SSL VPN
Reply
Regular Visitor
bouassab
Posts: 5
Registered: ‎10-20-2009
0

Issues with surnames/passwords containing accents

Hi,

 

Does someone knows how to change the Encoding on SA 4500?

I would like to change it to "western european", some remote users having passwords containing accents are unable to authenticate against Active directory.

 

Thanks,

Moderator
zanyterp
Posts: 2,332
Registered: ‎11-19-2007
0

Re: Issues with surnames/passwords containing accents

[ Edited ]

On the IVE, you go to Users>Resource Policies>Web>Encoding and create a policy there for the desired server(s) or all traffic and set the encoding there. This, however, is only used for web-based resources accessed through the IVE content intermediation engine and not auth traffic.

 

If this is authentication into the IVE, though, the browser settings will/should handle the encoding and not the IVE. The IVE will only pass on what it receives from the browser. If you look at a TCP dump, do you see failures with the accented characters?

Contributor
Niol
Posts: 31
Registered: ‎05-22-2009
0

Re: Issues with surnames/passwords containing accents

Regular Visitor
bouassab
Posts: 5
Registered: ‎10-20-2009
0

Re: Issues with surnames/passwords containing accents

Thanks for the feedback,

 

After extra investigations it turns out that our SA4500 sends correctly the password to AD but not to the one time password server ( we use  strong authentication AD+one time password).

Password sent to the "one time password" server contains double byte character in the access challenge response message.

 

Regards,

 

 

Copyright© 1999-2013 Juniper Networks, Inc. All rights reserved.