Hi,
Authentication and Accounting both function correctly, however Authorization fails with a code 0x10 denial (backed up by ACS accounting). Upon sniffing and decrypting the Authorization packet the Nexus sends, it is clear that all usernames are being truncated after 8 characters, and hence failing when it reaches ACS. Obviously in a multidomain windows authentication world it's nearly impossible to have a username string shorter than 8 characters.
For example if I login with a username of:
ciscoengineer
the decrypted authorization packet will contain the tag of:
user: ciscoeng
This is affecting both the 1000v and the 1010 appliance, both are on code version 4.2(1)SP1(2).
I cannot find any reference to a similiar existing open bug, so I'm going to raise a TAC case, however I thought I'd check on here to see if anyone had experienced anything similiar?
Many thanks,
Doug
