topic Re: Bug in password-string when using GlobalProtect with LDAP? in General Topics

Bug in password-string when using GlobalProtect with LDAP?

inheco — Thu, 10 Mar 2016 16:52:55 GMT

We had some users, who were not able to use VPN. they alway got XML parse-errors in the GlobalProtect Agent log.

We finaly found out, that this users had '<' or '>' in theire passwords. when thy changed theire passwords in some string without these characters, the xml-errors disappeared and thy could login.

we are using GlobalProtect Agent 3.0.0.

Another Bug is, that usernames for login are case-sensitiv. LDAP isn't case-sensitiv, so why GlobalProtect is?

Re: Bug in password-string when using GlobalProtect with LDAP?

pulukas — Sat, 12 Mar 2016 00:52:24 GMT

Thanks for documenting the issue for us.

If you have time, please create a support case so the bugs can be offcially reported up to the developers and get fixed in future releases. You can do this with the "Get Support" button in the upper right.

Re: Bug in password-string when using GlobalProtect with LDAP?

abjain — Wed, 16 Mar 2016 06:45:44 GMT

Hi,

For the use of special caharacters in GP, there was a bug reported which is fixed in 7.0.2 onwards. This seems to be an issue in 7.0.1 only.

https://www.paloaltonetworks.com/documentation/70/pan-os/pan-os-release-notes/pan-os-7-0-2-addressed-issues.html -> Bug 82675

For case senstitive usernames, please report this to support team.