topic Re: LDAP Authentication Fails Becuase Username Has Space in General Topics

LDAP Authentication Fails Becuase Username Has Space

shp555 — Wed, 12 Feb 2014 19:19:37 GMT

Running into an issue with LDAP authentication. I'am able to successfully login via LDAP authentication when the username does not contain a space. However if the username contains a space (ie palo alto) the system logs show "User \'test\palo alto\' failed authentication. Reason: Authentication profile not found for the user From: x.x.x.x". I recall finding some documentation on this issue which stated to add an "_", "-", or "." instead of the space for the username but that does not work. Anyone else have a fix or workaround for this issue?

Re: LDAP Authentication Fails Becuase Username Has Space

pulukas — Fri, 14 Feb 2014 21:45:29 GMT

I think this is the document you are referring to from April of 2012 and citing version 4.1 as the affected releases.

Invalid Username/Password

They mention future support may happen. This generally means an enhancement request was submitted. So you could check the release notes for versions higher than what you are currently running (where the issue obviously still exists) to see if this was addressed.

If you find this was not yet added, you can also check with the SE and have them place your vote for the enhancement in the Palo Alto Internal tracking system.

Re: LDAP Authentication Fails Becuase Username Has Space

Retired Member — Sat, 15 Feb 2014 00:11:47 GMT

as I understand the problem is different here.You mean the user name has space, not Ldap profile name ? Is that correct ?

I did not test the user names which has space yet with 6.0, but I will asap.

Re: LDAP Authentication Fails Becuase Username Has Space

shp555 — Mon, 17 Feb 2014 16:35:59 GMT

Yes, panos has it. It is not because of the space in the profile name but the actual AD username. For example, when 'user.name' tries to log in via LDAP authentication then it works. However with 'user name' tries to log in via LDAP it says user not found even though their name appears in the PA via group mapping.

Re: LDAP Authentication Fails Becuase Username Has Space

${userLoginName} — Tue, 18 Mar 2014 12:33:49 GMT

panos did you get a chance to test this?

Has a bug been reported for this?

Re: LDAP Authentication Fails Becuase Username Has Space

Retired Member — Tue, 18 Mar 2014 14:33:42 GMT

hi,

I tested a user name with space but this is 5.0.7 in the lab with Global protect,

Ldap worked fine.

using panos 6 I will replicate it soon

Re: LDAP Authentication Fails Becuase Username Has Space

shp555 — Tue, 18 Mar 2014 14:40:07 GMT

Panos, you got a user with a space in their username to authenticate via LDAP? Did you attempt to authenticate into the GUI?

Re: LDAP Authentication Fails Becuase Username Has Space

Retired Member — Tue, 18 Mar 2014 15:34:14 GMT

Let me try it for webgui

I did not before

Re: LDAP Authentication Fails Becuase Username Has Space

Retired Member — Tue, 18 Mar 2014 15:43:10 GMT

how do you create a user with space ?

it is not allowed here

Re: LDAP Authentication Fails Becuase Username Has Space

shp555 — Tue, 18 Mar 2014 19:37:50 GMT

You cannot, that is part of the issue.

Re: LDAP Authentication Fails Becuase Username Has Space

shp555 — Tue, 18 Mar 2014 19:40:17 GMT

I recall seeing some document a while ago, which of course I cannot find now, that said if you put a '.','-',or '_' it should convert it into a space in LDAP.