Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

Clearpass Guest Users Disabled but still able to login

This thread has been viewed 4 times

  • 1.  Clearpass Guest Users Disabled but still able to login

    Posted Jul 23, 2019 05:46 AM

    Hello,

     

    In my clearpass installation, i have a bunch of local users in the guest repository, the have been successfully onboarded. However when trying to disable an account, it is still successfully login to the wireless.

     

    Any clue why is that ?

     

    in the service , the 2 conditions for the authentication is to be authenticated and RemainingExpiration is greater than 0.



  • 2.  RE: Clearpass Guest Users Disabled but still able to login

    Posted Jul 23, 2019 09:27 AM
    Do you have the guest user repository defined as an authorization source ?

    Sent from Mail for Windows 10


  • 3.  RE: Clearpass Guest Users Disabled but still able to login

    Posted Jul 31, 2019 03:41 AM

    I have guest user repository as an authorization source.

     

    and I do check access tracker and they are authenticating using the same service which they normally authenticate when the account is active.



  • 4.  RE: Clearpass Guest Users Disabled but still able to login

    Posted Jul 31, 2019 05:18 AM

    Can you share the role mapping and enforcement policy of the service they hit on?



  • 5.  RE: Clearpass Guest Users Disabled but still able to login

    EMPLOYEE
    Posted Jul 23, 2019 10:08 AM

    I understand that even after disabling account in Guest user repository still user able to authenticate? Have you checked access tracker log and see which service and authentication/authorization source it is using ?