This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Domain authentication - admin PW with special characters

Good Day everyone!

we have trouble with some XG Firewalls.

All administrator accounts with some specific special charactes like ' arnt working anymore. It happened on Firmware 17.5.2 and is still buggy on 18.0.3. So no new users are able to authenticate.

We tried to retype passwords - test it - all right, when you save it and again go to test it fails. error ist persistent. Even tried to complete delete all domain users, groups and authentication servers - nothing changed.

We also contacted sophos support but till 11.2020 we got no support, even after escalating the ticket. Maybe here some likes to help.

This thread was automatically locked due to age.

0 LuCar Toni over 4 years ago

What facilities do you try to authenticate?

And against which Backend do you authenticate? AD Server?
Cancel
Vote Up 0 Vote Down

Cancel
0 AOP over 4 years ago in reply to LuCar Toni

sry, forgot this part.

authenticate against AD Server. We just want to sync the AD Users and authenticate the AD users, so they can download VPN clients and so on.
Cancel
Vote Up 0 Vote Down

Cancel
0 AOP over 4 years ago in reply to AOP
Cancel
Vote Up 0 Vote Down

Cancel
0 AOP over 4 years ago in reply to AOP

here its alright, when we save it, retest it - authentication failed. no groups can be imported
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 4 years ago in reply to AOP

So you are talking about the Domain Admin Account, you specify to read / pull against AD. Not a particular User Account, which has this credentials?

Assuming i would follow up this and create a new user in AD for XG specifically (Least privilege approach), this could be a unknown bug.
Cancel
Vote Up 0 Vote Down

Cancel
0 AOP over 4 years ago in reply to LuCar Toni

yes that's right. Tried with the domain admin account. testet with another user and it is working. seems to be a bug when you use the so called 'administrator' - standard domain admin account in the Windows AD. all our customer Firewall having this bug.
Cancel
Vote Up 0 Vote Down

Cancel
0 AOP over 4 years ago in reply to AOP

confirmed this behavior with 3 firewalls. When we use any other user to read / pull against AD it is working. Using the administrator it fails.
Cancel
Vote Up 0 Vote Down

Cancel
0 AOP over 4 years ago in reply to AOP

but no user can be authenticated. when you try to authenticate on the user portal - authentication failed for the users.
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 4 years ago in reply to AOP

If you use a admin user without this password to link this to the XG, can a user with this special character can register to user portal?
Cancel
Vote Up 0 Vote Down

Cancel
0 AOP over 4 years ago in reply to LuCar Toni

thanks for your fast support and sry for my bad english ...

tried it - nothing changed. a new user tried to authenticate throught user portal - authentication failed
Cancel
Vote Up 0 Vote Down

Cancel