free radius with cisco asa and password change feature

Phil Mayers p.mayers at imperial.ac.uk
Tue Feb 7 10:07:57 CET 2012


On Tue, Feb 07, 2012 at 08:27:38AM +0100, Alan DeKok wrote:
>Will Richmond wrote:
>> Hi, does free radius support password change feature
>
>  No.
>
>> when authenticating cisco asa vpn users via the radius server? authentication method doesnt matter, I am just wondering if its possible to force a local radius DB user to change their password via a vpn login with the cisco product devices? This is support for example with Microsoft IAS, but user has to live in Microsoft AD DB.
>
>  MS does it via an MS-CHAP change password method.
>
>  Feel free to submit a patch to rlm_mschap which implements this.

Hey, I did that already ;o)

https://github.com/philmayers/freeradius-server/commits/v2.1.x-mschap-changepass



More information about the Freeradius-Users mailing list