Secure ACS 5.1 Users disabled intermittently

stevedaviescisco — Mon, 11 Mar 2019 02:47:11 GMT

Hi all,

We're running Cisco Secure ACS V5.1 on a Linux platform to manage remote access to many networking devices. This has not been in place long, and is generally working OK. However, whenever I set the parameters of the user authentication to 'disable user account after X days if password was not changed', so as to comply with our internal security regulations, the user IDs seem to disable themselves intermittently, irrespective of whatever number of days I put in this - this can be a couple of days after re-enabling, or just a few minutes. It varies.

This can be found in the advanced tab here:

System Administration > Users > Authentication Settings

In the mean time, we are having to set the user authentication to be non-expiry. Is this a known fault with this version of software? If so, would there be a patch available, and how would I go about obtaining it?

Cheers,

Steve

Secure ACS 5.1 Users disabled intermittently

jrabinow — Wed, 14 Nov 2012 21:04:16 GMT

This does look like the following CDETS that was fixed in patch 5.1.0.44.4 (4th cumulative patch for ACS 5.1)

CSCti93393

Accounts created to expire beyond 24 days are disabled

Patches can be downloaded from CCO

topic Secure ACS 5.1 Users disabled intermittently in Network Access Control

Secure ACS 5.1 Users disabled intermittently

Secure ACS 5.1 Users disabled intermittently