Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Richard_Wieser
Participant

Are usernames case-sensitive?

They appear to be in our environment (R80.30)

We use an External User Profile that authenticates via RADIUS to our MS NPS server. The profile is defined as user uses domain\username to sign in. The domain is omitted authenticating. There is a local group, 'RADIUS-DOMAIN' and the only member is the External User Profile. This works but if a user enters say Domain\username or DOMAIN\username they are not matched to the external user profile and therefore not a member of the 'RADIUS-DOMAIN' group. This happens with the Mobile Access VPN clients and with the Mobile access portal.

Is this by design?

0 Kudos
Reply
3 Replies
PhoneBoy
Admin
Admin

Based on what you're describing, maybe it's entering the domain that's the issue and not case sensitivity?
0 Kudos
Reply
Douglas_Chenjer
Contributor

Hi. But when you use Radius authentication on CheckPoint VPN, are the usernames case-sensitive? i.e the user on the Active Directory must match the created user on the Identities Radius profile on Checkpoint (e.g on both AD and Checkpoint its john and john(all lower cases) compared to one side is john(say AD) and John(on Checkpoint)?. Will both work or its case sensitive?

0 Kudos
Reply
G_W_Albrecht
Champion
Champion

RFC 2865 Remote Authentication Dial In User Service (RADIUS)

The format of the username MAY be one of several forms: text Consisting only of UTF-8 encoded 10646 [7] characters. network access identifier A Network Access Identifier as described in RFC 2486 [8]. distinguished name A name in ASN.1 form used in Public Key authentication systems.

So this will distinguish between usernames john, John, Jóhn, JOHN...

0 Kudos
Reply