Password Change on WEBVPN through Concentrator

[b.devanathan]

Hi,

I am trying to integrate Active directory authentication through ACS 4.1 for the webvpn users configured in VPNC. I am able to login with the AD username but the problem i found is that even when the user account is disabled in the AD, the user is still allowed to login. Has anyone come across a problem like this.

Also is it possible to change the AD password on expiration through the WEBVPN.

I am trying this on VPNC 4.7 with ACS 4.1

Regards

Devanathan.B

[Premdeep Banga]

Hi,

I cannot comment on your problem, about disabled account, but yes WEB VPN password change doesn't work on VPNC 4.7,

http://www.cisco.com/en/US/products/hw/vpndevc/ps2284/products_configuration_guide_chapter09186a00803ee122.html#wp1008820

"In this release WebVPN does not support RADIUS with Expiry authentication."

About your caching kind of problem, can you double check that you are not disabling account on secondary domain controller, as it wont replicate the settings till next replication cycle(I guess). Ensure that.

With ASA, Web VPN password change might work. Have to look into doc.

Will let you know if I find something.

Regards,

Prem