configd.log error - "useradd: invalid user name 'xxx'" and "Authentication profile not found for the user"
6332
Created On 01/20/23 01:37 AM - Last Modified 05/01/24 18:59 PM
Symptom
- PAN-OS upgraded from 10.1.x to 10.2.x
- Local admin users with only "numbers" in the username can no longer login to the GUI
- System logs (show log system) display failed authentication messages
failed authentication for user \'12345678\'. Reason: Authentication profile not found for the user. From: x.x.x.x.'
- When trying to re-add the user, configd logs (less mp-log configd.log) report "invalid user name" message
useradd: invalid user name '12345678'
usermod: user '12345678' does not exist
Error: pan_cfg_user_create(pan_cfg_users.c:1191): User account for user 12345678 was not created
Environment
- Palo Alto Firewalls and Panorama
- PAN-OS 10.2.x and above
- Administrator usernames
Cause
Username must meet the newer security requirements documented at Username and Password Requirements.
Resolution
- Change the local admin usernames with only numbers to usernames that contains letters or letters and numbers.
- Commit the new configuration.