Guest user creation via API

I think I read somewhere there is an API for creating guest users on a WCS/WLC.
I am looking for a way to intergrating the creation into a intranet page.
Can somebody confirm such API and maybe point to a place to find it?

That is great news.
I ende up sniffing the traffic from the WCS to the WLC with wireshark and saw the reuqiered SNMP OID's for making a guest user.
So I have made a little (ugly) perl script that make a guest user on the WLC, send a email to a sponsor and send a SMS via kannel.
Ugly, but its cover our need for now.
But a API will make life (and the perl script) alot nicer.
Thanks for the info.

Similar Messages

WCS 4.1.91 Guest User creation error

When I try to add a guest user using my LobbyAmbassador operator account, I consistently get an error stating "End date can not be older than start date".
The user is a limited life time, and we are trying to set end time using calendar, setting life to 48 hours basically. Just this week I upgraded to WCS4.1.91 and WLC4400's wo 4.1.185.0.
Thanks in advance for your help.

Hi Darcy,
It looks like you are hitting this bug;
CSCsi79726 Bug
Creating scheduled user - message confusing -end date
Symptom:Cannot create scheduled guest users with the lobby ambassador because of error "the end date cannot be older than the start date"
Conditions:version 4.1.83.0
Workaround:Upgrade to version 4.1.91.0
Further Problem Description:The creation is failing because
of the difference between the server and the client times. Initially user UI's
are populated by considering server times and user selections are evaluated
against client timings. The lifetime calculated is invalid because of
difference between client and the server timings.
It looks like WCS 4.1.91 was supposed to fix this issue, so if it is still happening you should really open a TAC case :(
Hope this helps!
Rob

WCS - Guest User Creation

Hello. I have a question related to the Lobby Ambassador login in WCS and creating user accounts in an environment using a guest Anchor controller. Specifically, if a 'lobby ambassador' is logged into WCS from 2 timezones away (anchor is in same location as WCS) creating a user, they will see the local time of the WCS (for start/stop times), correct? Is there a way to make it present the local time to the lobby ambassador so they don't have to figure out the correct start/stop times for their location?
Hopefully this question makes sense.
Thank you for your time and assistance,
Jeff

Lobby admins created guest users are always in the WCS timezone. If controllers are in another timezone, the lobby admin needs to adjust the time accordingly while creating guest users.

Disabling the unlimited Lifetime option in Cisco WCS Guest User Creation

Is there a way to disable the unlimited Lifetime option in Cisco WCS Guest User Add/Schedule tab.If i make those fields uneditable, it just takes out the option to schedule any meetings in future.Using Cisco WCS version 7.0.220.0.

i'm also searching for an solution to disable the unlimited lifetime button for the Lobby Ambassador.
could it that Cisco introduces this maybe a future release?
couldn't be that there are only few people who are disappointed with this solution.
My Customer is thinking now that cisco isn't the right solution for him.

Lobby Ambassador- Guest User Creation

Hi all,
I am currently implementing the use of the lobby ambassador for guest account creation, however I am looking to see if some features exist. I would like to be able to tie into AD to create lobby ambassador's to have further control of who can and cannot create guest accounts. I am also looking if there is a way to put restrictions on the time frame a guest account can remain active for when created by the lobby ambassador. An example of what I am trying to do is to not have a guest account created by an ambassador to go over a day for it's time frame.
Thanks in advance,
Chris

Yes and yes. From WCS you can pull the role for lobby admin and use that to create the group with the proper attributes.
Then on the WCS you build the template you want them to use. There you can create the restrictions of how long.
Steve
Sent from Cisco Technical Support iPhone App

WLC SNMP Guest User Creation

I have a system that I'm trying to tie into WLC (4.1 / 4.2) for wireless guest access. I would like to make it so that when someone creates an account in a registration system I can do a snmpset command to create the person an account on the WLC for wireless access. I have found the OID (.1.3.6.1.4.1.14179.2.5.10.1.1) but am unsure as to how to actually create an entry. Does anyone happen to have an example they can send my way as to how to create a guest user using snmp?
Thanks!

Okay so i honesty I got a lot of help from Brad Hanson on this, but to summarise....
-In Local Users are stored in the WLC.
-Once created the timer starts to tick, regards if the user is logged on or not.
-The Local Users can be listed by polling the OID positions:
.1.3.6.1.4.1.14179.2.5.10.1.1 (username)
.1.3.6.1.4.1.14179.2.5.10.1.2 (WLAN)
.1.3.6.1.4.1.14179.2.5.10.1.3 (password)
.1.3.6.1.4.1.14179.2.5.10.1.4 (description)
.1.3.6.1.4.1.14179.2.5.10.1.5 (time left) (100's of seconds)
Example command: snmpwalk -c READSTRING -C c IPADDRESS 1.3.6.1.4.1.14179.2.5.10.1
-The OID positions are unique by extending the OID using the ASCII value of the username specified and the number of characters in that user name
Example User 'Test' is 4 characters long and made up of ASCII 84 = T, 101 = e, 115 = s, 116 = t.
Therefore 'time left' for Test would be OID + ID = .1.3.6.1.4.1.14179.2.5.10.1.5.4.84.101.115.116
-When making a new account remotely user must construct the users name out of ASCII, count the number of characters and in a single SNMP commands set the first five parameters of the new account.
Example. Makes an account called 'z'.
snmpset -c WRITESTRING IPADDRESS .1.3.6.1.4.1.14179.2.5.10.1.24.1.122 i 4 .1.3.6.1.4.1.14179.2.5.10.1.1.1.122 s "z" .1.3.6.1.4.1.14179.2.5.10.1.2.1.122 i 5 .1.3.6.1.4.1.14179.2.5.10.1.3.1.122 s "z" .1.3.6.1.4.1.14179.2.5.10.1.4.1.122 s "maybe" .1.3.6.1.4.1.14179.2.5.10.1.4.1.122 s "z1" .1.3.6.1.4.1.14179.2.5.10.1.5.1.122 i 86400
Spot the '.24' OID is always set to integer 4… this asks the WLC to create a new account and the rest of the parameters are to follow.
-Once the new account is created the you must force it to a Guest Account by setting guest option to integer 1.
Example for user 'z' snmpset -c WRITESTRING IPADDRESS .1.3.6.1.4.1.9.9.515.2.3.1.1.2.1.122 i 1
-NB. Minimum time allowed to be set is 6000 = 60 seconds.
-To delete account OID '.24' to integer 6
Example for user 'z' snmpset -c WRITESTRING IPADDRESS .1.3.6.1.4.1.14179.2.5.10.1.24.1.122 i 6

User enrolled via API does not appear to be enrolled within Connect

Posting this here because it appears I have stumped the band over at connectusers.com...
Using the API to access our hosted account I am able to:
Login as a user (administrator or normal user)
Add a user
Change user password
List all of the SCOs that the user has access to
List the response to the report-my-training action
I am attempting to enroll a user by calling permission-update. It appears to work because the status returned is "ok". When I connect to the API as the user and call report-my-training the curriculum appears in the response. So far, so good.
Next, I accessed Adobe Connect via a web browser and logged in as the user. The curriculum I thought I enrolled the user in appears in the training catalog. The first sign of trouble is that the enrollment status is reported as "You are currently not enrolled."
If I direct the user to the curriculum using a URL like "http://hosted-account.acrobat.com/p31959044/?session=na1breezyxxxxxxxxxxxxxxx" the browser is redirected to a page that shows the title of the curriculum, but nothing more (blank white page).
What am I missing or doing wrong?

Thank you for your reply Loren. Unfortunately I don't currently have access to the remote side's crypto configuration, since they are an external entity. However, I can check in and see if I can get that info.
Hopefully this is the information that you requested:
access-list Outside_27_cryptomap extended permit tcp object 20.0.0.106 object Remote_Server object-group RemoteSite
Result of the command: "sh access-list Outside_27_cryptomap"
access-list Outside_27_cryptomap; 1 elements; name hash: 0x3a48e673
access-list Outside_27_cryptomap line 1 extended permit tcp object 20.0.0.106 object Remote_Server object-group RemoteSite (hitcnt=36) 0xce74f220
access-list Outside_27_cryptomap line 1 extended permit tcp host 20.0.0.106 host 188.1.1.69 eq 204 (hitcnt=36) 0xdd218de0
Again, thank you for your help.

4402 guest users authetication via Web (username and password)

Hello Everyone,
We have an issue with Wireless controller model 4402 loaded with 4.0.179.11. This box has stopped authenticating (Layer3 security Web Policy based local usernames and password) last night.
Steps taken to resolve the issue:-
1) Created local usernames and password via Web and tried using wireless through Guest ssid, when user enters this information web page loops back to authentication.
2) Tried authenticating via another Laptop, had no luck.
3) Changed WLAN SSID Guest from Layer3 security Web Policy to Layer2 Security, created Mac filter table for guest on the Controller. Guest was able to connect to the internet.
We have not made any configuration change. As this issue affected all Users, we restarting the controller after which issue was resolved. As per my colleagues this has happened couple of times and every time restart fixes this issue.
Please shed some light on this.
Regards,
Mujahid

Hi Mujahid,
Just to add a note to the great advice from Richard (5 points for your good work on many posts Richard!)
Have a look at these bugs that I'm pretty sure we were hitting with this WLC Version as well;
CSCsi91600 Bug Details
Internet Explorer redirects to login page with webauth due to cache
Symptom:
Client using IE, and web authentication has passed authentication, Policy Manager is in a RUN state, and when the user clicks on the "home" button, or types in the address of their normal homepage, they are continually redirected to the web-auth page
Conditions:
Client using IE, and web authentication has passed authentication, Policy Manager is in a RUN state, and when the user clicks on the "home" button, or types in the address of their normal homepage, they are continually redirected to the web-auth page
Workaround:
Enable IE client to check for newer versions of stored pages on "every visit to the page" option instead of "automatically" (default).
Tools -> Internet Options... -> Temporary Internet files -> Settings... -> Check for newer versions of stored pages: Every visit to the page.
1st Found-In
4.0(179.11)
Fixed-In
4.1(176.6)
4.1(177.0)
4.1(181.0)
4.2(31.0)
4.2(61.0)
Related Bugs
WLC Web-auth homepage leads back to reauth page if redirect URL is used
In a web-auth deployment with or without guest anchoring. If the redirect url is populated, the users homepage will no longer be able to be reached. Whenever the user navigates back to his homepage it will show the reauth page and the user will no longer be able to reach their homepage. Homepage leads back to reauth page if redirect URL populated
CSCse90894 Bug Details
Internet Explorer redirects to login page with webauth due to cache
Even after the commit of CSCse03666 - which added the following line to the
default webauth HTML -
IE 6 continues to redirect its home page back to the webauth login page.
This is due to a known bug in IE.
1st Found-In
4.0(155.5)
Fixed-In
3.2(193.4)
3.2(193.5)
4.0(206.0)
4.1(171.0)
Hope this helps!
Rob

Lobby Ambassador can't email guest user accounts via WCS

WCS is configured with SMTP server under Administration-Settings-Mail Server Configuration and test is successful and it sends e-mail alerts out no problem. However, when Lobby Ambassador creates a new guest account and clicks on the e-mail link to email it out, this message pops-up: 'Email Server is not configured.Contact Network Administrator'.
Any ideas?

by poking around I've found an answer. Even though we have a single email server, right after I've added the same server as a secondary email server, notifications started working. Seems to be a WCS bug.

Need API for user creation

Dear All,
I need to use bulk user creation through API. Please advice which API i use to resolve this issue.
Thanks
Rehan

I need to use bulk user creation through API. Please advice which API i use to resolve this issue.FND_USER_PKG.CREATEUSER
FND_USER_PKG
https://forums.oracle.com/forums/search.jspa?threadID=&q=FND_USER_PKG&objID=c3&dateRange=all&userID=&numResults=15&rankBy=10001
PACKAGE: APPS.FND_USER_PKG
http://etrm.oracle.com/pls/et1211d9/etrm_pnav.show_object?c_name=FND_USER_PKG&c_owner=APPS&c_type=PACKAGE
Thanks,
Hussein

Lobby Ambassador - WCS Logging of Guest Account Creation

Hello all,
If I am user "admin-ken" and I setup an guest user account "guestuser1" via the WCS controller templates > Guest User (which takes me into lobby ambassador), is there a log file that indicates that "admin-ken" had setup "guestuser1" guest account?
Many thx indeed,
Kind regards,
Ken

HiKen,
Hope all is well :)
Maybe this is what you are looking for;
Logging the Lobby Ambassador Activities
The following activities are logged for each lobby ambassador account:
â¢Lobby ambassador login: WCS logs the authentication operation results for all users.
â¢Guest user creation: When a lobby ambassador creates a guest user account, WCS logs the guest user name.
â¢Guest user deletion: When a lobby ambassador deletes the guest user account, WCS logs the deleted guest user name.
â¢Account updates: WCS logs the details of any updates made to the guest user account. For example, increasing the life time.
Follow these steps to view the lobby ambassador activities.
Note You must have superuser status to open this window.
Step 1 Log into the Navigator or WCS user interface as an administrator.
Step 2 Click Administration > AAA, then click Groups in the left sidebar menu to display the All Groups window.
Step 3 On the All Groups windows, click the Audit Trail icon for the lobby ambassador account you want to view. The Audit Trail window for the lobby ambassador displays.
This window enables you to view a list of lobby ambassador activities over time.
â¢User: User login name
â¢Operation: Type of operation audited
â¢Time: Time operation was audited
â¢Status: Success or failure
Step 4 To clear the audit trail, choose Clear Audit Trail from the Select a command drop-down menu and click GO.
http://www.cisco.com/en/US/docs/wireless/wcs/4.2/configuration/guide/wcsmanag.html#wp1076868
http://www.cisco.com/en/US/docs/wireless/technology/guest_access/technical/reference/4.1/GAccess_41.html#wp1001609
Hope this helps!
Rob

Reg: How to deactive seeded workflow process(HZ User Creation API worflow)

Dear Friends,
I do have a question for deactivate the seeded worflow process. Which means the current process i am not going to use anywhere. I needed to create the new process for Seeded worflow why because this is the worflow having some standard Procedure. Those procedure only will meet my requirement. In such case i wanted to create new processes in that going to call seeded procedure.
Could you please help me out how to deacivate the seeded processes from Oracle Standard workflow ( Name of the workflow is HZ USER CREATION API Workflow) Now current they are created for Customer creation processes. I didn't find currently where they are calling. My requirement is need to Create the new process for User-Id creation.
I hope everybody will understand my requirement.
Thanks in advance.
Thanks,
Velu.
Edited by: Krishna Vamshi on Jul 14, 2009 1:29 AM

Hi,
IIRC (and I haven't got a Workflow system handy to check), the Workflow is launched by a business event - if you disable the seeded business event, then that will stop the workflow launching.
HTH,
Matt
WorkflowFAQ.com - the ONLY independent resource for Oracle Workflow development
Alpha review chapters from my book "Developing With Oracle Workflow" are available via my website http://www.workflowfaq.com
Have you read the blog at http://www.workflowfaq.com/blog ?
WorkflowFAQ support forum: http://forum.workflowfaq.com

User Creation at the time of Self Registration not via Admin (xelsysadm)

Hello there,
I had a question related to User Creation in OIM via Self Registration (Create Request) and via "xelsysadm" itself creating one user via the web console.
Can I do this -
When a user does self registration then how can I directly create a user in OIM?
Right now: the user's request needs to be approved by xelsysadm first and then only that user can login into OIM and then only that user can be seen in OIM - I want to remove the "xelsysadm" gateway of approving the request.
I want that user directly to be present in the OIM as soon as he/she fills out it's information in the self registration pages. How can we do this?
Also, I want an email to be sent to the user to its email ID that he/she provided at the time of self regn containing its User ID and password in it from the xelsysadm email id. How can I do that?
TIA for the help,
- oidm.

Hi oidm
User Registration is R.O. which used for User Self Registration.
But if you see it carefully, there's no Approve Task (not workflow) in it.
It has three task
1) SV
2) PI
3) AAD
And if you see the request while approval it shows Awaiting Approval Data means it stuck in AAD.
Try to modify this, I can't as I don have any extra machine with. Try to modify this. It may not allow you to update it, you'll have to change its security level in Database level.
*Awaiting Approval Data System Administrator [XELSYSADM] Pending*
I hope it helps you to start R n D.

Opening User defined Fields Form via API

Hi
Is there a posiibility to open those user defined field - forms via API. If yes is it possible to check if it is already open?
TIA
Phile

Hi,
In your eventhandler, you can use this:
Set oSboForm = Sbo_application.Forms.GetFormByTypeAndCount(-pval.FormType, pval.FormTypeCount)
form and udf-form are linked through a minus sign.
I do not know of a nice way to check if they are anebled. What I'm currently doing is running the above line of code contained in an error handler. The error handler does a sendkeys of control shift u (which enables the udf-form) and displays a message. Problem is after control shift u, screen is not yet updated so your code cannot continue immediatelly. Development knows of this problem, but I never received a promise when this will be fixed.
Hope this helps,
Jacques

WCS 6 Guest User bulk creation

I am using the csv import feature to create guest ID's when I add a guest, but when I try to schedule a guest there is no option for importing a file. I would think that scheduling in advance would be more useful if you could do it in bulk. Is there a way to scedule users with a csv file?
Thanks,
Gene

There is currently no way to import via .csv for schedule guest users. You could open a PERS with your account team if it is a business need.

Guest user creation via API

Similar Messages

Maybe you are looking for