TACACS+ password expiration notification with SSH

[mchockalingam]

Hi All,

We recently migrated from using telnet to SSH on Cisco devices. We normally ssh to a Unix machine first and then initiate a ssh session to the Cisco device.

WIth telnet, when a user's password expires, they get prompted for a new password. With ssh, they get "permission denied" message and they are not able to login unless they go the ACS server and modify the password.

I like to get the password expiration notification with SSH. Is this configurable?

[Richard Burts]

Meena

You posted essentially the same question last Friday on the AAA section of the Security forum. Since it has received no response I can understand your decision to cross post to another forum. It would be helpful when you do this to indicate that the question has been previously posted in another forum.

I also encountered this issue and so far have not found a solution. If someone has a solution then both Meena and I would be very interested in knowing it.

HTH

Rick