Chapter 6 Setting Up and Managing User Groups
Configuration-specific User Group Settings
6-24
User Guide for Cisco Secure ACS for Windows Server
78-14696-01, Version 3.1
•
Verify that you have configured your password validation options. For more
information, see
Local Password Management, page 8-5
.
•
Set up your AAA client to use Cisco IOS Release 11.2.7 or later and to send
a watchdog accounting packet (aaa accounting new-info update) with the IP
address of the calling station.
To set password aging rules for a user group, follow these steps:
Step 1
In the navigation bar, click Group Setup.
Result: The Group Setup Select page opens.
Step 2
From the Group list, select a group, and then click Edit Settings.
Result: The Group Settings page displays the name of the group at its top.
Step 3
From the Jump To list at the top of the page, choose Password Aging.
Result: The Password Aging Rules table appears.
Step 4
To set password aging by date, select the Apply age-by-date rules check box and
type the number of days for the following options, as applicable:
•
Active period
•
Warning period
•
Grace period
Note
Up to 5 characters are allowed in each field.
Step 5
To set password aging by use, select the Apply age-by-uses rules check box and
type the number of logins for each of the following options, as applicable:
•
Issue warning after x logins
•
Require change after x logins
Note
Up to 5 characters are allowed in each field.
Step 6
To force the user to change the password on the first login after an administrator
has changed it, select the Apply password change rule check box.
Step 7
To enable a Greetings message display, select the Generate greetings for
successful logins check box.
