topic Re: ISE supporting special characters for user account passwords on LDAP/AD in Network Access Control

ISE supporting special characters for user account passwords on LDAP/AD

umahar — Sat, 09 Mar 2019 03:12:45 GMT

A customer reached out to me stating concerns on ISE's ability to support various special characters in passwords for user accounts in AD/LDAP.

I don't remember facing any issues with regarding special characters in the past but I will be testing all the characters stated by the customer in a lab.

Wondering if anyone faced any issues in the past.

Re: ISE supporting special characters for user account passwords on LDAP/AD

Francesco Molino — Thu, 21 Feb 2019 04:24:54 GMT

Hi

Did he told you which characters?
On my latest deployment (this week 😀), on test users i had some special characters like @ # ! and it works.

Also what ise version are we talking about?

Re: ISE supporting special characters for user account passwords on LDAP/AD

umahar — Thu, 21 Feb 2019 17:17:15 GMT

Tested an account with the below password with no issue

Test~!@#$%^&*()_+`-=123

Re: ISE supporting special characters for user account passwords on LDAP/AD

Francesco Molino — Sat, 23 Feb 2019 02:22:44 GMT

Tested as well and no issue. Maybe your customer has another issue.

Re: ISE supporting special characters for user account passwords on LDAP/AD

Rahul Govindan — Sat, 23 Feb 2019 11:40:56 GMT

I have had no trouble with ISE accounts with special characters, but I know that ISE does not play well with AD group names with special characters. Maybe that is the problem?

https://www.cisco.com/c/en/us/td/docs/security/ise/2-0/ise_active_directory_integration/b_ISE_AD_integration_2x.html#ID496

An authorization policy fails if the rule contains an Active Directory group name with special characters such as /, !, @, \, #, $, %, ^, &, *, (, ), _, +, or ~.

Re: ISE supporting special characters for user account passwords on LDAP/AD

Karsten Svenningsen — Fri, 21 Feb 2020 11:05:02 GMT

We have issues with the special danish charecters æ ø and å.

Regards Karsten

Re: ISE supporting special characters for user account passwords on LDAP/AD

hslai — Sat, 22 Feb 2020 21:00:55 GMT

CSCvp07591 is the only known issue I found with UTF-8 characters.

If that is not it, please open a TAC case, ensure TAC able to recreate it and file a bug accordingly.