For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Martin_Robbins's avatar
Martin_Robbins
Icon for Nimbostratus rankNimbostratus
May 07, 2014

APM AD Query password change fails if User Display Name contains brackets ( )

Hello,   Does anyone have users in Active Directory that contain a set of brackets in the users' Display Name ?   I am not sure if I am going mad but we have found that we have some users that ...
BIG-IP Access Policy Manager (APM)
deployment
microsoft
security
TMOS
Lucas_Thompson_'s avatar
Lucas_Thompson_
Historic F5 Account
May 07, 2014

Super! Thanks for the confirmation. The password complexity check feature essentially enables APM to do some special queries to determine if the proposed password from the user matches the policies in AD. With it enabled, the user will get an error before the password change is attempted if the complexity requirements are not met. If it's disabled, then the user will attempt the password change, but it will fail if complexity is not met.