[c-nsp] Left-field trivia questions...

[Painting, Stuart]

"Carriage return at the password prompt" is indeed an ACS feature (at
least as of ACS 5.3). Pretty much the first thing I did when installing
ACS was to switch off the feature, for two reasons:

1. "Telnet change password" is, as its name suggests, only available via
telnet. Since we wanted to encourage people to use SSH, offering a
telnet-only feature seemed like a bad idea.

2. Some of our user authentication is via Active Directory, and I didn't
fancy testing whether AD integration in ACS was good enough to handle
password changes.

Incidentally, any news on when ISE will be getting TACACS support? Or
has
development of that product ceased as well?


-----Original Message-----
From: cisco-nsp [mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of
Jeff Kell
Sent: 01 May 2013 23:28
To: cisco-nsp at puck.nether.net
Subject: [c-nsp] Left-field trivia questions...

(1) Is it just me, or has cisco-nsp been spitting out ancient email
messages for the last couple of days?  I've gotten emails dating back to
2010, and it's not just the current timestamps, the embedded "On month
day, year, so-and-so wrote..." is also old.

(2)  As my equipment this week has started spitting out the stale TACACS
"Password is about to expire" messages (it's that time again), I have
this fleeting memory in my head from years ago that you used to be able
to "change" your password when logging in by some magic... like just
doing carriage return at the password prompt, and it would then prompt
you for the old and new passwords.  Again, it was years ago, and I seem
to remember this on a CatOS switch (not IOS), and we may have been
running Cisco ACS at the time...  Ring any bells?  or is it just cobwebs
in my head?  :)

Jeff

_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

"To our Members we're the 4th Emergency Service"
This electronic message contains information from The Automobile Association which may be privileged or confidential. The information is intended to be for the use of the individual(s) or entity named above. If you are not the intended recipient, please delete this e-mail immediately. The contents of this e-mail must not be disclosed or copied without the sender's consent. We cannot accept any responsibility for viruses, so please scan all attachments.
No changes to Terms and Conditions of trade can be accepted through e-mail communication. All changes to Terms and Conditions must be in writing evidenced by a director of the company and in hard copy format. The statements and opinions expressed in this message are those of the author and do not necessarily reflect those of the company. The company does not take any responsibility for the views of the author.