Expired Active Directory Passwords & Wireless Authentication

[Alan DeKok]

Jason Agress wrote:
> I've read lots about this problem with FreeRADIUS and have seen some
> implied solutions, but nothing concrete. So here's my question: With
> FreeRADIUS, is there a way to allow successful RADIUS authentication
> with an expired password? This way the AD login process can commence and
> the user can be prompted to change his/her password wirelessly.

  Use the git "master" branch.  It supports changing passwords via PEAP.

  See raddb/mods-available/mschap

  Alan DeKok.