Lobby ambassador guest acounts

When creating a guest user account using lobby ambassador on wcs 4.2 the guest account defaults to 8 hours. I would like to change the default time to 1 day. Does anyone know how i can do this?
Thanks!

Great. Also, I noticed that when using ACS to authenticate the user that creates guest accounts the lobby ambassador default settings don't apply to this user. Any ideas on how to correct this? Any estimated date when 5.1 will be released?
Thanks!

Similar Messages

  • Lobby Ambassador- Guest User Creation

    Hi all,
    I am currently implementing the use of the lobby ambassador for guest account creation, however I am looking to see if some features exist. I would like to be able to tie into AD to create lobby ambassador's to have further control of who can and cannot create guest accounts. I am also looking if there is a way to put restrictions on the time frame a guest account can remain active for when created by the lobby ambassador. An example of what I am trying to do is to not have a guest account created by an ambassador to go over a day for it's time frame.
    Thanks in advance,
    Chris

    Yes and yes. From WCS you can pull the role for lobby admin and use that to create the group with the proper attributes.
    Then on the WCS you build the template you want them to use. There you can create the restrictions of how long.
    Steve
    Sent from Cisco Technical Support iPhone App

  • Lobby Ambassador Managment of Users that have expired.

    Hi there all :)
    When you set users up on LA and you set a user to a "controller list", the entry on the listing always shows the account as active from the front menu even if the time has expired.
    You then go into the account and you can see the date has expired, and if you test the account, yes, you cant login.
    Is this a bug?
    I am running WCS version 4.2.62.11.
    Also, I would like a function on LA to allow me to delete all expired users in one go. Is this possible?
    As the above indicates that the users is not expired but active, at the moment, you have to go into every account, check the expiry date and then delete the account one by one.
    Painful?
    Many thx indeed,
    Ken

    Hey Ken,
    Is it time for a beer yet??
    In answer to your first question, I think you are seeing this bug;
    CSCsk17497 Bug Details
    D3WCS:lobby ambassador-guest user account expiry not shown clearly
    Symptom:
    After successful scheduling the Guest account, the detail page for the created account doesn't show the expiry time details.
    Conditions:
    This condition arrives only when the browsed account is the scheduled account.
    Workaround:
    The detail page has the 'start' and 'end' time selection, which can be used for the expiry detail.
    Further Problem Description:
    Status
    Fixed
    Severity
    3 - moderate
    Last Modified
    Any Time
    Product
    Cisco Wireless Control System
    Technology
    1st Found-In
    4.2(47.0)
    Fixed-In
    5.0(28.0)
    Hope this helps bud!
    Rob

  • Lobby Ambassador can't email guest user accounts via WCS

    WCS is configured with SMTP server under Administration-Settings-Mail Server Configuration and test is successful and it sends e-mail alerts out no problem. However, when Lobby Ambassador creates a new guest account and clicks on the e-mail link to email it out, this message pops-up: 'Email Server is not configured.Contact Network Administrator'.
    Any ideas?

    by poking around I've found an answer. Even though we have a single email server, right after I've added the same server as a secondary email server, notifications started working. Seems to be a WCS bug.

  • WCS - Lobby Ambassador users don't see each other's guest users

    Hi, we currently have the problem with WCS 5.2 that a user of the group "Lobby Ambassador" cannot see guest users that have been created by another user of that group. The user can only see his own created guest users. All are in the same virtual domain which is the root-domain.
    I believe this behaviour was not this way in previous versions, here all guest users were visible to all Lobby Ambassador users.
    I couldn't find any hint in the documentation about this.
    Is this simply a change in behaviour (works as designed) or is this maybe a bug?

    You will get this error:
    Error(s): You must correct the following error(s) before proceeding:
    Error:A Guest User account with the name ''lobby user'' has already been created by you or another WCS Lobby Ambassador user. Please choose a different User Name for this Guest account.

  • Lobby Ambassador - WCS Logging of Guest Account Creation

    Hello all,
    If I am user "admin-ken" and I setup an guest user account "guestuser1" via the WCS controller templates > Guest User (which takes me into lobby ambassador), is there a log file that indicates that "admin-ken" had setup "guestuser1" guest account?
    Many thx indeed,
    Kind regards,
    Ken

