Guest Users management problem in 5.2.110.0 ?!?

[michael.lussier]

I just upgraded to 5.2.110.0 and now the admin folks can't see any of the existing guest user accounts on the 4402 DMZ controllers. I can see them as root.

Any Ideas how I can make it so those 5 people can see these accounts and manage them? The backup and restore prior to the upgrade to 5.2.110 went smoothly without any know hickups.

[Rob Huffman]

Hi Michael,

Have a look at this good recent thread where a new bug was identified in relation to this issue;

http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Wireless%20-%20Mobility&topic=Security%20and%20Network%20Management&topicID=.ee6e8c0&fromOutline=&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.2cc2cc01

Hope this helps!

Rob

[michael.lussier]

Hey there Rob,

I upgraded to 5.2.125 without any issues. I still have the problem. Root can see all of the guest user accounts and the Lobby Admin can"t see a single one of them.

[michael.lussier]

take this a step further. I did a test. No two lobby admin accounts can see what the other created.

I have 5 folks that will now have to share one account to do thier work instead of tracking who put what ID into the system.

Unless I setup to use RSA authentication to add and remove accounts.

[sriddle]

I am getting the exact same behavior. I upgraded from 4.2.110.0. If you find a solution, please post it. I will do the same.

[sriddle]

It does appear to be related to some of the content in that post. Searching the bug database, I found this: http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsw42942&from=summary.

It says that it is fixed in 5.2(122), but 5.2.125.0 still exhibits the behavior. The severity is listed as moderate, but the helpdesk here doesn't seem to agree with Cisco's classification...

[generaljoe]

It's by design - new behaviour in v5 of WCS. Lobby admins can see only their own accounts, ie only ones they created. If you have a requirement for lobby admins to see others' accounts (like, you want the helpdesk to be able to reset passwords) then you have to make them superusers.

[sriddle]

Going back through the documentation, I see that. Thanks for the reply.