Solved: enabling password aging for Device-hosted Sessions

mathieu.ploton · ‎10-02-2009

Hello,

I would like to setup password aging for tacacs authentication to cisco devices.

The problem is that in the group setup in the ACS, I don't have the section password aging (as described in the help topic).

I'm using ACS v3.3

Thank you for your help !

Jatin Katyal · ‎10-02-2009

Hi,

Thats gr8.

password change is supported by SSHv2. SSHv1 doesn't support the necessary

message types to initiate a password change sequence.

There is also a defect related to this. However, this will work with recent IOS versions.

CSCin91851: Support keyboard-interactive authentication method

1st Found-In: 12.4T

Fixed-In:

12.4(10.1)T

12.2(33)SXI

12.4(17.9)M

12.2(32.8.11)SX142

12.2(33.1.10)SXH

12.4(13f)M

12.2(33)SXH2

12.2(32.8.11)XJC153.1

12.2(32.8.1)YCA172.24

12.4(22.3.4)PIC1

HTH

JK

~Jatin

View solution in original post

Jatin Katyal · ‎10-02-2009

Hi,

In order to use password aging feature on ACS 3.3, you first need to enable it.

Here are the steps:

On ACS > Go to interface configuration > Advanced Options > look for "Group-Level Password Aging" > check this option > hit submit.

Noe go back to your group > Look for "Jump to" option on the top > click on drop down menu > select password changing.

You may refer this link while configuring password aging.

http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_windows/3.3/user/guide/g.html#wp479534

HTH

JK

~Jatin

mathieu.ploton · ‎10-02-2009

Great thank you !

Password aging feature works on SSH ?

Jatin Katyal · ‎10-02-2009

Hi,

Thats gr8.

password change is supported by SSHv2. SSHv1 doesn't support the necessary

message types to initiate a password change sequence.

There is also a defect related to this. However, this will work with recent IOS versions.

CSCin91851: Support keyboard-interactive authentication method

1st Found-In: 12.4T

Fixed-In:

12.4(10.1)T

12.2(33)SXI

12.4(17.9)M

12.2(32.8.11)SX142

12.2(33.1.10)SXH

12.4(13f)M

12.2(33)SXH2

12.2(32.8.11)XJC153.1

12.2(32.8.1)YCA172.24

12.4(22.3.4)PIC1

HTH

JK

~Jatin