Special Character change in R81.20 JHF 96

[C_H]

Hello Everyone,

I recently came across the limitation described in https://support.checkpoint.com/results/sk/sk183201:

After installing JHF96+ for R81.20, a "." (dot) in a username is a problem for WebUI Login and logging in with a username with a dot  no longer works (SSH is unaffected of this).

To be fair, I checked the documentation and only "-" and "_" are mentioned as allowed special characters in usernames (I looked in the GAiA Admin Guide R80.40, R81, R81.10 and R81.20), but I know several environments where dots are used in the admin name concept and have worked without problems so far

What are your opinions?

Best Regards

Colin

[the_rock]

I tried clish, but no luck...this is really bugging me now, I wont give up easily : - )

Andy

CP-GW>
CP-GW> add user andy. uid 0 homedir /home/andy.
NMSUSR0019 Username must begin with a letter and cannot exceed 32 characters. Please use alphanumerics, dash(-) or underscore(_) characters only.
add user andy.
----^^^^^^^^^^
CP-GW>

[KeremAtesR]

I believe the way to accomplish it is

set aaa allow-unsanitized-username on

colleague had it working on test environment with this setting.

[the_rock]

Ah, good point...let me try that later.

Andy

[the_rock]

Hm, just tried it, but same issue.

Andy

[nitzanef]

Using the 'set aaa allow-unsanitized-username on' command allows non-local usernames to include a dot '.', as long as it does not appear at the beginning or end of the username.

[the_rock]

Would it still apply for local users?

[nitzanef]

No, only non-local users (RADIUS/TACACS)

[the_rock]

Okay, thanks for clarification.

Andy

[the_rock]

@nitzanef  Any idea if this will be possible for local gaia users?

Andy

[Tobi]

This works with R81.20 JHF 115. In my opinion this command should be mentioned in the sk.

[J_admin12]

Are there any security implications for setting this? Or is simply to allow the "." to be allowed in the username?