just verified that it is possible to create a user from NSO webUI.
- log on to web UI as admin
- click on menu button at the top left corner of the web UI (the white circle with 3 black horizontal lines)
- from "Modules", uncollaps "tailf-aaa" and click "aaa"
- in the now open "authentication" tab under "User management" click on "users"
- click + sign
- enter username (use same username as on the device for convenience)
- in the now opening "user" tab set imaginary (or in your case better: meaningful!) values for uid(I used 12345), gid (I used 1234), ssh_keydir(I used /), homedir (I used /home/testuser) and enter e.g. ABCDEF! as password.
- Log off from webUI and try logging on as your newly created user with the "!-password", should work.
From NSO CLI you can now add this user to the appropriate authgroup e.g. devices authgroups group iosdevs umap [yournewlycreatedusergoeshere] same-pass remote-secondary-password myenablepassword.
The above assumes you have an authgroup for e.g. the IOS devices (group iosdevs).
remote-secondary-password myenablepassword only needs to be set if you have that active/configured on the device.
Details regarding users/usergroups can be found in the NSO admin guide I think.
When you now logon to the device from NSO the password with the ! should be passed on correctly I believe. But as mentioned in my initial post: Best to leave out "weird characters", especially ?. Stick with alphanumeric (in upper and lowercase) and gain slightly more entropy by using a few characters more in the password (that will roughly make up for not using chars such as ! or ?).
