+ Post New Thread
Results 1 to 14 of 14
Internet Related/Filtering/Firewall Thread, Lightspeed Rocket - Lifetime setting in Technical; Hi there, a question for the Lightspeed Rocket users. What have you set your authentication 'Lifetime' setting to for staff ...
  1. #1
    bodminman's Avatar
    Join Date
    Apr 2007
    Location
    Sunny Suffolk
    Posts
    1,153
    Thank Post
    724
    Thanked 224 Times in 116 Posts
    Rep Power
    84

    Lightspeed Rocket - Lifetime setting

    Hi there,

    a question for the Lightspeed Rocket users. What have you set your authentication 'Lifetime' setting to for staff and students?

    Thanks in anticipation

  2. #2

    Jawloms's Avatar
    Join Date
    Aug 2007
    Posts
    812
    Thank Post
    175
    Thanked 104 Times in 72 Posts
    Rep Power
    185
    One day.

  3. Thanks to Jawloms from:

    bodminman (30th September 2013)

  4. #3
    Admiral208's Avatar
    Join Date
    Mar 2008
    Location
    Bridgwater
    Posts
    719
    Thank Post
    176
    Thanked 63 Times in 55 Posts
    Rep Power
    39
    We have it set up to request authentication if the user is unknown. The lifetime is set to 45 mins. If a student tries to access the web on an ipad or other unknown device, they have to authenticate. The lifetime then runs out after 45 mins ready for the next lesson. If the user is at a domain desktop/laptop, the lightspeed client deals with authentication and it will last for as long as they are logged in.

  5. Thanks to Admiral208 from:

    bodminman (30th September 2013)

  6. #4
    bodminman's Avatar
    Join Date
    Apr 2007
    Location
    Sunny Suffolk
    Posts
    1,153
    Thank Post
    724
    Thanked 224 Times in 116 Posts
    Rep Power
    84
    Quote Originally Posted by Admiral208 View Post
    We have it set up to request authentication if the user is unknown. The lifetime is set to 45 mins. If a student tries to access the web on an ipad or other unknown device, they have to authenticate. The lifetime then runs out after 45 mins ready for the next lesson. If the user is at a domain desktop/laptop, the lightspeed client deals with authentication and it will last for as long as they are logged in.
    What happens if a student uses his iPad at break and has had to authenticate and then 5 minutes later he has to use the internet on a domain machine?

  7. #5
    Admiral208's Avatar
    Join Date
    Mar 2008
    Location
    Bridgwater
    Posts
    719
    Thank Post
    176
    Thanked 63 Times in 55 Posts
    Rep Power
    39
    The tier is set up so that users only have to authenticate if they are unknown. If they log on to a domain machine, they are a known user because the light speed agent is installed and they don't have to manually authenticate. Its handled automatically by the agent.

  8. Thanks to Admiral208 from:

    bodminman (1st October 2013)

  9. #6
    Eappariello's Avatar
    Join Date
    Jan 2007
    Location
    London
    Posts
    72
    Thank Post
    41
    Thanked 16 Times in 14 Posts
    Rep Power
    18
    Did you know...

    Any user can goto lsaccess.me/logout to end their web authentication session before it expires.

    Very useful for iPad carts. You can push out a webclip with configurator or your MDM with this link to provide a LogOut button for iOS devices.

    Also:
    For those of you with wireless setups that make use of EAP and a radius server you can now add the Lightspeed rocket filter as Radius accounting server, providing transparent authentication when a user authenticates to the wireless controller.

    Hope this helps
    Simon
    Last edited by Eappariello; 2nd October 2013 at 01:18 PM.

  10. Thanks to Eappariello from:

    Admiral208 (2nd October 2013)

  11. #7
    Admiral208's Avatar
    Join Date
    Mar 2008
    Location
    Bridgwater
    Posts
    719
    Thank Post
    176
    Thanked 63 Times in 55 Posts
    Rep Power
    39
    Quote Originally Posted by Eappariello View Post
    Did you know...

    Any user can goto lsaccess.me/logout to end their web authentication session before it expires.

    Very useful for iPad carts. You can push out a webclip with configurator or your MDM with this link to provide a LogOut button for iOS devices.

