Security

Hi,

I have made a web login page in Clearpass Guest where users who connect to an SSID is meet by login page where they accept the terms and then log in.

The web login page uses a local account in Clearpass Guest for all sessions. This account has unlimited sessions.

The services in CPPM use the [Guest User Repository]. When a user connects, I see that the connection is ok in the access tracker.
The first user can login as planned but the rest is met by a message saying "Only one user login session is allowed".

I can't find where I can allow so this web login page can allow multiple sessions on the same account.

Does anyone know how to solve this?

Check enforcement profile in Guest service, if any user session limit is set.

you can configure the session limit uder: 

Guest Module > Configuration > Guest Manager

Almost at the bottom, under General, you can define the number of guest sessions.

Thanks for your input.

I have checked both proposals above.
There is no session limit in enforcment policy and guest manager

Do you see a session limit on the properties of the specific account in the guest manager?

Was "Only one user login session is allowed" the exact string?  I just searched the entire source code and did not find it...

Yes, "Only one user login session is allowed" is whats shows in the CaptivePortal after the user have accepted terms ant klicked log in

Here is some screeshots of regarding my problem. 

This is the message that the all exeopt the first user gets

This is the radius accept and response for the login that the user above did.

This is what the setting are on the guest user account that i used and the settings in guestmanager.

I cant find any more place were there is a session user limit set or find any information on the massage that the user gets.

Does "Allow only one active user session" tab is checked in captival portal profile in controller?

Try uncheck this option and try it.

Hmm I was prety sure that I checked that but when now I toked a look it was checked.

Uncheking it resolved my issue, thank you.