Everything is in place, yet the 7005 log shows the following:
Oct 7 00:01:49 authmgr[3359]: <199802> <3359> <ERRS> |authmgr| auth_cppm.c, auth_cppm_transform_writebuf:1926: Dldb Role ROLE_AOS_MC_DUR_CAPTIVE-3056-37: Rejected line '^Idefault-guest-role cppmrole', contains unsupported keyword
Oct 7 00:01:49 authmgr[3359]: <199802> <3359> <ERRS> |authmgr| auth_cppm.c, auth_cppm_transform_writebuf:1926: Dldb Role ROLE_AOS_MC_DUR_CAPTIVE-3056-37: Rejected line '^Idefault-role cppmrole', contains unsupported keyword
Oct 7 00:01:49 authmgr[3359]: <199802> <3359> <ERRS> |authmgr| auth_cppm.c, auth_cppm_transform_writebuf:1926: Dldb Role ROLE_AOS_MC_DUR_CAPTIVE-3056-37: Rejected line '^Ilogin-page https://clearpass.local/guest/quarantined.php?m=112f2ec63371460a9eaaddcccdf6a8', contains unsupported keyword
Oct 7 00:01:49 authmgr[3359]: <199802> <3359> <ERRS> |authmgr| auth_cppm.c, auth_cppm_transform_writebuf:1926: Dldb Role ROLE_AOS_MC_DUR_CAPTIVE-3056-37: Rejected line '^Ino enable-welcome-page', contains unsupported keyword
Oct 7 00:01:49 authmgr[3359]: <199802> <3359> <ERRS> |authmgr| auth_cppm.c, auth_cppm_transform_writebuf:1926: Dldb Role ROLE_AOS_MC_DUR_CAPTIVE-3056-37: Rejected line '^Ino logout-popup-window', contains unsupported keyword
Oct 7 00:01:49 authmgr[3359]: <199802> <3359> <ERRS> |authmgr| auth_cppm.c, auth_cppm_transform_writebuf:1926: Dldb Role ROLE_AOS_MC_DUR_CAPTIVE-3056-37: Rejected line '^Ino user-logon', contains unsupported keyword
Oct 7 00:01:49 authmgr[3359]: <199802> <3359> <ERRS> |authmgr| auth_cppm.c, auth_cppm_transform_writebuf:1926: Dldb Role ROLE_AOS_MC_DUR_CAPTIVE-3056-37: Rejected line '^Iwhite-list clearpass.local', contains unsupported keyword
Oct 7 00:01:49 authmgr[3359]: <199802> <3359> <ERRS> |authmgr| auth_cppm.c, auth_cppm_transform_writebuf:1926: Dldb Role ROLE_AOS_MC_DUR_CAPTIVE-3056-37: Rejected line 'aaa authentication captive-portal CLEARPASS-MACTRAC', contains unsupported keyword
Oct 7 00:01:49 authmgr[3359]: <199802> <3359> <ERRS> |authmgr| auth_cppm.c, auth_cppm_transform_writebuf:1954: Dldb Role ROLE_AOS_MC_DUR_CAPTIVE-3056-37: processing stopped due to whitelist violation
Oct 7 00:01:49 authmgr[3359]: <199802> <3359> <ERRS> |authmgr| auth_cppm_fsm.c, ac_afsm_exec_transform:433: Dldb Role ROLE_AOS_MC_DUR_CAPTIVE-3056-37: Transform failed
Dldb Role: ROLE_AOS_MC_DUR_CAPTIVE-3056-37 Cannot be assigned downloadable role, role is in error state
The role Clearpass generates for the 7005 is the following:
netdestination clearpass.local
host 192.168.8.1
!
aaa authentication captive-portal CLEARPASS-MACTRAC
default-role cppmrole
default-guest-role cppmrole
no user-logon
no logout-popup-window
login-page https://clearpass.local/guest/quarantined.php?m=112f2ec63371460a9eaaddcccdf6a8
no enable-welcome-page
white-list clearpass.local
!
user-role cppmrole
vlan 2010
reauthentication-interval 10
captive-portal CLEARPASS-MACTRAC
!