Deployment Guide

456 | Operator Logins DellNetworking W-ClearPass Guest 6.3 | User Guide
Explanation: The rule will always match on the “memberof” attribute that contains the user’s list of groups. The
operator field “enabled” will determine if the user is permitted to log in or not. The custom template uses the {strip}
block function to remove any whitespace, which makes the contents of the template easier to understand. The {if}
statement first checks for membership of the Administrators group using the PHP stripos() function for case-insensitive
substring matching; if matched, the operator will be enabled. Otherwise, the server’s current time is checked to see if it
is after 8am and before 6pm; if so, the operator will be enabled. If neither condition has matched, the “enabled” field
will be set to 0 and login will not be permitted.
Operator Logins Configuration
You are able to configure a message on the login screen that will be displayed to all operators. This must be written in
HTML. You may also use template code to further customize the appearance and behavior of the login screen.
Options related to operator passwords may also be specified, including the complexity requirements to enforce for
operator passwords.
Navigate to Administration> Operator Logins and click the Operator Logins Configuration command link to
modify these configuration parameters.
Custom Login Message
If you are deploying ClearPass Guest in a multi-lingual environment, you can specify different login messages
depending on the currently selected language.
The following example from the demonstration site uses Danish (da), Spanish (es) and the default language English, as
highlighted in bold: