Case-Sensitive logon with ASA and LDAP

[Tameem Hourani]

I am doing LDAP authentication using my ASA and everything works great.  I have set my max similtanious connections per user to 1, and this doesnt exactly work 100%.  My problem is that, if the username for example is "fred"; "fred" can only have one session, but if I user "Fred", I can have a second session because the ASA sees it as a second user.  So I could have many more sessions if I use "Fred","fRed","frEd","freD", etc..  How do I force the logon to LDAP to be case-sensitive?

Thanks!

[Moin Qaimkhani]

Hi Tameem,

Did you get to bottom of this issue?
We have exactly same issue but havnt found its solution yet, A simple temp fix is if you change all your UIDs to numbers only, eg 1211. But unfotunately this is not the option in our case. we can not change user IDs.
please let us know if you come accross any solution for that.

[olpeleri]

Hello,

That reminds me a old bug

CSCsz21934    ASA AAA should  treat RA username as case-insensitive

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsz21934

Looks like you need to upgrade if you wanna get rid of it

Cheers,

Olivier