2.9.2.12. manageTags

This plugin allows add, update or delete the tags associated with the user device that are being managed by the openNAC policy, remember that these tags includes a TTL and can be modified through this process.

For configuring the manageTags plugin, we can add the following parameters.

../../../_images/managetags.png


  • Tag to be added when active status: Tag to be added/updated when valid auth is produced. Multiple tags could be defined by Policy Custom Params.

  • Tag to be deleted when active status: Tag to be deleted when valid auth is produced. Multiple tags could be defined by Policy Custom Params.

  • Tag to be added when reject status: Tag to be added/updated when invalid auth is produced. Multiple tags could be defined by Policy Custom Params.

  • Tag to be deleted when reject status: Tag to be deleted when invalid auth is produced. Multiple tags could be defined by Policy Custom Params.

In case you are using the default name fields (addTag and delTag), some valid custom params would be: addTag, addTag1, addTag02, addTag38, delTag, delTag1, delTag02, delTag38.

Note

You can use the same “index” value for add and delete a TAG, if you want.

When “addTag” is used, the tag is associated with the user device, if this tag was previously associated, the timestamp is updated in order to manage the time to live (TTL) of this relationship and avoid to be purged when this time is exceeded.

Note

Maximum number of tags to be managed by the plugin is 99 in total. If you exceed this number an error is produced in plugin execution an the user device tags won’t be updated.