Password Policy for administrators in ACS 4.1

[Farooq Razzaque]

Dear

In ACS, I want to know if i set the following password lifetime option under password policy for administrators under administration control then will
that change be applicable to all local administrators or it will be applicable to only default administrator (ACSAdmin)

If i set the number of days for 10 days then what will happend after passing 10th day..

Will the ACS give the option to change the password when i try to login after 10th day ?
Will it give the option on the main ACS login page.

password Liftetime Options
*******************************

The password will require change after 10 days

[Jatin Katyal]

Yes, it will be applicable to all administrators created on ACS. Yes, after passing 10th day, you will be prompted to change the password on ACS login screen.

~BR
Jatin Katyal

**Do rate helpful posts**

[Farooq Razzaque]

Thanks Jatin

Can i hve some document which is mentioning that changes in Password lifetime options is applicable to all manually created administrators and default administrator (ACSAdmin) as well.

1) Will that change be applicable to default administrator (ACSAdmin) ?

2) Will it that change be applicable to TACACS users as well.

[Jatin Katyal]

Here is a link

http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.2/user/guide/Admin.html#wp703514

Since it's a global change so it will be applicable to all admin accounts.

So the administrator password policy only affects ACS administrator accounts. It has nothing to do with Tacacs users.

I'll try to recreate when exactly we see the option to change password and let you know.

Are you running ACS windows or ACS appliance?

~BR
Jatin Katyal

**Do rate helpful posts**

[Farooq Razzaque]

I m using the ACS appliance with version 4.1.

Can you please send me the snap shot once you will recreate it.

I have created some administrators under administration control like (user1, user2, user3 etc) and one is default administrator (ACSAdmin).... Can you also please test to check whether this change is applicable to all manually created administrator accounts and default admin account (ACSAdmin)

[Jatin Katyal]

Sure. I will update you

~BR
Jatin Katyal

**Do rate helpful posts**

[Farooq Razzaque]

Dear Jatin

Did u get a chance to test the following

Can you also please test to check whether this change is applicable to all manually created administrator accounts and default admin account (ACSAdmin)

I'll try to recreate when exactly we see the option to change password and let you know.

[Farooq Razzaque]

Dear Jatin

It is not specifically mentioned in the below link that  password policy (password Liftetime Options) are applicable to manually created account and default administrator account (ACSAdmin)

http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.2/user

[Jatin Katyal]

HI Farooq,

I will try and update this thread today.

~BR
Jatin Katyal

**Do rate helpful posts**

[Farooq Razzaque]

hi

Did u get a chance to test

Sent from Cisco Technical Support iPhone App

[Jatin Katyal]

HI Farooq,

I have made some changes in the password policy section and set the password to be xpired after 1 day. I will be able to update you by tomorrow.

~BR
Jatin Katyal

**Do rate helpful posts**

[Farooq Razzaque]

ok. I will wait for the update

Sent from Cisco Technical Support iPhone App

[Farooq Razzaque]

Dear jatin

Did u test it ?


Sent from Cisco Technical Support iPhone App

[Farooq Razzaque]

dear Jatin

Did u get a chance to test it

Sent from Cisco Technical Support iPhone App

[Jatin Katyal]

sorry I forgot to update you.          

yes Farooq, that's a global change and would be applicable for all the administrator.

~BR
Jatin Katyal

**Do rate helpful posts**