Security

Reply
Occasional Contributor I

Update attribute value of endpoints when CPPM Publisher is down

I set an enforcement profile to update attributes value of endpoints using ClearPass OnGuard. 

For example, I made an attribute named "health status". And when OnGuard agent's status is healthy, the endpoint's "health status" is "Healthy".

 

 

Today, my CPPM server had some problem and so I turned off the publisher. 

Then, all services(RADIUS, TACACS, 802.1x, etc) worked well. But it couldn't update the "health status" of the endpoints. 

 

Now, I wonder if the subscriber can't update any attribute of endpoints.  

 

Thanks. 

Guru Elite

Re: Update attribute value of endpoints when CPPM Publisher is down

Only the publisher has write access to the database. The publisher should never be down.

| Tim Cappalli | Aruba Security | @timcappalli | timcappalli.me |

NOTE: Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba or Hewlett Packard Enterprise.

Re: Update attribute value of endpoints when CPPM Publisher is down

or you promote your subscriber as a publisher...
Pasquale Monardo | Senior Network Solutions Consultant
ACDX #420 | ACCA
[If you found my post helpful, please give kudos!]
Occasional Contributor I

Re: Update attribute value of endpoints when CPPM Publisher is down

Thanks, Tim.

 

But I made some services and role by these attributes.

Is there any recommendation if my publisher has the problem like today?

 

While I recover or troubleshoot my publisher, some services can't work unless the attributes are updated. 

Guru Elite

Re: Update attribute value of endpoints when CPPM Publisher is down

What exactly was happening with your publisher? Do you have a TAC case open?

| Tim Cappalli | Aruba Security | @timcappalli | timcappalli.me |

NOTE: Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba or Hewlett Packard Enterprise.
Occasional Contributor I

Re: Update attribute value of endpoints when CPPM Publisher is down

I did.
My publsher didn't answer from any requests.
And I found CPU load was nearly 100%.
After rebooting, it worked well. But some services didn't work while rebooting.

I'd like to prevent like this issue in future.
Guru Elite

Re: Update attribute value of endpoints when CPPM Publisher is down

A publisher has to be up at all times to do database writes (post auth endpoint updates, Guest creation, device registration, Onboarding, etc)

Authentication will continue if the publisher is down, but anything that requires a write, will not function.

| Tim Cappalli | Aruba Security | @timcappalli | timcappalli.me |

NOTE: Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba or Hewlett Packard Enterprise.
Occasional Contributor I

Re: Update attribute value of endpoints when CPPM Publisher is down

Thanks. I got it.


#AirheadsMobile
Occasional Contributor I

Re: Update attribute value of endpoints when CPPM Publisher is down

Thanks. I got it.


#AirheadsMobile
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: