Security

Hello everyone!

I've been playing around with using some of the Guest User fields in ClearPass to forward some information, and one thing has been bugging me.

Generally in ClearPass we can use variables referencing the connection, authentication, and authorization sources, but in some examples we see references directly to the database.

Such as with Guest User when we update fields I've seen examples with both cases below. Same as for Endpoints. Now, it seems to me that the first example is a reference to the SQL Authentication source, which is filtered to specific attributes. The second example references the dictionary attributes directly. 

%{Authorization:[Guest User Repository]:xxxxxx}

%{GuestUser:XXXXXX}

In essence both seem to access the same information. If this is true, why use the first example? Is it just to filter or alter the field through SQL before referencing it? What do you guys generally see in use?

Cheers,
RK

I've seen either in use. I believe there are similar cases where the short name (GuestUser) is filled by other sources if there is nothing in the 'raw' (Authorization:[Guest User Repository]) source. Either should work in general, and I don't have a big preference for one or the other.

------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
------------------------------

Original Message:
Sent: Aug 12, 2022 08:11 AM
From: Roger Karam
Subject: ClearPass Guest User Fields / Variables

Hello everyone!

I've been playing around with using some of the Guest User fields in ClearPass to forward some information, and one thing has been bugging me.

Generally in ClearPass we can use variables referencing the connection, authentication, and authorization sources, but in some examples we see references directly to the database.

Such as with Guest User when we update fields I've seen examples with both cases below. Same as for Endpoints. Now, it seems to me that the first example is a reference to the SQL Authentication source, which is filtered to specific attributes. The second example references the dictionary attributes directly. 

%{Authorization:[Guest User Repository]:xxxxxx}

%{GuestUser:XXXXXX}

In essence both seem to access the same information. If this is true, why use the first example? Is it just to filter or alter the field through SQL before referencing it? What do you guys generally see in use?

Cheers,
RK

Thanks for the input Herman!

Sincerely,
RK
Original Message:
Sent: Aug 17, 2022 04:16 AM
From: Herman Robers
Subject: ClearPass Guest User Fields / Variables

I've seen either in use. I believe there are similar cases where the short name (GuestUser) is filled by other sources if there is nothing in the 'raw' (Authorization:[Guest User Repository]) source. Either should work in general, and I don't have a big preference for one or the other.

------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.

Original Message:
Sent: Aug 12, 2022 08:11 AM
From: Roger Karam
Subject: ClearPass Guest User Fields / Variables

Hello everyone!

I've been playing around with using some of the Guest User fields in ClearPass to forward some information, and one thing has been bugging me.

Generally in ClearPass we can use variables referencing the connection, authentication, and authorization sources, but in some examples we see references directly to the database.

Such as with Guest User when we update fields I've seen examples with both cases below. Same as for Endpoints. Now, it seems to me that the first example is a reference to the SQL Authentication source, which is filtered to specific attributes. The second example references the dictionary attributes directly. 

%{Authorization:[Guest User Repository]:xxxxxx}

%{GuestUser:XXXXXX}

In essence both seem to access the same information. If this is true, why use the first example? Is it just to filter or alter the field through SQL before referencing it? What do you guys generally see in use?

Cheers,
RK