NAC Web Authenticated Registration

  • 0
  • 2
  • Problem
  • Updated 3 years ago
  • Solved
Hi.

I currently have an issue with NAC and Web Authenticated Registration. I use LDAP  to authenticate users against Active Directory for Registration Sites (AAA Configuration). This works pretty well for the Sponsor Role.

But when it comes to Web Authenticated Registration a problem ouccures. From my point of view it is not possible to limit the access for a specific LDAP group. If the Web Authenticated Registration is enabled, every AD User (regarding the LDAP Configuration) is permitted to use the Web Authenticated Registration portal.

Is this right or am I missing something?

Best Regards
Michael
Photo of Michael Kirchner

Michael Kirchner

  • 1,846 Points 1k badge 2x thumb

Posted 4 years ago

  • 0
  • 2
Photo of Ronald Dvorak

Ronald Dvorak, Embassador

  • 45,024 Points 20k badge 2x thumb
Michael I'm not sure whether I unterstand the problem as I don't user web auth.

Here a example how I check whether a user is in the correct AD group...
To get the Secure-Home Rule the user must be in my AD group "Team".
memberOf ==> CN=Team,OU=Team,DC=mywlan,DC=at

Photo of Michael Kirchner

Michael Kirchner

  • 1,846 Points 1k badge 2x thumb
Dear Ronald,

thanks alot for your detailed response. Unfortunately the Web Authenticated Registration does its LDAP mapping not in the "normal" NAC Rule Configuration. It is in the Portal configuration.

I currently have no access to my configuration, otherwise I would post pictures, too :)

Best Regards,
Michael
Photo of Tiago Moreira

Tiago Moreira

  • 190 Points 100 badge 2x thumb
Hello Michael,

Did you manage to solve this problem? I have exactly the same issue!