Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

Sponsor lookup without populated pulldown

This thread has been viewed 1 times
  • 1.  Sponsor lookup without populated pulldown

    Posted Nov 04, 2019 01:27 PM

    Hello,

    Our access to the guest network must be approved by the sponsor.
    Currently it works based on ldap and drop down list,
    Since the security policy has changed, I would like to change the form from "multiple selection list" to "TEXT Field".
    Only when I change the Sponsor_lookup user interface to TEXT Field, it shows "Array" in the window and doesn't search for LDAP users.

    Any suggestions?
    Attached: LDAP configuration in CPASS
    Please help.

     

    Best Regards.



  • 2.  RE: Sponsor lookup without populated pulldown

    EMPLOYEE
    Posted Nov 04, 2019 04:32 PM

    What it sounds like you want is to revert to the original email-based sponsoring.

    Remove sponsor_lookup.

    Keep/add sponsor_email.

    In Display Attributes add a line pointing to the right ID field.  Generally this will be "mail = id" or "email = id" - whatever your preferred email field is.  This is the hack to get the new lookups to act like the old.

    Your filter will solely be the URL itself.  The one with @SEARCH@ only exists to populate the list and works in conjunction with the filter in the URL.



  • 3.  RE: Sponsor lookup without populated pulldown

    Posted Nov 05, 2019 10:31 AM
      |   view attached

    Hi,
    Thank you for your answer,

    I added the "Validator Argument" in the "sponsor_email" form:
    array (
       'allow' =>
       array (
         0 => 'domain.com',
       )
       'deny' =>
       array (
         0 => '*',
       )
    )

    I changed the URL serer as you wrote and added "display Attributes" - email = id. (screenshot attached)

    It now works so that everyone who has the @ domain.com email address are "sponsor", and can accept internet access for the guest.
    I would like it to work based on the AD group.

    I will be grateful for any suggestions.



  • 4.  RE: Sponsor lookup without populated pulldown

    Posted Nov 06, 2019 07:50 AM

    Any suggestions? :)

     

    Best Regards.