We have been using 802.1x machine and user authentication via MS built-in supplicant (PEAP, MSCHAP-v2) and MS IAS (radius) backend on a wired network for about a year.
We recently migrated our 802.1x platform to CSSC 4.2 and ACS 4.1.
I soon discovered that when MS AD informs the user that their password requires changing (after 30 days due to GP), the user happily changes their password, and soon after, CSSC authentication fails. A reboot and subsequent Logon resolves the problem.
It seems CSSC has cached the initial logon details and has not updated itself when the password change took place?
Has anybody else experienced this problem and discovered a solution?