Password expiry not using windows domain

[john.pierson]

Hi, I am currently using a 3015 (ver3.5.5), ACS (3.1) & the VPN client (3.5.1).

Is it possible to implement password expiry when NOT using the windows domain controller for authentication (i.e. Using the CiscoSecure ACS internal database)?

If so, does anyone have any config examples?

Thanks, John.

[jfrahim]

Hi John,

Unfortunately, the Password Expiry features only works in conjunction with a domain controller. If you want to use ACS Internal database for password expiry feature, then you can run User-Changeable Password utility on the clients. Make sure that Split tunneling is disabled and you use your ACS as a accouting server

Hope that helps

Jazib