Security

I try to integrate Active Directory Source to the Guest Operator Login.

I´ve created two new Enforcement Profiles ("Administratoren, admin_privileges=Super Administrator" and "Receptionist, admin_privileges=Receptionist")

 

I´m able to login with my administrator account, but I´m not able to login with my receptionist account.  I get no error message and I can´t see any problems in the access tracker. I just get forwarded to the login page again.

 

Any hints?

Can you see the correct operator profile assignment in access tracker ?



Thank you

Victor Fabian

Pardon typos sent from Mobile

Yes, the Enforcement Profile is correctly assigned.

 

Did you create the operator translation tule for the help desk?



Thank you

Victor Fabian

Pardon typos sent from Mobile

If this rule is in place, you should be able to return the operator profile name

No, I didn´t created a translation rule till now.

The default "ClearPass Profile Mappings" rule is in place.

Take a look at the application logs in the guest module to see if it shows any errors related to that



Thank you

Victor Fabian

Pardon typos sent from Mobile

No errors in the application log, only Info:

 

App User:  mph-test
Script:    /guest/auth_login.php
Function:  NwaAuthLoginForm
Details:   array (
  'user_agent' => 'Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:81.0) Gecko/20100101 Firefox/81.0',
  'auth_source' => 'ClearPass operator logins',
  'profile' => 'Receptionist',
)  

 

So at the login page when you hit the login button it doesn't take you anywhere ? I was able to test using the default and it works with no issues but I am running 6.9.3

You can also try duplicating the existing receptionist profile and create a new translation rule like this and see if it works:

 

 

Same behaviour as before...

After entering user and password I get redirected to the login page... When I enter the admin user account i´m able to login...

Hi,

 

Try the value as "[TACACS Receptionist]" with the default rule and check the login status.

 

No change. I get redirected to the login page, after entering user and password.

Update: I´ve added another profile with the admin_privileges = Read-Only Administrator. This also works fine.

Only the Receptionist profile fails...

 

Stupid mistake from my site: The start page in the Receptionist-Profile was set to a page, to which the receptionist had no access...