cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

1597
Views
0
Helpful
5
Replies
rd1hamdaoui1
Beginner

AD username with blank space, authentication failure in ISE

Hi Guys Hope you're all doing well.

 

I have a problem when authentifying a user that have blank sapce in his AD username (like: bob stev), the username exists in the AD but is not authentified in ISE.

 

5 REPLIES 5
ognyan.totev
Contributor

How you do the authentication what kind of protocols you use .Share some configuration with us to can help you

Hi,

Im using DOT1X

Hi again , dot1x can be many things , Did you test you AD from where you did your connection to AD . I'cant help if you are not more detailed. Dot1x can be use MSCHAPv2 EAP ,PEAP,EAP-TLS

Hey, Thank you for your help,
we're using EAP-TLS.

Need info on how the cert auth profile configuration, beside ISE version number and patch level. The specific field and attribute that contains the space character.

Also, try and see whether it working with "Test User Authentication". I tried it successfully with "Dr Smith", which is the Display Name, the cn (common name), and the sAMAccountName. It did fail the lookup after I removed the space from the field "User logon name (pre-Windows 2000)", which updated the sAMAccountName, while OK if by distinguishedName.

Screen Shot 2018-10-31 at 2.02.12 PM.png

Content for Community-Ad