Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

enabling password aging for Device-hosted Sessions

Hello,

I would like to setup password aging for tacacs authentication to cisco devices.

The problem is that in the group setup in the ACS, I don't have the section password aging (as described in the help topic).

I'm using ACS v3.3

Thank you for your help !

1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Re: enabling password aging for Device-hosted Sessions

Hi,

Thats gr8.

password change is supported by SSHv2. SSHv1 doesn't support the necessary

message types to initiate a password change sequence.

There is also a defect related to this. However, this will work with recent IOS versions.

CSCin91851: Support keyboard-interactive authentication method

1st Found-In: 12.4T

Fixed-In:

12.4(10.1)T

12.2(33)SXI

12.4(17.9)M

12.2(32.8.11)SX142

12.2(33.1.10)SXH

12.4(13f)M

12.2(33)SXH2

12.2(32.8.11)XJC153.1

12.2(32.8.1)YCA172.24

12.4(22.3.4)PIC1

HTH

JK

~BR Jatin Katyal **Do rate helpful posts**
3 REPLIES
Cisco Employee

Re: enabling password aging for Device-hosted Sessions

Hi,

In order to use password aging feature on ACS 3.3, you first need to enable it.

Here are the steps:

On ACS > Go to interface configuration > Advanced Options > look for "Group-Level Password Aging" > check this option > hit submit.

Noe go back to your group > Look for "Jump to" option on the top > click on drop down menu > select password changing.

You may refer this link while configuring password aging.

http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_windows/3.3/user/guide/g.html#wp479534

HTH

JK

~BR Jatin Katyal **Do rate helpful posts**
New Member

Re: enabling password aging for Device-hosted Sessions

Great thank you !

Password aging feature works on SSH ?

Cisco Employee

Re: enabling password aging for Device-hosted Sessions

Hi,

Thats gr8.

password change is supported by SSHv2. SSHv1 doesn't support the necessary

message types to initiate a password change sequence.

There is also a defect related to this. However, this will work with recent IOS versions.

CSCin91851: Support keyboard-interactive authentication method

1st Found-In: 12.4T

Fixed-In:

12.4(10.1)T

12.2(33)SXI

12.4(17.9)M

12.2(32.8.11)SX142

12.2(33.1.10)SXH

12.4(13f)M

12.2(33)SXH2

12.2(32.8.11)XJC153.1

12.2(32.8.1)YCA172.24

12.4(22.3.4)PIC1

HTH

JK

~BR Jatin Katyal **Do rate helpful posts**
219
Views
0
Helpful
3
Replies
CreatePlease to create content