free radius with cisco asa and password change feature
Hi, does free radius support password change feature when authenticating cisco asa vpn users via the radius server? authentication method doesnt matter, I am just wondering if its possible to force a local radius DB user to change their password via a vpn login with the cisco product devices? This is support for example with Microsoft IAS, but user has to live in Microsoft AD DB. thx in advance, Will
Will Richmond wrote:
Hi, does free radius support password change feature
No.
when authenticating cisco asa vpn users via the radius server? authentication method doesnt matter, I am just wondering if its possible to force a local radius DB user to change their password via a vpn login with the cisco product devices? This is support for example with Microsoft IAS, but user has to live in Microsoft AD DB.
MS does it via an MS-CHAP change password method. Feel free to submit a patch to rlm_mschap which implements this. Alan DeKok.
On Tue, Feb 07, 2012 at 08:27:38AM +0100, Alan DeKok wrote:
Will Richmond wrote:
Hi, does free radius support password change feature
No.
when authenticating cisco asa vpn users via the radius server? authentication method doesnt matter, I am just wondering if its possible to force a local radius DB user to change their password via a vpn login with the cisco product devices? This is support for example with Microsoft IAS, but user has to live in Microsoft AD DB.
MS does it via an MS-CHAP change password method.
Feel free to submit a patch to rlm_mschap which implements this.
Hey, I did that already ;o) https://github.com/philmayers/freeradius-server/commits/v2.1.x-mschap-change...
Phil Mayers wrote:
Hey, I did that already ;o)
https://github.com/philmayers/freeradius-server/commits/v2.1.x-mschap-change...
Oh yeah... I had pulled it into the "master" branch, because I'm worried about breaking things in the 2.1.x branch. I'll go make a note, so that I don't forget again. Alan DeKok.
participants (3)
-
Alan DeKok -
Phil Mayers -
Will Richmond