ACS - User-changeable passwords with LOCAL database

[m.laporta]

Hi all.

I have a Cisco ACS and I'm using the local user database.

Is there any mechanism to allow user to change their own password?

Thank you

michele

[ywadhavk · Accepted solution]

I presume, you are referring to ACS NT/W2k, if so, depending on what version of ACS you have, please choose the correct link from the below url and select the User Changable password configuration link.

That should help you.

http://www.cisco.com/univercd/cc/td/doc/product/access/acs_soft/csacs4nt/index.htm

Thanks,

Yatin

[mhoda · Accepted solution]

Hello Michele,

Yes, it is possible. Here are the options:

For dial-up connections: CAA (Client Authentication agent-needs to be installed on dial-up client machine). Here is the link:

http://www.cisco.com/en/US/products/sw/secursw/ps2106/index.html

http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_user_guide_chapter09186a008007c85d.html#xtocid1386824

For telnet connections: you can do it on the router itself. When it ask for the username - enter username and leave the password blank and hit Return. This will give you the options to change the password.

Here is how to set it up on ACS password aging rules:

http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_user_guide_chapter09186a0080102176.html#81611

You can also take users to the GUI to change their own password. I think this is what you are looking for. Its called UCP - (User Changeable Password) utility. For this to work you don't need to configure ACS for password aging. Here is the link:

http://www.cisco.com/univercd/cc/td/doc/product/access/acs_soft/csacs4nt/acs31/ucp.htm

I hope this helps ! Thanks,

Mynul