This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC!
We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
Dear all,
Can somebody tell me all attribute that can make users change their password after expiration when they want to connect on the network ? because they cannot. In the ACS log i can see that user have to change their password.
context : Dot1x authentication is activated (no one can access on the network if he cannot authenticate)
Please check the below links which may be helpful for you:
Link-1
Link-2
The user update operation with the change password option enabled is not working properly when you import or export the internal users.
When you import or export internal users, only one user out of the group of internal users has the change password option enabled.
This problem occurs when you do the following:
a. Create a Network Device Group (NDG), for example, Migrated_NDG, under Network Device Groups.
b. Import the users (for instance, from internal_user_import_template-add).
c. Update the same users in ACS with the change password option enabled or disabled.
The result is that the change password option is enabled for a single user alone. For all the other users, it is disabled.
Workaround:
Manually enable the change password option.
Please check if woraround works for you..???