Security

Hi everyone,

I have an end customer with a peculiar request. He is going to have separate teams to register guest and to register devices on ClearPass Guest. We are good on profiles and authentication against the AD. 

The issue is that they would like different login pages for the Operators into ClearPass Guest. We can customize the operator login UI (Guest -> Administration -> Operator Logins -> Login Configuration), but as far as I know we cannot create a second operator login page. I've tried creating a new web login page and customizing that, however haven't figured out how to force it to authenticate internally and login as an operator.

Any thoughts?

Thanks,

RK

I'm not sure the answer either but this is just for guest internet right? Why make it so complicated? Personally I think a more simple solution could be designed here instead.

Hi RK,

What would the variation be between portals? I assume just images and branding?

Below is how i have done it in the past, i just give different URLs to different people, fairly simple to expand on and get setup. The below will change the background based on what URL is used to get to the page. Same logic can be implemented for any HTML, logos, forms, inputs, buttons etc.

{if $smarty.server.HTTP_HOST eq "portal.clearpass.com"}
  {assign var="bg_image" value="external/galleria/slideshow/v2/2_bob.jpg"}
{elseif $smarty.server.HTTP_HOST eq "portal2.clearpass.com"}
  {assign var="bg_image" value="external/galleria/slideshow/v2/4_landry.jpg"}
{else}
  {assign var="bg_image" value="external/galleria/slideshow/v2/1_saadi.jpg"}
{/if}

<style type="text/css">
{literal}
body {
  background-repeat: no-repeat;
  background-position: center center;
  background-size: cover;
  background-attachment: fixed;
  min-height: 100vh;
{/literal}
  background-image: url('{$bg_image}');
{literal}
}
{/literal}
</style>

Just incase you are not familiar, i put this in the HTML on the skin attached to the /guest login page.

Any questions, please let me know.

Just to confirm, tested this configuration under ClearPass Guest -> Administration -> Operator Logins -> Login Configuration and it worked! Customizing via url. Thanks again!

{nwa_cookiecheck}
{if $smarty.server.HTTP_HOST == '10.1.19.11'}
    <p>Access via IP</p>
{elseif $smarty.server.HTTP_HOST == 'cppm1.aruba-training.com'}
    <p>Access via CPPM1 URL</p>
{else}
    <p>Anything else</p>
{/if}

Thanks for the response guys, seems I wasn't clear on the request though. 

In the scenario, they are using the Guest database to register DEVICES and to register GUESTS. The challenge is that they want different/separate login screens for the respective Operators. As far as I know, operator logins are always through https://clearpass/guest and you can't replicate this page.

The customer actually wants to change the text on the page. Judging from Ben_C's response, I can probably do that using the $smarty.server.HTTP_HOST condition as long as they have different DNS names pointing to the page. I will be testing it out.

Thanks again guys!

Sincerely,

RK