Re: Portmaster RADIUS Users Digest V96 #132
Dale E. Reed Jr. (daler@iea.com)
Tue, 13 Aug 1996 11:59:57 -0700
Gary Bickford wrote:
>
> >Has anyone successfully got something like this working? Our security
> >policy sort of states that we do need to have password expiry - We are
> >currently using TACACS+ & XTACACS on a Cisco NAS but would look at
> >getting IOS 11.x+ which supports Radius also. The Radius server would be
> >running on Windows NT for both authorization and accounting
>
> I dunno NT, but Solaris has a setting for this - it will announce &
> automatically expire passwords. If radius is connected to it, everything
> will just happen automatically.
RadiusNT supports password expiration and locking. Currently it
uses the Ascend names (from the Dictionary) of
ATTRIBUTE Ascend-PW-Warntime 207 integer
ATTRIBUTE Ascend-PW-Lifetime 208 integer
To specify a warning time and a lifetime for the password.'
These should work fine for a portmaster as well.
--
Dale E. Reed Jr. (daler@iea.com)
_____________________________________________________________________
Internet Engineering Associates | RadiusNT, Emerald, and NT FAQs
Internet Solutions for Today | http://www.iea.com/~daler