Confusion with user creation on ACS/Windows Database

[ccsam]

Hi,

When I create user call peapuser in ACS, I have the option to use password authentication under windows database or cisco secure database.

Let say if I choose to use windows database, does it mean I can use password aging and allow user to change password in my wireless peap authentication?

Where is peapuser reside? ACS Secure database or it's local user under windows server?

regards,

Sam

[aschiebe]

The user will exist in ACS internal DB but the authentication will be done against the windows DB.

i.e. - credential validation and authorization (expiry/password aging/allow dial-in etc) will be according to the data in Windows DB.

Only difference is that this user won't be treated as an Unknown User and work according to the Unknown User Policy , but will always authenticate to the Windows DB.

HTH,

Ami