"Carriage return at the password prompt" is indeed an ACS feature (at least as of ACS 5.3). Pretty much the first thing I did when installing ACS was to switch off the feature, for two reasons:
1. "Telnet change password" is, as its name suggests, only available via telnet. Since we wanted to encourage people to use SSH, offering a telnet-only feature seemed like a bad idea. 2. Some of our user authentication is via Active Directory, and I didn't fancy testing whether AD integration in ACS was good enough to handle password changes. Incidentally, any news on when ISE will be getting TACACS support? Or has development of that product ceased as well? -----Original Message----- From: cisco-nsp [mailto:[email protected]] On Behalf Of Jeff Kell Sent: 01 May 2013 23:28 To: [email protected] Subject: [c-nsp] Left-field trivia questions... (1) Is it just me, or has cisco-nsp been spitting out ancient email messages for the last couple of days? I've gotten emails dating back to 2010, and it's not just the current timestamps, the embedded "On month day, year, so-and-so wrote..." is also old. (2) As my equipment this week has started spitting out the stale TACACS "Password is about to expire" messages (it's that time again), I have this fleeting memory in my head from years ago that you used to be able to "change" your password when logging in by some magic... like just doing carriage return at the password prompt, and it would then prompt you for the old and new passwords. Again, it was years ago, and I seem to remember this on a CatOS switch (not IOS), and we may have been running Cisco ACS at the time... Ring any bells? or is it just cobwebs in my head? :) Jeff _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/ "To our Members we're the 4th Emergency Service" This electronic message contains information from The Automobile Association which may be privileged or confidential. The information is intended to be for the use of the individual(s) or entity named above. If you are not the intended recipient, please delete this e-mail immediately. The contents of this e-mail must not be disclosed or copied without the sender's consent. We cannot accept any responsibility for viruses, so please scan all attachments. No changes to Terms and Conditions of trade can be accepted through e-mail communication. All changes to Terms and Conditions must be in writing evidenced by a director of the company and in hard copy format. The statements and opinions expressed in this message are those of the author and do not necessarily reflect those of the company. The company does not take any responsibility for the views of the author. _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
