Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

We have setup a Cisco Identity Services Engine to manage WLAN access for our users. Access should be granted to users from a specific Windows Active Directory group. This works fine for users having a username consisting only of ASCII letters. However, user names having e.g. an umlaut fail. The live authentication log shows an error "22056 Subject not found in the applicable identity store(s)".

Any idea what could be wrong? (And, no, renaming all non-ASCII users is not an option)

share|improve this question
    
As the work-around of renaming the users is not an option -- and I agree it is not ideal... This is a case where you would likely be served best by contacting Cisco support directly. –  jscott Jan 3 '13 at 12:25
    
I was afraid it might as well be a windows AD issue, so I wanted to take a start at a "neutral" forum. :) –  Hagen von Eitzen Jan 3 '13 at 12:49
    
We've AD users with non-ASCII chars (é is popular) that work great until you're connecting with 3rd party systems. –  jscott Jan 3 '13 at 13:04
    
@jscott Yeah, but in my experience everything is correct at least via ldap protocol ... –  Hagen von Eitzen Jan 3 '13 at 13:06
    
Yes, it's not a problem with the protocol... It always seems to be issues with the application implementation on the "other" side. –  jscott Jan 3 '13 at 13:08

1 Answer 1

up vote 0 down vote accepted

The solution is surprisingly simple: Users with Umlauts in ther name automatically can login with their usual login name with umlauts replaced (e.g. "Müller" becomes "Muller"). So renaming users in AD is not necessary, they just have to be informed to type the modified username in the WLAN login. (They could also do the same in any normal windows login, which may come in handy when they need to do a remote login from abroad where they don't have umlauts available on the keyboard).

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.