Local user passwords problems with GP after upgrade PAN OS

[ACortes]

Hi, I've just migrate from PAN OS 5.0.10 to 6.0.7 and GlobalProtect users have got problems with login. They had the password saved on their GP agent, but connection was refused and users were blocked due to intensive login attempts. We're using local users. It seems like users who couln't login are those with same string as user and password. Is there any addressed issue related? I haven't found anything analogous.

Thanks

[pulukas]

Check the settings in the following dialog box:

Device tab --- Setup ---Management tab --- Minimum Password Complexity box

Remove the check from "Block user name inclusion" to allow the users to connect.

But you already know you should consider just having them change passwords rather than allow this.  You could then require password change and deny password reuse to get them back online.  and after everyone is changed re-enable the feature.

 

[ACortes]

Thanks Steven, but I assured the Minimun Password Complexity was not enabled.

[pulukas]

Well, there is really no other place to set this up.  So if this is off there is probably a bug that is using the default settings for password complexity.

I would turn it on and setup the features you need to allow the passwords to work.

If you want to get the bug identified and added to the bug database you could open a ticket with support as well so they can collect the data to pass on to programing.