Wireless Access

last person joined: 17 hours ago 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Expand all | Collapse all

Clearpass - Expired accounts loop after renewal (Mac -Auth)

This thread has been viewed 3 times
  • 1.  Clearpass - Expired accounts loop after renewal (Mac -Auth)

    Posted Jul 20, 2016 11:51 AM

    When registering for the network with an expired account you get redirected back to the registration page (after successful registration) when you try to browse to a website.  The only way to get it to work from a user standpoint is to disconnect from the network and reconnect, then it's fine.

     

    New accounts do not have this issue. After registration you can start to browse without problem.

     

    The fix I have right now is to delete the accounts set to expire, so the mac address is treated as new and the looping issue won't occur.

     

    Jordan Guthrie



  • 2.  RE: Clearpass - Expired accounts loop after renewal (Mac -Auth)

    Posted Jul 20, 2016 01:36 PM
    Try to include a delay of 5-10 on the page and see if that helps


  • 3.  RE: Clearpass - Expired accounts loop after renewal (Mac -Auth)

    Posted Jul 20, 2016 02:22 PM

    I'm on Clearpass Guest - Configuration - Pages - Guest Self-Registrations

     

    I'm on the last Submit/Redirect portion.  I tried the login delay at 5 seconds, and the update endpoint option under Post-Authentication.  For some reason the account is still not being updated until a new connection is made.

     

    Could it be something wrong with my service in policy manager?



  • 4.  RE: Clearpass - Expired accounts loop after renewal (Mac -Auth)

    Posted Jul 21, 2016 04:07 PM

     Authentication source attributes:

     

    Filter

     SELECT user_credential(password) AS User_Password,
           CASE WHEN enabled = FALSE THEN 225
                WHEN ((expire_time is not null AND expire_time <= now())) THEN 226
                ELSE 0
           END AS Account_Status, sponsor_name,
           CASE WHEN expire_time > now() THEN CAST(EXTRACT(epoch FROM (expire_time - NOW())) AS INTEGER)
                ELSE 0
           END AS remaining_expiration
    FROM tips_guest_users
    WHERE ((guest_type = 'DEVICE') AND (user_id = UPPER('%{Connection:Client-Mac-Address-Hyphen}')))

     

    Attributes:

    NameAlias NameData typeEnabled as
     1. sponsor_nameSponsorNameString-
     2. remaining_expirationRemainingExpirationInteger-
     3. account_statusAccountStatusInteger-

    Could it be something wrong in this?