Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 9 replies
  • Subscribers 41 subscribers
  • Views 5130 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Connect 2.0 SSLVPN username with spaces

Bart van der Horst

Hi,

I've got a customer with XG210 and firmware 18.0.1, now with the new Sophos Connect i want to migrate all the users to SC.

Some of those users have spaces in there username, the SSLVPN seems to not accept them.

Logs says: 

SSL VPN Authentication
Failed
***
83.247.65.80
N/A
AD,Local
User **** failed to login to SSLVPN through AD,Local authentication mechanism because of wrong credentials

When connecting through IPsec:

Firewall Authentication
Successful
bart van der horst@****.local
10.81.225.6
IPSec
User bart van der horst@**.local of group Remote Desktop Server Users logged in successfully to Firewall through authentication mechanism from 10.81.225.6


Logging in to the userportal, also no problem.

Is this a known bug, and will it be resolved?

Thanks,

Bart van der Horst



This thread was automatically locked due to age.
Parents
  • FormerMember
    0 FormerMember

    Hi ,

    Thank you for reaching out to the Community! 

    Are you having an issue with the local users or AD users? 

    I have tried to replicate your issue with a local user with space in the user name, but It works for me. I have tested this on SFOS v17.5 MR14 and v18.0.1 GA. 

    I would advise you to replicate the issue and collect access_server logs in debugging and send me the logs via PM. 

    Command to put the access_server in debug: service access_server:debug -ds nosync

    You could run the same command to remove the service from debugging.  

    Thanks,

  • 0 in reply to FormerMember

    Hi H_Patel,

    Thanks for the reply, this with a ad user, userportal and sophos connect ipsec is doing fine only sslvpn with the new sophos connect is doing this, it sees only the first part of the username until the space.

    I inherited this network/customer, else i never allowd usernames with spaces. But it is wat it is i think.

    Thanks. 

    Bart van der Horst

    Sophos XG v18-v21 Certified Architect

Reply
  • 0 in reply to FormerMember

    Hi H_Patel,

    Thanks for the reply, this with a ad user, userportal and sophos connect ipsec is doing fine only sslvpn with the new sophos connect is doing this, it sees only the first part of the username until the space.

    I inherited this network/customer, else i never allowd usernames with spaces. But it is wat it is i think.

    Thanks. 

    Bart van der Horst

    Sophos XG v18-v21 Certified Architect

Children
No Data
Unfiltered HTML