topic Re: Non ascii characters in password. Fails to autenticate on Capsule in SASE and Remote Access

Non ascii characters in password. Fails to autenticate on Capsule

norrig — Thu, 01 Jun 2023 11:36:12 GMT

Hi.
We use Capsule Workspace with authentication through our AD, but we've recently experienced that users with non-ascii characters in their password, for an example "Æ Ø Å" cannot login to Capsule Workspace on their mobile devices, with a 401 backend error and a "Mail failed to authenticate" on the front-end.

Removing special characters from the password 'fixes' the problem, but this is not a proper solution, as it generates a lot of internal tickets and raises other issues.

The same passwords works fine in Windows/all other places.
Under "General > LDAP Properties" we have "Unicode Support" enabled, but it still does not fix the issue.

Has anyone else run into this problem? Any ideas?
Thanks in advance.

Re: Non ascii characters in password. Fails to autenticate on Capsule

PhoneBoy — Thu, 01 Jun 2023 18:10:59 GMT

How are you doing the authentication to the backend server?
If it's NTLM, perhaps this is the issue: https://support.checkpoint.com/results/sk/sk104102
In which case, it's an RFE.

Re: Non ascii characters in password. Fails to autenticate on Capsule

Wolfgang — Thu, 01 Jun 2023 21:21:31 GMT

@norrig we got the same with “§“ as character in a password. You can try to solve with TAC but best solution will be to avoid such characters.