    HiKen,
    Hope all is well :)
    Maybe this is what you are looking for;
    Logging the Lobby Ambassador Activities
    The following activities are logged for each lobby ambassador account:
    •Lobby ambassador login: WCS logs the authentication operation results for all users.
    •Guest user creation: When a lobby ambassador creates a guest user account, WCS logs the guest user name.
    •Guest user deletion: When a lobby ambassador deletes the guest user account, WCS logs the deleted guest user name.
    •Account updates: WCS logs the details of any updates made to the guest user account. For example, increasing the life time.
    Follow these steps to view the lobby ambassador activities.
    Note You must have superuser status to open this window.
    Step 1 Log into the Navigator or WCS user interface as an administrator.
    Step 2 Click Administration > AAA, then click Groups in the left sidebar menu to display the All Groups window.
    Step 3 On the All Groups windows, click the Audit Trail icon for the lobby ambassador account you want to view. The Audit Trail window for the lobby ambassador displays.
    This window enables you to view a list of lobby ambassador activities over time.
    •User: User login name
    •Operation: Type of operation audited
    •Time: Time operation was audited
    •Status: Success or failure
    Step 4 To clear the audit trail, choose Clear Audit Trail from the Select a command drop-down menu and click GO.
    http://www.cisco.com/en/US/docs/wireless/wcs/4.2/configuration/guide/wcsmanag.html#wp1076868
    http://www.cisco.com/en/US/docs/wireless/technology/guest_access/technical/reference/4.1/GAccess_41.html#wp1001609
    Hope this helps!
    Rob

  • Prime Lobby Ambassador defaults scheduling guest users

    Hi.
    I'm actually testing Prime Infrastructure and one important thing there for me is the Lobby Ambassador feature.
    I want to give our colleagues from other sites the possibility to create guest accounts on their own, but with some defaults already set. They should only be able to create accounts with a lifetime of 14 days ( not editable ), but with the possibility to schedule the accounts.
    If I now set the defaults of the Lobby Ambassador to 14 days lifetime and make them not editable, the Lobby Ambassador can’t schedule the guest user. If they choose “Schedule Guest User” from dropdown, they get the message “The creation will be scheduled 5 minutes after the current server time.”
    Is there a way to get that working?
    Best would be to have the defaults partially not editable, so that you can make some things default ( e.g. lifetime, generate password, controller config group ) and some things editable ( e.g. description, disclaimer, scheduling ).
    Regards,
    Sven Lindeke

    I went through this nightmare before as well if memory serves.  Unfortunately, it doesn't appear it's possible.  
    If I'm incorrect, someone please pipe up as I don't believe I was ever able to find a way either.

  • Lobby Ambassador TACACS denied to create Guest Users

    Hi,
    I read some threads but I found no answer.
    I use WCS 7.0.172.0 an ACS 5.2
    I configured in ACS a Shell Profile for Lobby Ambassador Accs like I did for Admins.
    If I login as such lobby ambassador, I see just what i have to see. But if i'm going to create a guest user I got the message:
    Permission Denied
    You do not have privileges for the requested  operation.
    After Forum reading I created a local user with exact the same name, differnt pw, with no success.
    The shell profile:
    role0 | mandtory | LobbyAmbassador
    task0 | mandtory | Configure Guest Users
    task1 | mandtory | Lobby Ambassador User Preferences
    Thx 4 reading!
    btw: I just can authenticate with tacas+/pap, if I configure chap I've got a failure. chap is allowed in ACS...

    OK I fixed it.
    I had to add:
    virtual-domain0 | mandatory | root
    to the top of the shell profile, like described in:
    http://www.cisco.com/en/US/docs/wireless/wcs/7.0/configuration/guide/7_0admin.html
    now it works...
    The WCS "Task List" output of the group hasn't list it...
    But the CHAP probleme still wasn't fixed. Anyone who use TACACS/CHAP auth?

  • New to Cisco Lobby Ambassador

    I want to be able to tie the registering users into the visitor registration section of a segregated guest network. I want to have a link that would appear in the front end after you register a visitor which would direct you to this program which is the lobby ambassador. Any non guest user could be able to register a guest and be provided a temp logon for the guest for a period of time.
    Anyone has an idea of how I can achieve this using a Cisco lobby ambassador

    You should be able to expand it to something bigger.  On the controller go to Security, AAA, General.  Increase this number, it will require a reboot.  I'm not sure the maximum you can increase it to (could be controller dependent).

  • Logging the Lobby Ambassador Activities on WLC

    Dear all,
    we interested in "Logging the Lobby Ambassador Activities on WLC",
    we found resusurces that explain hot to do this using WCS, but we want to konw if it's
    possible without WCS.
    More in general, we give the possibilities to oue employee to create guest account, using
    the Radius to autenticate as Lobby Admin.
    We are intereset to identify who creates the particular guest account, in case of
    incident investigation.
    Thanks, for any suggestion on regard.
    bye

    This is not possible with just the WLC. You would want to look at ISE or NAC Guest Server.

