ACS 'Password Change Rule' doesn't work with telnet

[francisco del cura ferreira]

Hello:

I am trying to configure that users have to change their passwords when they enter to a network appliance the first time they log in.

I have an ACS 4.0 appliance, the option "Disable TELNET Change Password against this ACS and return the following message to the users telnet session" is disable. When I try to enter to a Catalyst 6500, for instance, I type user and pass and I get Rejected (RADIUS is the protocol used).

In the ACS' reports I can see it appears the next error 'Authen Failed - CS Password Expired'.

I only have enabled the option "Apply password change rule" in Group Settings, the others options for "Password Aging Rules" are deactivated.

Thanks for your help,

Francisco

[darpotter · Accepted solution]

You'll need to be using TACACS+ to get password change to work.

Doesnt work with RADIUS.

[francisco del cura ferreira]

Ok, many thanks!