Problem with GlobalProtect password.

Reply
Highlighted
L2 Linker

Problem with GlobalProtect password.

Hello all!


If we put a sterling pound (£) symbol in a user password, the authentication fails. We are using GlobalProtect 4.1.8 and use a RADIUS server running Microsoft Azure MFA server on the authentication profile of the GP gateway, with just an LDAP profile on the portal. Is this related to a GlobalProtect bug?


Thanks in advance!
L4 Transporter

Re: Problem with GlobalProtect password.

Likely they are not escaping that character, version 5.0 had this same issue with several special characters and after reporting it the next release fixed the issue. I would recommend opening a case and supplying all the details 

 

protip: when this happens look at the logs and see if the XML in the logs breaks and contains the pieces of the password that occur after the special character. Add this detail (if found) to the ticket. You may also want to send your SE an email so they are aware as well. 

 

The characters we found here were all pretty standard special characters we did not try the pound symbol since we are in the U.S. it is not really used on our keyboards.

 

L6 Presenter

Re: Problem with GlobalProtect password.

To confirm,,,

 

I entered AAAAAA as my password and radius got this...

 

14:32:27:178 [9]auth.auth.User Entered Passcode=££££££

L2 Linker

Re: Problem with GlobalProtect password.

Thanks a lot for the reply, hshawn.
Which logs do you mean?
Thanks!
L2 Linker

Re: Problem with GlobalProtect password.

Thank you, MickBall, for your answer.
That line you posted is from the Radius log?

Could it be that GlobalProtect is not supposed to use the sterling pound symbol because it's an American product?
Thanks!
L6 Presenter

Re: Problem with GlobalProtect password.

sorry, long day...

 

I entered AAAAAA and got ...

 

14:32:27:178 [9]auth.auth.User Entered Passcode=££££££

 

so it is adding special charachter before pound sign.

 

sorry i cant help any further....

L6 Presenter

Re: Problem with GlobalProtect password.

oooohhh steady, this could be the start of WW3.

 

you are on the right lines...   here is the Azure allowed special characters statement,,,

 

"Non-alphanumeric characters (special characters): (~!@#$%^&*_-+=`|\(){}[]:;"'<>,.?/) Currency symbols such as the Euro or British Pound are not counted as special characters for this policy setting."

L6 Presenter

Re: Problem with GlobalProtect password.

i can only assume Palo have used a similar policy...

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!