ACS user password change issue

[W-ALI]

When I create new user on ACS 5.8 / Users and Identity Stores > Internal Identity Stores > Users

with selected  "change password on next logon"

when I trying SSH to Switch , ACS does not allow the user to change the password. access denied.

as following:

test@10.15.0.11's password:
Server requested password change
Password change request
Current password (blank for previously entered password):
Enter new password:
Confirm new password:
Access denied
test@10.15.0.11's password:

but when uncheck   "change password on next logon"

the login success

any idea please?

Thanks in Advance

[balaji.bandi]

check this thread :

https://community.cisco.com/t5/network-access-control/acs-5-x-quot-change-password-on-next-login-quot-does-not-work/td-p/2082283

[W-ALI]

thanks balaji.bandi for your reply, really appreciated

I faced same issue with SecureCRT v8,

I think there's an issue to change password via SSH I think there's no way ,

however I changed password by telnet success

[balaji.bandi · Accepted solution]

Maybe that is use case and Limitation, most use case integrated with AD centrally can change the password.