ISE 1.2 - Guest Account converted to lower-case automatically
Hello
I have an ISE appliance version 1.2 and sponsor portal
I create accounts with upper case username and upper case password, but Sponsor portal convert it to lower case.
I try to login with lower case or upper case. I can't login with both.
Check the Multiport configurations and HTML page settings for converting the Alphabetic-Cases.:
You can check the below link for step by step configuration of HTML-Page’s setting:
Link-1
http://www.cisco.com/en/US/docs/security/ise/1.2/user_guide/ise_custom_portals.html
Link-2
http://www.cisco.com/en/US/docs/security/ise/1.0/sponsor_guide/ise10_sponsor.html#wp1069407
Similar Messages
-
ISE doesnt send Guest accounts via Email
HI
I have come across an issue in ISE1.1.2.
once i create a guest account, and click on email, i get the below error
i have patched version 1.1.2 to the latest patch 3
i have also configured teh sponsor portal customisation email address.
ISE reports "Internal Error encountered. Please contact administrator or help desk"
anyone have any suugestions?Hi Neno
i have configured an SMTP server on ISE admin, i have created a default email address ( [email protected]). i have got an email address in the customization page of teh sponsor portal ( [email protected]).
One thing i just tried was when i create a guest user with an email address of [email protected] , that worked fine. but if i configure a guest user with an email address of [email protected] , this is when i get the error message. -
ISE 1.3 Guest account Activate
Hi,
Has anyone worked with ISE 1.3 with creating guest accounts using sponsor portal.?.
Our issue is that whenever we create new guest account using sponsor portal the account is shown as "Created" not as "Active". When we try to use the same account in guest portal it gives authentication failed and shows as "account is not yet active" in ISE report. (please see the attached file)
Can anyone tell how to make new account active or why it shown as "created" not as "active"?
thanks in advance.Hi there,
I am having the exact same problem with my ISE 1.3 deployment after upgrading from 1.2 to 1.3 .
The issue seems to relate to timezones (as a lot of ISE problems do!) .
The issue relates to settings under Guest Access -> Settings ->Guest Locations and SSID . You should have defined a location local to you, for me it is 'Southampton, Europe/ London', the San Jose entry cannot be removed.
There should be an option to select timezone in the Sponsor Portal but it is missing so defaults to 'San Jose'. This causes a time-zone mis-match between between the account itself and the SSID location.
However if you create a guest account using the admin GUI: Guest Access -> Manage Accounts, although you still cannot select the timezone it will choose the correct one for the SSID and you will then be able to use the account via the Guest Portal. I don't know what would happen if you had a second SSID and alternative location, it would probably be totally broken!
I have raised this issue with TAC three weeks ago, and had a webex with the Business Unit last week. They saw the issue and took some debug logs, all very helpful people, but the problem is still unresolved.
cheers,
Seb. -
ISE purge unused guest accounts
My customer has ISE running 1.2.0 for its guest service. Today, they ask me about a way to purge guest accounts that never were used.
I know the 1.2 user guide stand this:
You can force expired guest user accounts to purge immediately without waiting for a scheduled purge. If a guest account created using FromFirstLogin is not used (user never logs in), it does not expire and is not purged. You must manually delete it in the Sponsor portal.
My question is about release 1.3, the manual does not indicate the same thing, so I like to know if the unused accounts can be purged in some easy way, or they can be included in the regular purge process.
Regards.So, Does the 1.3 release has a new parameter to set purge unused accounts after some days? In that case, which parameter is it?
-
ISE sponsor portal guest accounts
I am having an issue with guest accounts that have been created in the sponsor portal, some accounts work fine but others show up in the authentication logs on ISE as error 22056. This error points to ISE not looking in the right identity store but when you go deeper into the details all auth requests are pointing at the internal users store which is correct.
My main problem is that when I try to look at these accounts from the ISE admin console to see if there is any difference between them they do not show up i.e. no accounts that are created on the sponsor portal are displayed in the internal users database but if you try to create an account with the same user name ISE says that there is already an account with that name.
Is there any where on ISE to display the sponsor guest accounts?
Regards
CraigHi,
not too sure if I am missing something but this just tells you how to use the sponsor portal? my query was based around being able to see all user accounts i.e. accounts created in the sponsor portal and from the admin from the admin console in the admin console.
If I web browse to the ISE admin console and the go to administration-Identities I can only see the accounts that I have created through ISE admin, if I try and create an account that I know exists on the sponsor portal ISe complains that the user already exists but you cannot view it. This seems very odd, why wouldn't an admin be able to see all accounts?
thanks
Craig -
Ho to convert to lower case values and upper case
hi
pls let me know how to convert the varlues to lower case
and how to conver values to uppoer case
whichis funtion module to do so?
regards
AroraHi,
<b>TRANSLATE</b>
Converts characters to strings.
Syntax
TRANSLATE <c> TO UPPER|LOWER CASE
|USING <r>.
The characters of the string <c> are converted into upper- or lowercase, or according to a substitution rule specified in <r>. -
ISE 1.3 Guest Account Expiration Notice email subject customization
Hi,
Under Guest Type Settings, you can configure Account Expiration Notification. I managed to customise the e-mail body, but I cannot change the subject. Is there a way to change the subject of the email guests are receiving before account expiration?
Thanks,1
-
I can only get the uppercase to "stick" by going back, highlighting, and changing. This is incredibly problematic for typing any work-related material. help!
Okay - this issue seems to have resolved on it's own. Yea!
I did find a thread that suggested resetting the PRAM/NVRAM so I did this, restored the external monitor to factory settings and went into Disk Utility and repaired disk permissions and verified disk permissions.
Here is a link to reset the PRAM/NVRAM: http://support.apple.com/kb/HT1379
These things may have helped resolve this issue. I can't tell what worked because it was hours after I did all these things that my monitor and computer decided they liked each other again. If you have a similar issue, maybe these steps will help you resolve your problem too.
Hope this is helpful! -
Safari XML parser converts attributes to lower case?
I am trying to create and serialize XML documents using Safari 2.01. It appears that during this process, XML attributes are always converted to lower case. Since XML is case sensitive, this causes errors when mixed case is expected. My sample code (below) works properly (attributes not converted to lower case) in FireFox, Netscape, etc.
Questions are:
Is there a way to load/serizlize XML in Safari so that this does not happen?
If not, is this behavior by design or is it a bug? Will this be changed in future versions?
Thanks for any assistance!
Sample code:
// Create XML document
var xmlString = '<Test MixedCase="test">SomeText</Test>'
var parser = new DOMParser();
xmlDoc = parser.parseFromString(xmlString, "text/xml");
// Get XML text
var serializer = new XMLSerializer();
text = serializer.serializeToString(xmlDoc);
IBM Thinkpad T40 Windows 2000
IBM Thinkpad T40 Windows 2000
Windows XP
Mac OS X (10.2.x)
Mac OS X (10.0.x)Are you sure the parser is changing the element names?
(You didn't really mean "attributes", did you?) If it
is, then that's a bug in the parser. Element names in
XML are case-sensitive, i.e. they can be upper or
lower case or any mixture of cases. There aren't
supposed to be any "features" that let you fiddle with
the case of element names.
If you told me that you were using a Transformer to
produce HTML, and that it was outputting <TR>, I
wouldn't be surprised. Especially since XALAN is a
transformer and not a parser. I would just suggest in
that case that you should change your output method
from HTML to XML, and to output <tr>. A Transformer
won't change the case of element names if the output
method is XML, but it may if the output method is
HTML.Thanks for the response. Sorry about the vernacular mixup there.
Here is our situation:
javax.xml.parsers.SAXParser parser = SAXParserFactory.newInstance().newSAXParser();
parser.parse(InputSource is, HandlerBase hb) <-- noted that this is a deprecated method
This parse method here turns the html elements upper case.
I have experimented with setting the XMLReader on the parser as a HTMLSerializer and XHTMLSerializer with no luck in changing the outcome.
Hope this clears things up a bit more. -
hi Experts
I have Created One Infoobject Without Enabling Lower Case
i loaded Lower Case Values Without Enabling Lower Case
Is there Any Conversion Routine to Achive this?Hi,
you can use function TOUPPER to convert the lower case to upper case.
In the transformation -- right click on the io -->select rule details -->select rule type --> select "formula"
use function as TOUPPER(IO) - save..
this wil ltake care of lower case letters.
If looking for routine check the below code
TABLES: ...
DATA: to_upper(XX) type c. (use I-Object length)
$$ begin of routine - insert your code only below this line -
to_upper = TRAN_STRUCTURE-I-Object Field name.
translate to_upper to upper case.
RESULT = to_upper.
returncode 0 means skip this record
RETURNCODE = 0.
abort 0 means skip whole data package !!!
ABORT = 0.
$$ end of routine - insert your code only before this line -
ENDFORM.
Regards
Kp
Edited by: prashanthk on Jan 21, 2011 12:57 PM -
Hello All,
I am encountering an issue in which I find only when guest accounts are created by sponsor through the sponsor portal, guess access is granted. If I manually add guest account in the same guest role via the administrative UI, instead of guest access authz profile is hit, ISE goes through supplicant provisioning flow. I know that I do have enable self provisioning flow but why would it kick in for guest user created by admin? I see many bugs dealing with guest portal flows but failed in finding one exactly matching to my senario. Any insight is greatly appreciated. version 1.2.
FadiYou can create and manage guest user accounts to provide temporary network access for guests. If you have numerous guest user accounts whose account information is stored in an external database, you can import this information to expedite the account creation process.
Please Check the below guide for user’s creations:
http://www.cisco.com/en/US/docs/security/ise/1.1/sponsor_guide/ise_sponsor_chp2.html -
Hello Guys,
i have an ISE 1.2 with Patch 9 installed.
