Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

Is it possible to change the contents of the airgroup_shared_user attribute via the ClearPass API ?

This thread has been viewed 0 times
  • 1.  Is it possible to change the contents of the airgroup_shared_user attribute via the ClearPass API ?

    Posted May 28, 2019 10:14 AM

    I'm looking for a quick easy way to change the number of userids that might be in the "airgroup_shared_user" attribute associated with an airgroups server device.

    Know I can log on as admin and change things, but was thinking more of an API thing  Usage scenario

     

    Chromecast device conected to monitor with a MDM managed tablet running a "registration" app below it.

     

    group of people wishing to cast to display enter their userids in the registration app which adds them to the airgroup_shared_user attribute.

     

    would be cool if the app could use the ClearPass API to manage this ....

     

    Failing that guess a ClearPass web page with limited access would do the job .. 

     

    A



  • 2.  RE: Is it possible to change the contents of the airgroup_shared_user attribute via the ClearPass API ?

    EMPLOYEE
    Posted May 28, 2019 10:22 AM
    Yes. All device registration fields are available via the REST API.


  • 3.  RE: Is it possible to change the contents of the airgroup_shared_user attribute via the ClearPass API ?

    Posted May 28, 2019 10:42 AM

    Can you remind be where to get the REST API docs from ? Assuming its not the API stack you access from ClearPass guest

    A



  • 4.  RE: Is it possible to change the contents of the airgroup_shared_user attribute via the ClearPass API ?

    EMPLOYEE
    Posted May 28, 2019 10:45 AM
    https://fqdn/api-docs


  • 5.  RE: Is it possible to change the contents of the airgroup_shared_user attribute via the ClearPass API ?

    Posted May 28, 2019 10:52 AM

    Ah! 

    Thats where I was looking before, couldn't see anything to manage airgroup_shared_user

     

    Then again, do you just use the generic manage attribute api and specify the name of the attribute you want to change?

    A



  • 6.  RE: Is it possible to change the contents of the airgroup_shared_user attribute via the ClearPass API ?

    EMPLOYEE
    Posted May 28, 2019 10:55 AM
    I don’t understand the question. You use the Device API.


  • 7.  RE: Is it possible to change the contents of the airgroup_shared_user attribute via the ClearPass API ?

    Posted May 28, 2019 11:18 AM
      |   view attached

    No airgroup_shared_user  under GuestManager/Device

     

     



  • 8.  RE: Is it possible to change the contents of the airgroup_shared_user attribute via the ClearPass API ?
    Best Answer

    EMPLOYEE
    Posted May 28, 2019 11:31 AM
    Do a GET and you’ll see it.


  • 9.  RE: Is it possible to change the contents of the airgroup_shared_user attribute via the ClearPass API ?

    Posted May 28, 2019 11:56 AM

    Doh! 

    o.k. u mean actualy do a GET and not  look at the options on the help part of the page ... 

    so the response body in this  case returns

     

      "id": "3217",
      "username": "F4-F5-D8-AC-02-30",
      "start_time": 1553611525,
      "expire_time": 1585147525,
      "sponsor_name": "as1558",
      "sponsor_profile": "16",
      "enabled": true,
      "current_state": "active",
      "notes": "",
      "role_name": "[Guest]",
      "role_id": 2,
      "mac": "F4-F5-D8-AC-02-30",
      "mac_auth": true,
      "source": "mac_create",
      "source2": "mac_create_2",
      "do_expire": "1",
      "no_portal": "1",
      "create_time": 1553611525,
      "no_password": "1",
      "remote_addr": "10.241.88.85",
      "visitor_name": "as1558-chromecastvideo",
      "airgroup_enable": "1",
      "airgroup_shared": "1",
      "expire_postlogin": "0",
      "simultaneous_use": "1",
      "airgroup_device_type": "24",
      "airgroup_shared_user": "as1558",
      "sponsor_profile_name": "UoY Game Console Registration",
      "_links": {
        "self": {
          "href": "https://clearpass1old.york.ac.uk/api/device/3217"
        }
      }
    }


  • 10.  RE: Is it possible to change the contents of the airgroup_shared_user attribute via the ClearPass API ?

    Posted May 28, 2019 12:00 PM

    and yes I can change the value of airgroup_shared_user to whatever I like

     

    Many thanks 

     

    Rgds

    A



  • 11.  RE: Is it possible to change the contents of the airgroup_shared_user attribute via the ClearPass API ?

    EMPLOYEE
    Posted May 28, 2019 03:22 PM

    A GET to get the original and then you can PATCH back to /api/guest/THE_ID: '{"airgroup_shared_user": "UPDATED_VALUE"}'