topic Re: ACS 5.2 Password change problem in Network Access Control https://community.cisco.com/t5/network-access-control/acs-5-2-password-change-problem/m-p/1614954#M265943 <HTML><HEAD></HEAD><BODY><P>Hi jrabinow</P><P></P><P>I think this is the bug i found. Will it be fixed?</P><P></P><P>Greets</P></BODY></HTML> Mon, 21 Mar 2011 07:08:59 GMT dominikhug 2011-03-21T07:08:59Z ACS 5.2 Password change problem https://community.cisco.com/t5/network-access-control/acs-5-2-password-change-problem/m-p/1614944#M265932 <P>Hi</P><P></P><P>Since some months I'm running ACS 5.2 appliance without any problems. Today I found a very strange problem:</P><P></P><P>When I want to change the password from a local user there's a popup message:</P><P></P><P>"This System Failure occurred: {0}. Your changes have not been saved.Click OK to return to the list page."</P><P></P><P>I tried different users but I am not able to change any password. Always the same message.</P><P></P><DIV class="cuesAboutProductName">Cisco Secure ACS</DIV><P></P><DIV class="cuesAboutVersionInfo">Version : 5.2.0.26.3</DIV><P></P><P><BR />all three patches installed</P><P></P><P>Users migrated form ACS 4.x</P><P></P><P>If you need any further information, please ask.</P><P></P><P>Thanks for your help!</P> Wed, 13 Mar 2019 00:39:14 GMT https://community.cisco.com/t5/network-access-control/acs-5-2-password-change-problem/m-p/1614944#M265932 dominikhug 2019-03-13T00:39:14Z Re: ACS 5.2 Password change problem https://community.cisco.com/t5/network-access-control/acs-5-2-password-change-problem/m-p/1614945#M265933 <HTML><HEAD></HEAD><BODY><P>Not sure how far it will be possible. However, you can try this with username/password without any wildcard characters,</P><PRE>(&amp;% ,.!+ -).<BR /><BR />Paps</PRE></BODY></HTML> Fri, 18 Mar 2011 09:03:38 GMT https://community.cisco.com/t5/network-access-control/acs-5-2-password-change-problem/m-p/1614945#M265933 padatta 2011-03-18T09:03:38Z Re: ACS 5.2 Password change problem https://community.cisco.com/t5/network-access-control/acs-5-2-password-change-problem/m-p/1614946#M265935 <HTML><HEAD></HEAD><BODY><P>Dear Valued Cisco Customer,</P><P> </P><P>I will be out of the office from 03/20/2010 until 04/04/2010. During</P><P>this time, I will have no access to email or voicemail. If you require</P><P>assistance during my absence, please contact Manivannan Srinivasan via</P><P>phone at 469-255-4806 or via email at mansrini@cisco.com and this</P><P>engineer will continue to work any immediate concerns you may have at</P><P>this time. If this issue can wait until my return on 04/05/2010, I will</P><P>be glad to continue working with you. If you require assistance outside</P><P>of our business hours (10:00am - 7:00pm CST), please contact the TAC by</P><P>calling 1800-553-2447 or email tac@cisco.com and request to have the</P><P>service request re-assigned.</P><P> </P><P>Best Regards,</P><P>Abhishek Neelakanata</P></BODY></HTML> Fri, 18 Mar 2011 09:04:15 GMT https://community.cisco.com/t5/network-access-control/acs-5-2-password-change-problem/m-p/1614946#M265935 aneelaka 2011-03-18T09:04:15Z Re: ACS 5.2 Password change problem https://community.cisco.com/t5/network-access-control/acs-5-2-password-change-problem/m-p/1614947#M265936 <HTML><HEAD></HEAD><BODY><P>I made some additional tests and I was able to locate the problem:</P><P></P><P>With patch 2 a new function was introduced: "Checking Internal User’s existence before Authentication" (Bug CSCtk32683)</P><P>Because this is a very important feature for me I implemented this short after the patch was released to make sure users use a RADIUS OTP token server to authenticate. Normally I don't have to change passwords because there are external passwords/OTP token. But sometimes I have to configure a user to bypass RADIUS OTP token server (lost token or something like this). So I want to change the password because I use a random 32 character password I don't save. And that is not possible.