    ------------------------------
    Ahmad Enaya
    ------------------------------


  • 2.  RE: Hidden field "epire_after" in ClearPass guest self-registration form

    Posted Nov 02, 2021 05:07 AM

    Hi Ahmad, 

    Please check the following link:

    https://community.arubanetworks.com/community-home/digestviewer/viewthread?MID=26535



    ------------------------------
    Nitesh Singla
    ------------------------------