  • WCS Lobby Ambassador with AAA Authentication

    We are using WCS 7.0.164.0. I configured a user as local lobby ambassador with special defaults and also with a special guest login logo. If I use this user to create guest accounts everything is alright. Now I want to change the authentication to radius, so I export the cisco lobby ambassador attributes to the radius server and extend these network policies. Now I can login as user, authenticated from the radius server and I create guest accounts in the same way as before with local login, BUT !!! Our special guest login logo isn't shown and there is now way to upload or configure this special logo. Is there a way to configure these options for users authenticated with AAA ? Thanks for any Help  Bernhard

    Hi Bernhard,
    I used following doc-link: http://www.cisco.com/en/US/customer/tech/tk722/tk809/technologies_tech_note09186a0080851f7c.shtml
    The trick I used is to configure same username on tacacs+ and local, but different passwords.
    local-user: configure your special attributes like logo
    tacacs+: configure the authentication and group
    local-user password is not the same like tacacs+ password.
    I configured Authentication in WCS section: Administration > AAA > AAA Mode Settings
    Enable fallback to local == on auth failure or no server response
    Maybe if you deselect Enable fallback to local you can only authenticate to tacacs+. But now I can authenticate with local user/password and tacacs+ user/password.
    Attributes for tacacs+ or radius server can be exported in WCS section: Administration > AAA > All Groups; Export Task List
    Attributes for tacacs+ server:
    virtual-domain0=root
    role0=LobbyAmbassador
    task0=Configure Guest Users
    task1=Lobby Ambassador User Preferences
    Attributes for Radius (I never tried radius):
    Wireless-WCS:role0=LobbyAmbassador
    Wireless-WCS:task0=Configure Guest Users
    Wireless-WCS:task1=Lobby Ambassador User Preferences
    ==> I think also virtual-domain can be set.

  • Prime Lobby Ambassador defaults

    I can't figure out if it's possible to standardize the configuration for Guest User creation for users who are authenticated using RADIUS and assigned to the Lobby Ambassador group.
    Any help?
    Thanks!

    I went through this nightmare before as well if memory serves.  Unfortunately, it doesn't appear it's possible.  
    If I'm incorrect, someone please pipe up as I don't believe I was ever able to find a way either.

  • WCS setup RADIUS users Lobby Ambassador Defaults

    Hi
    I'm using RADIUS so my users can use their active directory credentials to login WCS and generate guest users accounts...
    But I would like to setup some Lobby Ambassador Defaults, I can easily do ths for local users on the WCS system, but how to setup defaults for RADIUS users?
    Best Regards,
    Steffen.

    Hi Scott
    Tanks for your reply.
    I've allready read the article, but I can't see that it says anything about setting up Defaults for the users, only which task the should be able to do...
    I would like to setup defaults for the radius users, so when they are authenticated as lobby abassadors the do not need to select which SSID the a generating a guest user account for and so on...
    This is possible for local WCS users, but i need to setup these defaults for my RADIUS authenticated users.
    Best Reards
    Steffen
    And btw.. this dicussion was started by me.. https://supportforums.cisco.com/thread/2115616

  • Lobby Ambassador account

    I am running WCS 6.0.132. I have a Guest User account where I as the Administrator change the password. I setup a Lobby Ambassador account so I can have our helpdesk change  the password. However When I login as the Lobby Ambassador I can not see the guest user account.
    What am I missing in the configuration?

    There was a version of WCS where they changed how the accounts were visible.  I do believe there was a bug in it.  I'm just going off of memory of us having a similiar issue and that version is a few rev's old.  I would recommend upgrading to the newest version and see if it resolves the problem.

  • Lobby Ambassador - Selecting Profile

    We have a WCS version 5.2.130 and WLC version 4.2.130.0
    Not very familiar with it. The issue here is although the WLC is reachable from WCS, I can't seems to select a profile when we want to create guest users from lobby ambassador. The WLC has been configured with 2 wlans - wlanguest and wlan01 but I can't select this profile to assign the user to.
    Hope someone can shed some light.

    For guest users and lobby admins, the WLAN profiles that can be selected from the WLC are only those that are using WEB-AUTH as security policy.
    Make sure the WLAN profile for guest user is using web-auth on your WLC, that will address your issue.

Maybe you are looking for

  • Mail and secondary mail server.

    Hello. As I am working on my mail server I would like to ensure that I have some form of back system to prevent me from looosing e-mail messages in the future, specially those that are business related. Once in a while we experience a power outage an

  • How to declare internal table in BADI with variable name beginning with 0..

    Gurus, How to declare an internal table within a BADI. I have to implement a BADI UC_TASK_CUSTOM for BCS to BW load and there i have to  declare an internal table like: TYPES:          BEGIN OF t_cube_data,                 0cs_version       TYPE /bi0

  • JDBC to IDOC using BPM

    Hi Experts, I am doing the scenario JDBC to IDOC Note: i need a solution without stored procedures My requirement is , in sender JDBC side 1) We need to select data from 3 tables from the DB ( I think we can do this by JOIN query specified in the cha

  • Welcome File in Web.xml

              I am having problems with my web.xml file.           I have my welcome page <welcome-file> as my “home_page.jsp” which I want to be           the default page on start-up. On this page is a link to “log on”. When you click           on this

  • SOS!! HELP! My iCloud keeps trying to log in with my old e-mail account and I have to access to it anymore, I changed the iCloud e-mail!! HELP I can't update anything!!!

    So my e-mail got hacked and I had to create a new one and change all the programs, apps, etc that where linked to it; I also changed my iCloud e-mail but my mac and iPhone won't allow me to change the e-mail in the iCloud settings, please help!! I've