Now i want to have a correlated View of Guest User Name <-> IP Address
When i go under Operations -> Reports -> Guest Accouting i just get the MAC Adress as Identity Value. Is there any configuration i can made to show the GuestUser as Identity ?
I added a picture of my corrent output
Thanks
PhilipGuest user Identity is getting updated with Mac addr. instead identity
CSCuh14138
Description
Symptom:
Guest user Identity is getting updated with Mac. address instead of identity in Guest accounting reports.
Conditions:
issue is seen in Guest accounting reports
Workaround:
no work around
Known Affected Releases:
(4)
1.2(0.852)
1.3(0.566)
1.3(0.620)
1.2(0.899) -
ISE Guest Email Notification (Guest account creation)
When a guest user creates an account in ISE, it sends a system generated email with the username/password. It says "Welcome to the Guest Portal, your username ise xxx and password is yyy." Is there anywhere in ISE (1.2) to change this text, especially the name 'Guest Portal'? I thought it was in language templates > Configure Miscellaneous Items > Portal Name. But I changed this to the portal name, and it was not reflected in the email. Thanks.
Josh,
Right now, it's pretty limited. Here is the template to be used for formatting the email notifications:
E-Mail Notification Template
The following is an example of the login information for the body of an e-mail in an English language template:
Welcome to the Guest Portal, your username is $username$ and password is $password$
The $username$ and $password$ strings will be replaced with the username and password values from the Guest User account.
In the e-mail body, you can use special variables to provide the details for the created guest account. When using these variables, you must use all uppercase or all lowercase letters, and you cannot mix them. For example, the string for username can be either $USERNAME$ or $username%, but it cannot be $UserName$.
You can use these variables in the e-mail notification template:
•$USERNAME$ = The username created for the guest.
•$PASSWORD$ = The password created for the guest.
•$STARTTIME$ = The time from which the guest account will be valid.
•$ENDTIME$ = The time at which the guest account will expire.
•$FIRSTNAME$ = The first name of the guest.
•$LASTNAME$ = The last name of the guest.
•$EMAIL$ = The e-mail address of the guest.
•$TIMEZONE$ = The time zone of the user.
•$MOBILENUMBER$ = The mobile number of the guest.
•$OPTION1$ = Optional field for editing.
•$OPTION2$ = Optional field for editing.
•$OPTION3$ = Optional field for editing.
•$OPTION4$ = Optional field for editing.
•$OPTION5$ = Optional field for editing.
•$DURATION$ = Duration of time for which the account will be valid.
•$RESTRICTEDWINDOW$ = The time window during which the guest is not allowed to log in.
•$TIMEPROFILE$ = The name of the time profile assigned.
This dicument is found here:
http://www.cisco.com/en/US/docs/security/ise/1.2/user_guide/ise_custom_portals.html#wp1015657
ISE v1.3 should have some improvements and quite possibly some HTML tags.
Charles Moreton -
Hi,
I would like to disable account lockout for ISE Guest accounts resulting from login failures. In the ISE, there is a setting for Maximum Number of Login Attempts (with values from 1-9) in:
Administration>Guest Management>Settings>Guest>Portal Policy
Can someone tell me where or how account lockout can be turned off for Guest accounts in the local database of the ISE/WLC.
Many thanks.
SankungAnswer: No, yet there is not way to completely desable this feature in Cisco ISE
ref: http://www.cisco.com/en/US/docs/security/ise/1.1/user_guide/ise_guest_pol.html#wp1070066 -
Approve guest account in Cisco ISE 1.3
Hello everybody,
I can't approve guest account in the cisco ISE after I create them. when I want to approve an account I should write a sponsor email, but always I had the same problem: the values entered are incorrect. (Les valeurs saisies sont incorrectes.)
PS:I don't have problem in mail server
Best regards,
ADDOULI Mohamed Iliascheck if you have entered the sponsor email address here who is supposed to approved the guest
Maybe you are looking for
-
Problem in sending mail to external id from customer exit
Hello All, I have a problem that I am sending mail to supervisor. I have written code and it is working correctly in se38 program. This code If I keep in an exit and run tcode then it is not working and it is giving message no mail sent. Why is this
-
Editable regions in child page
Hi all. Dreamweaver 8. I have a template with two editable regions, Header and Body. I have a new page, and I want to apply the template. I am prompted to move the content to the new regions. Is my new child page supposed to have editable regions wit
-
How to know the report has already been sent to printer?
Dear All, I have one problem to check that the report has been printed on paper through a printer after user already previewed and pressed Printer button. Is there any parameter will be sent back from system to inform the program? Please suggest me i
-
Proposed goods issue date, material availability date
Dear All, where to configure the goods issue date & material availability date. regards, Murugan
-
How component tree was reconstituted? From jsp that have JSF tags or somehow else? I was read specification but nothing in detail about that. Is it define by specification or every JSF implementation can do it differently? For example page like this.