Are usernames case-sensitive?

[Richard_Wieser]

They appear to be in our environment (R80.30)

We use an External User Profile that authenticates via RADIUS to our MS NPS server. The profile is defined as user uses domain\username to sign in. The domain is omitted authenticating. There is a local group, 'RADIUS-DOMAIN' and the only member is the External User Profile. This works but if a user enters say Domain\username or DOMAIN\username they are not matched to the external user profile and therefore not a member of the 'RADIUS-DOMAIN' group. This happens with the Mobile Access VPN clients and with the Mobile access portal.

Is this by design?

[PhoneBoy]

Based on what you're describing, maybe it's entering the domain that's the issue and not case sensitivity?

[Douglas_Chenjer]

Hi. But when you use Radius authentication on CheckPoint VPN, are the usernames case-sensitive? i.e the user on the Active Directory must match the created user on the Identities Radius profile on Checkpoint (e.g on both AD and Checkpoint its john and john(all lower cases) compared to one side is john(say AD) and John(on Checkpoint)?. Will both work or its case sensitive?

[G_W_Albrecht]

RFC 2865 Remote Authentication Dial In User Service (RADIUS)

      The format of the username MAY be one of several forms:

      text      Consisting only of UTF-8 encoded 10646 [7] characters.

      network access identifier
                A Network Access Identifier as described in RFC 2486
                [8].

      distinguished name
                A name in ASN.1 form used in Public Key authentication
                systems.

So this will distinguish between usernames john, John, Jóhn, JOHN...