cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

744
Views
0
Helpful
2
Replies
macfrist38
Beginner

Win Password Change ACS 5.4

Dear all,

Can somebody tell me all attribute that can make users change their  password after expiration when they want to connect on the network ? because they cannot. In the ACS log i can  see that user have to change their password.

context : Dot1x authentication is activated (no one can access on the network if he cannot authenticate)

2 REPLIES 2
aqjaved
Participant
Abha Jha
Cisco Employee

The  user update operation with the change password option enabled is not  working properly when you import or export the internal users.

When  you import or export internal users, only one user out of the group of  internal users has the change password option enabled.

This problem occurs when you do the following:

a. Create a Network Device Group (NDG), for example, Migrated_NDG, under Network Device Groups.

b. Import the users (for instance, from internal_user_import_template-add).

c. Update the same users in ACS with the change password option enabled or disabled.

The result is that the change password option is enabled for a single user alone. For all the other users, it is disabled.

Workaround:

Manually enable the change password option.

Please check if woraround works for you..???

Content for Community-Ad