Symptom

According to document Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 10.1(x): "The at symbol (@) is supported in remote usernames but not in local usernames." For NXOS version 10.1(X), the at symbol (@) is not supported in local usernames, but also not supported for remote usernames. When try to access the switch using a remote authentication with username containing at symbol (@), it will fail with the following log messages: show logging logfile %DAEMON-3-SYSTEM_MSG: Unable to create temporary user cisco@cisco.com. Error 0x404a000a useradd: invalid user name 'cisco@cisco.com'

Conditions

- Nexus N9K running NXOS version 10.1(X) configured with feature tacacs+. - Remote authentication with username containing at symbol (@). Example username cisco@cisco.com.

Workaround

- Use username without at symbol (@). - On NXOS version 10.2(x) or 9.3(x), the at symbol (@) is supported in remote usernames.

Further Problem Description