AD 2008 + WLC 6.0 or 7.0 issue with password with accent

[bbordereau]

Hello, ih ave got an issue observed in real production and lab setup

USER :

802.1x / PEAP-MSCHAPv2

WLC in version 7,( LAB) or WIsm 6.0)

Catalyst 3560 en version 12.2(50)SE1,

Radius NPS sur WS2008

AD WS2008

TEST WITH WIFI USER

------------------

USER WITH PASWWORD Without accent

Ø       connection OK –  @ip received, ping OK

SAME USER BUT password change with adding an accent  « é

Ø      no conenction – no ip @, no ping

2 / SAME USER CONNECTED WIRED LAN on 3560:OK on Both cases

-----------------------------------------------------------------------------------------

USER WITH PASWWORD Without accent

Ø       connection OK –  @ip received, ping OK

SAME USER BUT password change with adding an accent  « é

Ø      connection OK –  @ip received

It looks like the issue is on wlc when user uses an password with accent  ( i know it is a typical french question ) , but does somebody know if it is supported or not and why ?

and wher i can find an officail doc to provide to all my customer

Thanks in advance for help

[Stephen Rodriguez]

I agree, from that it does sound like a wireless issue.  But, if you're doing EAP the WLC doesn't care about the password, that is between the supplicant and the server.

What do the logs on the AAA say?  Was there an access except or a reject?  If you run the debugs on the wlc, do you see the authenticaiton going to "back end"?

What supplicant are you using?  Native Windows, CSSC, IntelProset, Dell?

[bbordereau]

hello, i turned debug on on end customer network , debug aaa

see file attached

i have opend an official SR to TAC to sse if it is a known issue

Best Regards

bert

[romainpage]

Hi,

It looks like I am facing the same kind of issue, did you have any feedback from Cisco TAC ?

Thanks.

Best regards,

Romain

[Scott Fella]

I don't think that was ever fixed. What code are you running?

Sent from Cisco Technical Support iPhone App

[romainpage]

Hi Scott,

I am running 7.3.101.

Tested it this morning and seemed to confirm the issue with accent characters.

I looked in bug tool or in configuration guides but were not able to find any clear limitation.

Thanks.

Best regards,

Romain

[Scott Fella]

Yeah I don't think the WLC understands that:). I can test it out in v7.4, but you might want to just open up a TAC case and get an answer. If you do, please post as it will help others out.

Sent from Cisco Technical Support iPhone App

[romainpage]

Hi,

Just got an answer from TAC confirming issues with WLC and special UTF-8 characters.

Two bugs are currentlty raised :

- CSCtz35127    Need to document limited UTF-8 support of the WLC

- CSCtz31160    WLC webauth internal page doesn't accept UTF8 usernames [Internal bug]

So nothing fixed so far but at least a clearer documentation on the subject might be done.

Best regards,