Aruba Networks ClearPass Guest 3.9, Deployment Manual, Page: 165 / 518

ClearPass Guest 3.9 | Deployment Guide RADIUS Services | 165
To authorize all users in Active Directory, regardless of the individual user account settings for remote
access permission, use the following settings:
access_attr = nonexistentAttribute
access_attr_used_for_allow = no
Additional details about the precise operation of these parameters are as follows:
If access_attr_used_for_allow is “yes”, then the access_attr attribute is checked for existence in the user
object.

If the attribute exists and is not set to FALSE, the user is permitted access.

If the attribute exists and is set to FALSE, the user is denied access.

If the attribute does not exist, the user is denied access.
If access_attr_used_for_allow is “no”, then the access_attr attribute is checked for existence in the user
object.

If the attribute exists, the user is denied access.

If the attribute does not exist, the user is permitted access.
ldap_connections_number
= 5
The number of concurrent connections to make to the LDAP server.
timeout
= 4
The number of seconds to wait for the LDAP query to finish.
The default settings for the “access_attr” and “access_attr_used_for_allow” settings mean that only users with the
Remote Access Permission selected above will be authorized.