Why has Nipper reported “User authentication with no password” when the passwords are in Active Directory?
When a device uses an external authentication method such as Active Directory, passwords are not stored locally in the configuration file.
Nipper analyzes only the imported configuration, it cannot confirm external password storage and therefore flags it as “User authentication with no password.”
This false positive finding can be excluded from the audit report as per steps outlined in https://docs.titania.com/faqs/how-do-i-exclude-false-positives-from-nippers-report