[vpn-help] RADIUS with Expiry Support

[Stuart Hall]

Funnily, I was just about to send an email to the list asking exactly
the same question...

If this functionality exists, I'd be interested to know how to enable
it. If it doesn't, +1 for adding it!

Thanks,

Stuart H.

On Sun, Jan 31, 2010 at 10:32 PM, Michael-Curran (Canberra)
<Michael.Curran at austrade.gov.au> wrote:
> Dear vpn-help community,
>
> I’m currently assessing the ShrewSoft  VPN client as a replacement for the
> Cisco IPSec VPN client on 64-bit Windows.  I’m connecting to a Cisco VPN
> 3000 concentrator from a Windows 7 x64 host.  In our current configuration
> we’re using extended authentication (PSK + XAuth) with RADIUS validating the
> “Xauth” part.
>
> I can connect and authenticate fine with this configuration using the
> ShrewSoft client, however my problem arises when the users’ password
> expires.  Using the Cisco or NCP clients I get challenged to change my
> expired password as part of the XAuth process.  Using the ShrewSoft client I
> simply get an authentication failure, and the server tells me that the
> password change attempt was deferred.
>
> Does anyone know if it is possible for the ShrewSoft client to perform an
> interactive password change for an expired password when using PSK + XAuth?
>
> Regards,
>
> Michael
>
> _______________________________________________
> vpn-help mailing list
> vpn-help at lists.shrew.net
> http://lists.shrew.net/mailman/listinfo/vpn-help
>
>