Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

Disable "Admin" account

This thread has been viewed 10 times
  • 1.  Disable "Admin" account

    Posted Apr 25, 2016 04:41 AM

    Hi,

     

    It is possible to disable admin account ? and only authentification by AD work ? (for ClearPass Management)



  • 2.  RE: Disable "Admin" account

    EMPLOYEE
    Posted Apr 25, 2016 05:27 AM

    On the commandline, you can use "mgmt-user localauth-disable" to disable management users if there is a response from the radius or TACACS server:  http://www.arubanetworks.com/techdocs/ArubaOS_6.4.4.x_WebHelp/Web_Help_Index.htm#ArubaFrameStyles/1CommandList/mgmt-user.htm?Highlight=localauth-disable

     

    Unchecking "Allow Local Authentication"on the GUI under Configuration> Management> Administration is the same parameter and will disable local management users whenever there is a response from a radius or TACACS server when logging into the management interface.

    Screenshot 2016-04-25 at 04.22.32.png



  • 3.  RE: Disable "Admin" account

    Posted Apr 25, 2016 05:57 AM

    Sorry, i have forget to say but i want to remove the admin account on CPPM...

     

    I already known for Aruba Controller !



  • 4.  RE: Disable "Admin" account
    Best Answer

    EMPLOYEE
    Posted Apr 25, 2016 05:59 AM
    No, this is not possible.


  • 5.  RE: Disable "Admin" account

    Posted Apr 26, 2016 04:17 AM

    Thanks for confirmation !



  • 6.  RE: Disable "Admin" account

    Posted Jan 26, 2023 10:18 PM
    Dear @cappalli,

    is there any formal document from hpe aruba for this case ?​

    ------------------------------
    BR,

    Hudaya
    ------------------------------



  • 7.  RE: Disable "Admin" account

    EMPLOYEE
    Posted Jan 26, 2023 11:32 PM
    this is 7  year old post.
    Please create a new post for your question

    ------------------------------
    If my post was useful accept solution and/or give kudos.
    Any opinions expressed here are solely my own and not necessarily that of HPE or Aruba.
    ------------------------------