Password expiration and change on next logon options

[Alexey Ponomarev-2]

Hello All,

 

I am trying to figure out how to do password aging and on next logon change with freeRadius.

I am using ASA firewall with MS-CHAP2 support. mschap is also enabled in freeRadius.

 

Could somebody point to where I can find any documentation about it?

Also, should I use system passwords or keep them in the postgres to make it working?

 

Thanks,

Alex.

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

[Ivan Kalik]

> I am trying to figure out how to do password aging and on next logon
> change
> with freeRadius.

Custom script on your login. Radius doesn't interact with user interface.

> I am using ASA firewall with MS-CHAP2 support. mschap is also enabled in
> freeRadius.
>
> Could somebody point to where I can find any documentation about it?
> Also, should I use system passwords or keep them in the postgres to make
> it
> working?

You can't use system (crypted) passwords with mschap.

Ivan Kalik
Kalik Informatika ISP

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

[Nicolas Goutte-2]

Am 03.11.2009 um 17:47 schrieb Ivan Kalik:

>> I am trying to figure out how to do password aging and on next logon
>> change
>> with freeRadius.
>
> Custom script on your login. Radius doesn't interact with user  
> interface.
>

>> I am using ASA firewall with MS-CHAP2 support. mschap is also  
>> enabled in
>> freeRadius.
>>
>> Could somebody point to where I can find any documentation about it?
>> Also, should I use system passwords or keep them in the postgres to  
>> make
>> it
>> working?
>
> You can't use system (crypted) passwords with mschap.

See: http://deployingradius.com/documents/protocols/compatibility.html

>
> Ivan Kalik
> Kalik Informatika ISP
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Have a nice day!

Nicolas Goutte


extragroup GmbH - Karlsruhe
Waldstr. 49
76133 Karlsruhe
Germany

Geschäftsführer: Stephan Mönninghoff, Hans Martin Kern, Tilman Haerdle
Registergericht: Amtsgericht Münster / HRB: 5624
Steuer Nr.: 337/5903/0421 / UstID: DE 204607841




-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

[Alan DeKok-2]

Alexey Ponomarev wrote:
> I am trying to figure out how to do password aging and on next logon
> change with freeRadius.

  Use a database with custom scripts that update the database.

  FreeRADIUS isn't a database, and doesn't track status changes for a
user.  Those status changes are best tracked in a database.

> Could somebody point to where I can find any documentation about it?
> Also, should I use system passwords or keep them in the postgres to make
> it working?

  System passwords or Postgresql are fine.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html