cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
519
Views
0
Helpful
1
Replies

ACS 5.x - Expired password message, alarm and renewal procedure.

jchristvnet
Level 1
Level 1

Hi,

I am currently working on two ACS 5.1.0.44-4, in order to control the admin access of network engineers to Cisco routers, switches and firewall.

I would have three questions:

1) Is it possible for the ACS to send an e-mail if an account is about to be disable due to a password that has not yet been renewed yet?

The idea is to avoid receiving an alarm when the account is already disable.

2) What are the common procedures for a user (i.e. end user to access AAA client) to renew his password?

Do you integrate the ACS using the UCP tool to your internal portal?

Do you creat (yet again) another login in the ACS so that the user will login to the ACS web page to change hos passwords?

Or did you find a way to have the AAA client prompting for a change of password?

3) It seems that if a user ssh into a router with privilege 15, directly, there is no warning message showing when the password is to be expired.

On the other end, if the user ssh into a router with privilege1, then types "en" to become enabled, ony then a warning message shows when his password will expire.

Have you seen this before? Do you know any workaround?


Thank you very much for your time.

Christophe

1 Reply 1

rodmunch999
Level 1
Level 1

Hi Christophe,

1. I can't answer this one 100% but if you want the email to be sent to the user then i would say no. ACS View Email notification only allows you to select Administrators.

2 & 3: The way we do it is do allow one telnet enabled device on the network that functions just as a device to change the password on first logon. Also the users can change their password on this device at any time by pressing return on the password prompt(TACACS+). The expiry alert will show when they log into this device as well. The users can track password expiry through programs like KeePass. Not pretty I know.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: