Symptom
Following an upgrade to version 7.2.4 on the Firepower Management Center (FMC), the customer is facing an authentication issue that was not present in the previous version. External authentication is no longer functioning on both the CLI and GUI for both the Firepower Threat Defense (FTD) and FMC devices.
Conditions
After upgrading to version 7.2.4 on the Firepower Management Center (FMC), an authentication issue arises. The authentication functioned fine in the previous version, but problems occurred after the upgrade.
External authentication is no longer functioning on both the CLI and GUI for both the Firepower Threat Defense (FTD) and FMC devices.
During testing, the system receives the following error message: "Test Failed: The search for the test user using the current parameters failed, please verify the authentication settings and test user credentials."
It is confirmed that the connection between the FMC and the LDAP server is functioning correctly.
From the analysis of process_stderr.log and symmetric.log files, it is observed that there are symmetric synchronization errors between the SDB and the MDB.
Workaround
The problem stems from the presence of spaces (' ') in the authentication object names.
To implement the workaround, it is necessary to remove spaces from all object names.
Further Problem Description
The authentication issue resulting from the space character in the authentication object names has been further identified. The problem originates from the presence of spaces (' ') within the authentication object names. Vault, as implemented, encounters difficulties with object names containing spaces, rendering this practice no longer permissible.