Security

Reply
Contributor II

Failed to get value for attributes=[Role_Name]

hi all,

 

i have new environment with LDAP as authentication source,

 

user already can connect to network with user LDAP, get ip, correct dns, and can browsing,

 

but in access tracker showing "Failed to get value for attributes=[Role_Name]"

 

anyone have same issue or know how to solve it ?

Guru Elite

Re: Failed to get value for attributes=[Role_Name]

See if the post here:  https://community.arubanetworks.com/t5/Security/Failed-to-get-value-for-attributes-during-profiling/td-p/206625 answers your question.

 

 


*Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.*
ArubaOS 8.4 User Guide
InstantOS 8.3 User Guide
Airheads Knowledgebase
Airheads Learning Videos
Aruba Central Documentation
Sign up for Security Alerts
Aruba Technical Webinars
Contributor II

Re: Failed to get value for attributes=[Role_Name]

dear cjoseph,

 

i'm already set ip helper in all vlan in controller pointing to ip clearpass,

 

already enable rfc in controller and enable radius coa in clearpass,

 

anything else ?

Guru Elite

Re: Failed to get value for attributes=[Role_Name]

Do the devices with the problem have profiler information in the Endpoints database?  Please read through the rest of the thread to ensure your devices are getting profiled.


*Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.*
ArubaOS 8.4 User Guide
InstantOS 8.3 User Guide
Airheads Knowledgebase
Airheads Learning Videos
Aruba Central Documentation
Sign up for Security Alerts
Aruba Technical Webinars
Highlighted
Contributor II

Re: Failed to get value for attributes=[Role_Name]

Dear cjoseph,

 

yep, its already automated profiled in clearpass

 

Screenshot (694).png

Contributor II

Re: Failed to get value for attributes=[Role_Name]

and its not happening with local user clearpass

 

Screenshot (695).pngScreenshot (696).pngScreenshot (697).png

Occasional Contributor I

Re: Failed to get value for attributes=[Role_Name]

I believe you have setup service to use this Role name attribute in role evaluation or policy evaluation. Would it be possible to export access tracker and attach here to verify service config?

 

Regards,

Pranav 

Contributor II

Re: Failed to get value for attributes=[Role_Name]

Dear Pdudakia

 

i'm sorry i didnt have screenshoot of access tracker one of user because i didnt visit the site today,

 

but i remember authorization atribute of user like this one :

 

"userDN : uid=suroto, ou=direktoratutama, dc=hutamakarya"

 

attached screenshoot of role mapping and enforcement mapping

Screenshot (699).pngScreenshot (700).png

Contributor II

Re: Failed to get value for attributes=[Role_Name]

anyone sir ?

Contributor II

Re: Failed to get value for attributes=[Role_Name]

dear PDudakia,

 

attached the access tracker detail

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: