ACS 4.2 - Password Authentication Issue

[Anukalp S]

Hello.

I am running cisco ACS v4.2 which is integrated with Active Directory Server for username & password authentication. The issue which i am facing is that when i change password on AD server, i get login access on cisco router with new password but old password still works.

[Jatin Katyal]

You may review the below doc:

Domain users can use their old password to access the network for one hour after the password is changed.

http://support.microsoft.com/kb/906305

Also, make sure the domains are replicating the password change because ACS never cache the password.

Regards,

Jatin Katyal


- Do rate helpful posts -

[Anukalp S]

Hi Jatin,

How could we check domain are replicating. Since as we change pasword on AD server we get login access on router with new password as well with old password. Thats shows there is replication b/w AD and ACS server as new password works on router.

Is there any other way to check replication then pls let me know.

[Jatin Katyal]

The suggestion was to check replication among your domain controllers.

Regards,

Jatin Katyal


- Do rate helpful posts -