topic Re: ACS user password change issue in Network Access Control

ACS user password change issue

W-ALI — Mon, 20 Jun 2022 15:27:28 GMT

When I create new user on ACS 5.8 / Users and Identity Stores > Internal Identity Stores > Users

with selected "change password on next logon"

when I trying SSH to Switch , ACS does not allow the user to change the password. access denied.

as following:

test@10.15.0.11's password:
Server requested password change
Password change request
Current password (blank for previously entered password):
Enter new password:
Confirm new password:
Access denied
test@10.15.0.11's password:

but when uncheck "change password on next logon"

the login success

any idea please?

Thanks in Advance

Re: ACS user password change issue

balaji.bandi — Mon, 20 Jun 2022 16:48:28 GMT

check this thread :

https://community.cisco.com/t5/network-access-control/acs-5-x-quot-change-password-on-next-login-quot-does-not-work/td-p/2082283

Re: ACS user password change issue

W-ALI — Mon, 20 Jun 2022 20:09:15 GMT

thanks balaji.bandi for your reply, really appreciated

I faced same issue with SecureCRT v8,

I think there's an issue to change password via SSH I think there's no way ,

however I changed password by telnet success

Re: ACS user password change issue

balaji.bandi — Tue, 21 Jun 2022 06:41:02 GMT

Maybe that is use case and Limitation, most use case integrated with AD centrally can change the password.