IAS/Radius Question

[Guest]

We've recently replace our RAS servers with a firewall appliance that uses
IAS for authentication. We've noticed that if passwords expire, the user is
no longer prompted to change the password. Is this a limitation of using IAS?

 

[Ryan Hanisco]

Jeff,

This is not tied to IAS, but remember that the prompt to change the
password comes from the Windows client -- something that isn't
necessarily used in a RADIUS/ IAS authentication.

You'll note that things like the Windows XP Wireless client can prompt
for things like that, but that is in a handoff to the full client (EAP
scenarios). If you are just doing PEAP or RADIUS authentication, there
is just the pass/ fail on the auth.

Ryan Hanisco
FlagShip Integration Services