topic Re: LDAP Authentication fails with special characters in Network Access Control

LDAP Authentication fails with special characters

snor.thomas — Mon, 11 Mar 2019 00:04:48 GMT

Hi,

We configure ACS 4.2 to authenticate against our AD. This work fine for the most users. But it seems that some password with special characters fails. Passwords wit ! are working. So it seems that only "special" special characters are not working.

Any ideas?

Many thanks

Thomas

Re: LDAP Authentication fails with special characters

Adam Watts — Tue, 27 Apr 2010 08:10:48 GMT

This looks very similar to a problem i'm having, i use our acs 4.2 to tie into our AD network. we have just changed our password policy to make sure you use special characters. If i try to log into our WCS (wireless manager) with my recently changed password and I get “External DB user invalid or bad password” and before I had to change my password it was fine.WCS talks to the ACS using TACACS+. I use ! as a special character in my password. Are there any characters that should be avoided in passwords when using the setups of ACS to windows AD?

Re: LDAP Authentication fails with special characters

snor.thomas — Fri, 14 May 2010 11:20:14 GMT

Hi,

IOS can only handle 95 characters of the 7 Bit ASCII code

only thischaracters are useable:

␣!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_

`abcdefghijklmnopqrstuvwxyz{|}~

this means for the greman keyboard layout

§	no
ß	no
´	no
°	no
ü	no
ä	no
ö	no
@	works
!	works
"	works
$	works
%	works
&	works
/	works
(	works
)	works
=	works
?	works
\	works
`	works
+	works
*	works
~	works
'	works
#	works
-	works
_	works
:	works
.	works
;	works
,	works
<	works
>	works
\|	works
^	works
{	works
}	works
[	works
]	works

Re: LDAP Authentication fails with special characters

Jatin Katyal — Fri, 14 May 2010 11:35:18 GMT

Adam,

You may check this:

CSCtf70322 Logins fail for usernames with exclamation "!" character using TACACS

Regds,

Do rate helpful posts-

Re: LDAP Authentication fails with special characters

Jatin Katyal — Fri, 14 May 2010 11:36:52 GMT

Thomus,

In your case, I think this one fits;

CSCsk32241 ACS support for non ASCII characters

Regds,

Do rate helpful posts-