siteadmin:clearpass_fticks
This is an old revision of the document!
ClearPass FTICKS
A prerequisite for FTICKS is to ensure that the Operator-Name is being set correctly
SELECT concat( substring(user_name,2,100)||'#VISCOUNTRY=UK#VISINST='||attr_value||'#CSI='||end_host_id||'#RESULT=OK#FEDID=0X000') AS "F-TICKS/govroam/1.0#REALM" FROM public.tips_radius_session_log,public.tips_session_log_details WHERE public.tips_radius_session_log.id = public.tips_session_log_details.session_id AND public.tips_session_log_details.attr_name = 'Radius:IETF:Operator-Name' AND public.tips_radius_session_log.timestamp > --START-TIME-- AND public.tips_radius_session_log.timestamp <= --END-TIME-- AND public.tips_radius_session_log.auth_method='PROXY' AND public.tips_radius_session_log.service_name not like '%NRPS%' AND public.tips_radius_session_log.request_status = 1 ORDER BY public.tips_radius_session_log.timestamp asc
The line “public.tips_radius_session_log.service_name not like '%NRPS%'” is where the authentications to/from the NRPS are filtered out. The names of the services which proxy to/from the NRPS needs to have a name which could be matched by an SQL query. The example here must have 'NRPS' in the name.
There might need to be other such lines in there to ensure that the only logs sent to Jisc are ones that match a proxy between two sites specifically for govroam.
siteadmin/clearpass_fticks.1714726987.txt.gz · Last modified: 2024/05/03 09:03 by admin
