topic ACS3.3 and password aging / managing in Network Access Control

ACS3.3 and password aging / managing

75821429 — Sun, 10 Mar 2019 21:08:35 GMT

ACS 3.3 run on w2k srv sp4 and I want to give to the clients (w2k-pro and XP) the possibility to change the password.

Moreover I want to expire the password on temporal base, (for example, obligate the users to change password every 30 days).

I try User Changeable Password feauture in IIS and works well (CiscoSecure Database), but this resolves only first part of my requirement.

In order to use Password Aging I have installed the Cisco Authentication Agent (taken from ACS3.3.2 cd) on a w2k-pro client; it works in irregular way.

Sometimes the change password popup appears, but the new password does not come written in the database.

On XP sp1 clients the CAA agent does not work at all (no popup, no message box).

Any ideas ?

I can use both internal or external user database.

My client are w2k-pro and xp.

My access router (Cisco3620) run 12.26 plus IOS.

Thank you in advance and best regards.

Re: ACS3.3 and password aging / managing

bbaley — Tue, 10 May 2005 13:06:04 GMT

This document should give you some idea,

http://www.cisco.com/univercd/cc/td/doc/product/access/acs_soft/csacs4nt/acs33/user/g.htm

Re: ACS3.3 and password aging / managing

matt.austin — Tue, 24 May 2005 15:49:42 GMT

What about setting an option so that a specific user is not required to change their password, but all other users are, by inheriting the settings of the group? Is there an overide option available?