Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

Clearpass Guest repository format

This thread has been viewed 4 times

  • 1.  Clearpass Guest repository format

    Posted Nov 16, 2013 05:15 AM

    Does anyone know what format the guest database on Clearness is. Can this be queried using LDAP queries from other devices? I have a colleague that would like to explore the possibility of writing an app to query the guest user repository and process the results.



  • 2.  RE: Clearpass Guest repository format

    EMPLOYEE
    Posted Nov 16, 2013 07:07 AM
    @matt Finnie wrote:

    Does anyone know what format the guest database on Clearness is. Can this be queried using LDAP queries from other devices? I have a colleague that would like to explore the possibility of writing an app to query the guest user repository and process the results.

    It cannot be queried using LDAP, but a read-only copy can be made available over SQL by setting the appexternal password by going to Administration> Server Configuration> Cluster-Wide Settings> General> Appexternal password.  Any SQL program like pgadmin will be able to query it with the username appexternal and whatever password is set there.



  • 3.  RE: Clearpass Guest repository format

    EMPLOYEE
    Posted Nov 16, 2013 11:13 AM
    Does changing that password impact any internal ClearPass processes or is
    it exclusively for external access?


  • 4.  RE: Clearpass Guest repository format

    EMPLOYEE
    Posted Nov 16, 2013 12:53 PM
    It will have no affect on ClearPass unless you have a split cluster design, where you have used appexternal account and password to gather information from the other cluster.

    Keep in mind this account has limited access to the database.