    Also:
    For those of you with wireless setups that make use of EAP and a radius server you can now add the Lightspeed rocket filter as Radius accounting server, providing transparent authentication when a user authenticates to the wireless controller.

    Hope this helps
    Simon
    We already use a log out button using the method you describe. The lifetime is more of a failsafe for when they forget.

  12. Thanks to Admiral208 from:

    Eappariello (2nd October 2013)

  13. #8
    Admiral208's Avatar
    Join Date
    Mar 2008
    Location
    Bridgwater
    Posts
    719
    Thank Post
    176
    Thanked 63 Times in 55 Posts
    Rep Power
    39
    @Eappariello

    Sorry to hijack this thread but is there any news on a fix for iOS 7 and safari not redirecting after authentication?

  14. #9
    IrritableTech's Avatar
    Join Date
    Nov 2007
    Location
    West Yorkshire
    Posts
    793
    Thank Post
    83
    Thanked 171 Times in 140 Posts
    Rep Power
    64
    Quote Originally Posted by Eappariello View Post
    Also:
    For those of you with wireless setups that make use of EAP and a radius server you can now add the Lightspeed rocket filter as Radius accounting server, providing transparent authentication when a user authenticates to the wireless controller.
    Interesting, thanks. Can this be used if you have multiple tiers within the rocket connecting to multiple directories?

  15. #10
    bodminman's Avatar
    Join Date
    Apr 2007
    Location
    Sunny Suffolk
    Posts
    1,153
    Thank Post
    724
    Thanked 224 Times in 116 Posts
    Rep Power
    84
    Quote Originally Posted by Admiral208 View Post
    @Eappariello

    Sorry to hijack this thread but is there any news on a fix for iOS 7 and safari not redirecting after authentication?
    Mid to late October I was told earlier today!

  16. Thanks to bodminman from:

    Eappariello (2nd October 2013)

  17. #11
    Eappariello's Avatar
    Join Date
    Jan 2007
    Location
    London
    Posts
    72
    Thank Post
    41
    Thanked 16 Times in 14 Posts
    Rep Power
    18
    Quote Originally Posted by IrritableTech View Post
    Interesting, thanks. Can this be used if you have multiple tiers within the rocket connecting to multiple directories?
    Yes every tier has its own authentication sources - but the radius shared secret has to be the same across every tier.

  18. #12
    IrritableTech's Avatar
    Join Date
    Nov 2007
    Location
    West Yorkshire
    Posts
    793
    Thank Post
    83
    Thanked 171 Times in 140 Posts
    Rep Power
    64
    Thanks for the clarification @Eappariello might have to investigate that further.

  19. #13
    Eappariello's Avatar
    Join Date
    Jan 2007
    Location
    London
    Posts
    72
    Thank Post
    41
    Thanked 16 Times in 14 Posts
    Rep Power
    18
    Quote Originally Posted by Admiral208 View Post
    @Eappariello

    Sorry to hijack this thread but is there any news on a fix for iOS 7 and safari not redirecting after authentication?
    This is resolved in 2.6.RC2 available now.

  20. #14

    Edu-IT's Avatar
    Join Date
    Nov 2007
    Posts
    7,114
    Thank Post
    403
    Thanked 619 Times in 566 Posts
    Rep Power
    180
    I think there's also a patch available if you don't want to go down the Release Candidate route?

  21. Thanks to Edu-IT from:

    Eappariello (31st October 2013)

SHARE:
+ Post New Thread

Similar Threads

  1. Lightspeed Rocket Web Filtering via TMG Firewall
    By sbarnard in forum Internet Related/Filtering/Firewall
    Replies: 4
    Last Post: 20th April 2013, 07:44 AM
  2. Lightspeed Rocket Appliance - integrating with VLANS
    By MrWu in forum Internet Related/Filtering/Firewall
    Replies: 11
    Last Post: 1st August 2012, 10:23 AM
  3. Replies: 17
    Last Post: 16th September 2005, 08:07 AM
  4. Setting a permanent default printer.
    By ninjabeaver in forum Windows
    Replies: 25
    Last Post: 23rd August 2005, 05:55 PM
  5. WiFi Settings + Sysprep dont play nice!
    By Inox in forum Windows
    Replies: 13
    Last Post: 9th August 2005, 11:25 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •