Security

hi all,

i have new environment with LDAP as authentication source,

user already can connect to network with user LDAP, get ip, correct dns, and can browsing,

but in access tracker showing "Failed to get value for attributes=[Role_Name]"

anyone have same issue or know how to solve it ?

See if the post here:  https://community.arubanetworks.com/t5/Security/Failed-to-get-value-for-attributes-during-profiling/td-p/206625 answers your question.

dear cjoseph,

i'm already set ip helper in all vlan in controller pointing to ip clearpass,

already enable rfc in controller and enable radius coa in clearpass,

anything else ?

Do the devices with the problem have profiler information in the Endpoints database?  Please read through the rest of the thread to ensure your devices are getting profiled.

Dear cjoseph,

yep, its already automated profiled in clearpass

and its not happening with local user clearpass

I believe you have setup service to use this Role name attribute in role evaluation or policy evaluation. Would it be possible to export access tracker and attach here to verify service config?

Regards,

Pranav 

Dear Pdudakia

i'm sorry i didnt have screenshoot of access tracker one of user because i didnt visit the site today,

but i remember authorization atribute of user like this one :

"userDN : uid=suroto, ou=direktoratutama, dc=hutamakarya"

attached screenshoot of role mapping and enforcement mapping

anyone sir ?

dear PDudakia,

attached the access tracker detail

Attachment(s)

access tracker detail.zip   9 KB 1 version