Lightspeed Rocket - Lifetime setting

[bodminman]

Hi there,

 

a question for the Lightspeed Rocket users. What have you set your authentication 'Lifetime' setting to for staff and students?

 

Thanks in anticipation

[Jawloms]

One day.

[Admiral208]

We have it set up to request authentication if the user is unknown. The lifetime is set to 45 mins. If a student tries to access the web on an ipad or other unknown device, they have to authenticate. The lifetime then runs out after 45 mins ready for the next lesson. If the user is at a domain desktop/laptop, the lightspeed client deals with authentication and it will last for as long as they are logged in.

[bodminman]

We have it set up to request authentication if the user is unknown. The lifetime is set to 45 mins. If a student tries to access the web on an ipad or other unknown device, they have to authenticate. The lifetime then runs out after 45 mins ready for the next lesson. If the user is at a domain desktop/laptop, the lightspeed client deals with authentication and it will last for as long as they are logged in.

 

What happens if a student uses his iPad at break and has had to authenticate and then 5 minutes later he has to use the internet on a domain machine?

[Admiral208]

The tier is set up so that users only have to authenticate if they are unknown. If they log on to a domain machine, they are a known user because the light speed agent is installed and they don't have to manually authenticate. Its handled automatically by the agent.

[Eappariello]

Did you know...

 

Any user can goto lsaccess.me/logout to end their web authentication session before it expires.

 

Very useful for iPad carts. You can push out a webclip with configurator or your MDM with this link to provide a LogOut button for iOS devices.

 

Also:

For those of you with wireless setups that make use of EAP and a radius server you can now add the Lightspeed rocket filter as Radius accounting server, providing transparent authentication when a user authenticates to the wireless controller.

 

Hope this helps

Simon

Edited October 2, 2013 by Eappariello

[Admiral208]

Did you know...

 

Any user can goto lsaccess.me/logout to end their web authentication session before it expires.

 

Very useful for iPad carts. You can push out a webclip with configurator or your MDM with this link to provide a LogOut button for iOS devices.

 

Also:

For those of you with wireless setups that make use of EAP and a radius server you can now add the Lightspeed rocket filter as Radius accounting server, providing transparent authentication when a user authenticates to the wireless controller.

 

Hope this helps

Simon

 

We already use a log out button using the method you describe. The lifetime is more of a failsafe for when they forget.

[Admiral208]

@Eappariello

 

Sorry to hijack this thread but is there any news on a fix for iOS 7 and safari not redirecting after authentication?

[IrritableTech]

Also:

For those of you with wireless setups that make use of EAP and a radius server you can now add the Lightspeed rocket filter as Radius accounting server, providing transparent authentication when a user authenticates to the wireless controller.

 

Interesting, thanks. Can this be used if you have multiple tiers within the rocket connecting to multiple directories?

[bodminman]

@Eappariello

 

Sorry to hijack this thread but is there any news on a fix for iOS 7 and safari not redirecting after authentication?

 

Mid to late October I was told earlier today!

[Eappariello]

Interesting, thanks. Can this be used if you have multiple tiers within the rocket connecting to multiple directories?

Yes every tier has its own authentication sources - but the radius shared secret has to be the same across every tier.

[IrritableTech]

Thanks for the clarification @Eappariello might have to investigate that further.

[Eappariello]

@Eappariello

 

Sorry to hijack this thread but is there any news on a fix for iOS 7 and safari not redirecting after authentication?

 

This is resolved in 2.6.RC2 available now.

[Edu-IT]

I think there's also a patch available if you don't want to go down the Release Candidate route?