topic Re: AD username with blank space, authentication failure in ISE in Network Access Control

AD username with blank space, authentication failure in ISE

rd1hamdaoui1 — Wed, 31 Oct 2018 09:05:35 GMT

Hi Guys Hope you're all doing well.

I have a problem when authentifying a user that have blank sapce in his AD username (like: bob stev), the username exists in the AD but is not authentified in ISE.

Re: AD username with blank space, authentication failure in ISE

ognyan.totev — Wed, 31 Oct 2018 09:13:24 GMT

How you do the authentication what kind of protocols you use .Share some configuration with us to can help you

Re: AD username with blank space, authentication failure in ISE

rd1hamdaoui1 — Wed, 31 Oct 2018 13:01:17 GMT

Hi,

Im using DOT1X

Re: AD username with blank space, authentication failure in ISE

ognyan.totev — Wed, 31 Oct 2018 13:06:55 GMT

Hi again , dot1x can be many things , Did you test you AD from where you did your connection to AD . I'cant help if you are not more detailed. Dot1x can be use MSCHAPv2 EAP ,PEAP,EAP-TLS

Re: AD username with blank space, authentication failure in ISE

rd1hamdaoui1 — Wed, 31 Oct 2018 14:01:51 GMT

Hey, Thank you for your help,
we're using EAP-TLS.

Re: AD username with blank space, authentication failure in ISE

hslai — Wed, 31 Oct 2018 21:11:25 GMT

Need info on how the cert auth profile configuration, beside ISE version number and patch level. The specific field and attribute that contains the space character.

Also, try and see whether it working with "Test User Authentication". I tried it successfully with "Dr Smith", which is the Display Name, the cn (common name), and the sAMAccountName. It did fail the lookup after I removed the space from the field "User logon name (pre-Windows 2000)", which updated the sAMAccountName, while OK if by distinguishedName.