Password expiration and change on next logon options

Hello All, I am trying to figure out how to do password aging and on next logon change with freeRadius. I am using ASA firewall with MS-CHAP2 support. mschap is also enabled in freeRadius. Could somebody point to where I can find any documentation about it? Also, should I use system passwords or keep them in the postgres to make it working? Thanks, Alex.