WCS Lobby Ambassador Accounts

Unanswered Question
Mar 2nd, 2009

Unable to manage Guest accounts created by different WCS Lobby Ambassador user Accounts.

I have setup three Lobby Ambassador accounts in WCS. Three staff members have been given seperate usernames and passwords to WCS with Lobby Ambassador profiles to allow them to create and manage the Guest Wireless Accounts.

It was expected that they would be able to view and manange all Guest accounts, but they can only manage accounts they created. If I login as WCS admin I can then see all accounts created by each user.

We require that all three can view and manage each others accounts using their own WCS login. Is this possible as docs do not mention??

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Leo Laohoo Mon, 03/02/2009 - 19:02

Overall Guest accounts can only be viewed by the ADMIN account.

I have opened a TAC regarding this issue last year and they promised to fix it by FW 5.2.X.

What's your firmware?

I guess the only workaround is for everyone of your "lobby admin" to use only one account.

sslittle Tue, 03/03/2009 - 03:09

Thanks for your reply. I am running Wireless Control System Version 5.2.110.0.

Either a fix has been implemented or I do not know how to configure. I spent time looking and could not see anything in the docs or any configuration options to enable.Would be interesting if you can re-open the TAC case and ask for an update.

Due to the customer security policy it is not allowed for admin users to share a single WCS account. They need seperate accounts to manage ALL guest user accounts created.

rob.huffman Tue, 03/03/2009 - 06:19

Hi Stuart,

Just to add a note to the great tips from Leo;

CSCsw42942 Bug Details

SuperUser cannot see guest users created by admin users

Symptom:

If a WCS admin user creates a guest user through controller template, a Superuser will not be able to see the guest user created.

Conditions:

wcs 5.2.110

Workaround:

the root user can see everything

Further Problem Description: Status

Fixed

Severity

3 - moderate

Last Modified

In Last 3 Days

Product

Cisco Wireless Control System

Technology

1st Found-In

5.2(110.0)

Fixed-In

5.2(122.0)

6.0(23.0)

Have a look at this good recent thread;

http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Wireless%20-%20Mobility&topic=Security%20and%20Network%20Management&topicID=.ee6e8c0&fromOutline=&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.2cc2cc01

And this good thread;

http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Wireless%20-%20Mobility&topic=Security%20and%20Network%20Management&topicID=.ee6e8c0&fromOutline=&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.2cc3077f

Hope this helps!

Rob

sslittle Wed, 03/04/2009 - 17:10

Hi Rob,

Thanks for your advice. I read the info and appears there were a few issues but nothing that actually appears to solve my problem.

I have now upgraded to the latest version 5.2.130.0 and there is no change a WCS Lobby Ambasador can only view the Guest accounts they created and not any other Lobby Ambasador accounts.

The workaround to use Superuser accounts is not practical as reception staff are to create Guest accounts and would confuse them and they could cause real damage.

Not sure what to do now as cannot see how to resolve and it looks like it may be the way it is intended to work but still not sure??

Leo Laohoo Tue, 03/03/2009 - 14:09

Nuts! I forgot another work-around:

Try using the CLI command "show netusers summary", "sh netuser details ".

Actions

This Discussion

 

 

Trending Topics: Other Wireless Mobility

client could not be authenticated
Network Analysis Module (NAM) Products
Cisco 6500 nam
reason 440 driver failure
Cisco password cracker
Cisco Wireless mode