</P><P></P><P>I defined the internal users attribute ACS-RESERVED-Authen-ID-Store as enumeration to select possible authentication methods (OTP Token, IAS, ACS).</P><P>I was able to change password from a newly created user without using the Authen-ID-Store attribute.</P><P></P><P>Is there a function to prevent changing passwords if Authen-ID-Store is used or is there a bug?</P></BODY></HTML> Fri, 18 Mar 2011 10:20:09 GMT https://community.cisco.com/t5/network-access-control/acs-5-2-password-change-problem/m-p/1614947#M265936 dominikhug 2011-03-18T10:20:09Z Re: ACS 5.2 Password change problem https://community.cisco.com/t5/network-access-control/acs-5-2-password-change-problem/m-p/1614948#M265937 <HTML><HEAD></HEAD><BODY><P>Dear Valued Cisco Customer,</P><P> </P><P>I will be out of the office from 03/20/2010 until 04/04/2010. During</P><P>this time, I will have no access to email or voicemail. If you require</P><P>assistance during my absence, please contact Manivannan Srinivasan via</P><P>phone at 469-255-4806 or via email at mansrini@cisco.com and this</P><P>engineer will continue to work any immediate concerns you may have at</P><P>this time. If this issue can wait until my return on 04/05/2010, I will</P><P>be glad to continue working with you. If you require assistance outside</P><P>of our business hours (10:00am - 7:00pm CST), please contact the TAC by</P><P>calling 1800-553-2447 or email tac@cisco.com and request to have the</P><P>service request re-assigned.</P><P> </P><P>Best Regards,</P><P>Abhishek Neelakanata</P></BODY></HTML> Fri, 18 Mar 2011 10:20:49 GMT https://community.cisco.com/t5/network-access-control/acs-5-2-password-change-problem/m-p/1614948#M265937 aneelaka 2011-03-18T10:20:49Z Re: ACS 5.2 Password change problem https://community.cisco.com/t5/network-access-control/acs-5-2-password-change-problem/m-p/1614949#M265938 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>I didn't find any known problems with changing passwords for users with 'ACS-RESERVED-Authen-ID-Store' attribute.</P><P></P><P>Does deleting such a user and readd help?</P><P></P><P>I'd like to suggest opening a TAC case to get to the root cause.</P><P></P><P>Paps</P></BODY></HTML> Fri, 18 Mar 2011 10:47:48 GMT https://community.cisco.com/t5/network-access-control/acs-5-2-password-change-problem/m-p/1614949#M265938 padatta 2011-03-18T10:47:48Z Re: ACS 5.2 Password change problem https://community.cisco.com/t5/network-access-control/acs-5-2-password-change-problem/m-p/1614950#M265939 <HTML><HEAD></HEAD><BODY><P>Dear Valued Cisco Customer,</P><P> </P><P>I will be out of the office from 03/20/2010 until 04/04/2010. During</P><P>this time, I will have no access to email or voicemail. If you require</P><P>assistance during my absence, please contact Manivannan Srinivasan via</P><P>phone at 469-255-4806 or via email at mansrini@cisco.com and this</P><P>engineer will continue to work any immediate concerns you may have at</P><P>this time. If this issue can wait until my return on 04/05/2010, I will</P><P>be glad to continue working with you. If you require assistance outside</P><P>of our business hours (10:00am - 7:00pm CST), please contact the TAC by</P><P>calling 1800-553-2447 or email tac@cisco.com and request to have the</P><P>service request re-assigned.</P><P> </P><P>Best Regards,</P><P>Abhishek Neelakanata</P></BODY></HTML> Fri, 18 Mar 2011 10:48:44 GMT https://community.cisco.com/t5/network-access-control/acs-5-2-password-change-problem/m-p/1614950#M265939 aneelaka 2011-03-18T10:48:44Z Re: ACS 5.2 Password change problem https://community.cisco.com/t5/network-access-control/acs-5-2-password-change-problem/m-p/1614951#M265940 <HTML><HEAD></HEAD><BODY><P>Deleting and readd doesn't solve the problem. As soon as I use the Authen-ID-Store attribute I'm no longer able to change password. After some additional tests I worked out that this problem only occurs if I configure Authen-ID-Store as enumeration. If defined as string there's no problem.</P></BODY></HTML> Fri, 18 Mar 2011 14:14:13 GMT https://community.cisco.com/t5/network-access-control/acs-5-2-password-change-problem/m-p/1614951#M265940 dominikhug 2011-03-18T14:14:13Z Re: ACS 5.2 Password change problem https://community.cisco.com/t5/network-access-control/acs-5-2-password-change-problem/m-p/1614952#M265941 <HTML><HEAD></HEAD><BODY><P>Dear Valued Cisco Customer,</P><P> </P><P>I will be out of the office from 03/20/2010 until 04/04/2010. During</P><P>this time, I will have no access to email or voicemail. If you require</P><P>assistance during my absence, please contact Manivannan Srinivasan via</P><P>phone at 469-255-4806 or via email at mansrini@cisco.com and this</P><P>engineer will continue to work any immediate concerns you may have at</P><P>this time. If this issue can wait until my return on 04/05/2010, I will</P><P>be glad to continue working with you. If you require assistance outside</P><P>of our business hours (10:00am - 7:00pm CST), please contact the TAC by</P><P>calling 1800-553-2447 or email tac@cisco.com and request to have the</P><P>service request re-assigned.</P><P> </P><P>Best Regards,</P><P>Abhishek Neelakanata</P></BODY></HTML> Fri, 18 Mar 2011 14:15:14 GMT https://community.cisco.com/t5/network-access-control/acs-5-2-password-change-problem/m-p/1614952#M265941 aneelaka 2011-03-18T14:15:14Z Re: ACS 5.2 Password change problem https://community.cisco.com/t5/network-access-control/acs-5-2-password-change-problem/m-p/1614953#M265942 <HTML><HEAD></HEAD><BODY><P>Looks like this is a known existing issue. I found the following CDETS:</P><P></P><DIV class="mceGridField"><SPAN id="s_5_1_58_0">CSCtd06290: System failure error when submitting Change Password with enum attribute</SPAN></DIV><DIV class="mceGridField"> </DIV><DIV class="mceGridField"><SPAN>There does not appear to be any workaround</SPAN></DIV></BODY></HTML> Mon, 21 Mar 2011 04:45:57 GMT https://community.cisco.com/t5/network-access-control/acs-5-2-password-change-problem/m-p/1614953#M265942 jrabinow 2011-03-21T04:45:57Z Re: ACS 5.2 Password change problem https://community.cisco.com/t5/network-access-control/acs-5-2-password-change-problem/m-p/1614954#M265943 <HTML><HEAD></HEAD><BODY><P>Hi jrabinow</P><P></P><P>I think this is the bug i found. Will it be fixed?</P><P></P><P>Greets</P></BODY></HTML> Mon, 21 Mar 2011 07:08:59 GMT https://community.cisco.com/t5/network-access-control/acs-5-2-password-change-problem/m-p/1614954#M265943 dominikhug 2011-03-21T07:08:59Z Re: ACS 5.2 Password change problem https://community.cisco.com/t5/network-access-control/acs-5-2-password-change-problem/m-p/1614955#M265944 <HTML><HEAD></HEAD><BODY><P> Since my first post a couple of patches have been released but none of them solved the issue. Do you know when it will be fixed?</P></BODY></HTML> Tue, 21 Jun 2011 06:35:15 GMT https://community.cisco.com/t5/network-access-control/acs-5-2-password-change-problem/m-p/1614955#M265944 dominikhug 2011-06-21T06:35:15Z ACS 5.2 Password change problem https://community.cisco.com/t5/network-access-control/acs-5-2-password-change-problem/m-p/1614956#M265945 <HTML><HEAD></HEAD><BODY><P> This will be fixed in ACS 5.3 which will be available later this year</P></BODY></HTML> Mon, 04 Jul 2011 14:39:27 GMT https://community.cisco.com/t5/network-access-control/acs-5-2-password-change-problem/m-p/1614956#M265945 jrabinow 2011-07-04T14:39:27Z