topic Re: "Disclose invalid usernames" not working in ISE 2.4 patch 9 in Network Access Control

"Disclose invalid usernames" not working in ISE 2.4 patch 9

scott.stapleton — Tue, 12 Nov 2019 15:32:26 GMT

CSCvh91118 implies (but doesn't explicitly state) that from ISE 2.4 patch 6, you can permanently enable the Disclose invalid usernames option. The pop-up help has also removed references about this option being limited to 30 minutes.

This option is not working however; RADIUS Live Logs still mask the invalid username, even when testing within ~5 minutes of enabling it. Unlike the previous behavior, the checkbox stays ticked after 30 minutes so that doesn't appear to be the problem.

Can anyone running ISE 2.4 patch7+ confirm whether the option works for them please?

CSCvo24097 doesn't appear to be at play as it appears CSCvo24097 is what drove the enhancement request that CSCvh91118 discusses.

Re: "Disclose invalid usernames" not working in ISE 2.4 patch 9

Damien Miller — Tue, 12 Nov 2019 15:56:41 GMT

I have two deployments right now that have this enabled. One is on 2.4 patch 9 and another on 2.4 patch 10. Both work correctly assuming I am looking at new authentications, it doesn't unmask old ones.

Re: "Disclose invalid usernames" not working in ISE 2.4 patch 9

Timothy Abbott — Tue, 12 Nov 2019 16:04:09 GMT

If you are still having issues with this option, please contact the TAC to troubleshoot further.

-Regards,

Tim

Re: "Disclose invalid usernames" not working in ISE 2.4 patch 9

scott.stapleton — Tue, 12 Nov 2019 17:53:54 GMT

I assume you're using the AD connector?

It might be different with the LDAP connector I suspect.

Re: "Disclose invalid usernames" not working in ISE 2.4 patch 9

scott.stapleton — Tue, 12 Nov 2019 17:55:05 GMT

Thanks - can you confirm this is a known bug (with the LDAP connector at least)?

Re: "Disclose invalid usernames" not working in ISE 2.4 patch 9

scott.stapleton — Thu, 14 Nov 2019 09:57:45 GMT

Does anyone have this working with the LDAP connector?

Re: "Disclose invalid usernames" not working in ISE 2.4 patch 9

holger.moersfelder@global.ntt — Thu, 23 Jan 2020 09:49:28 GMT

Hi,

using ISE 2.7 the "Disclose invalid usernames " is working with "Always show invalid usernames" option for LDAP User lookups.

Bug seems to be fixed now.

Re: "Disclose invalid usernames" not working in ISE 2.4 patch 9

edondurguti — Thu, 06 Feb 2020 09:35:02 GMT

Hi, was there a bug ID? I am running 2.6 patch3 and still seeing the issue.