Skip to main content
sugumar
New Member
November 14, 2022
Question

How to change Expired password on Forticlient

  • November 14, 2022
  • 3 replies
  • 8178 views

Hi Team,

 

We have been using Forigate 100f(6.4.9) and configured SSL VPN through the Radius server, here we would like users to change their own password when the password is expired!

 

How to achieve this, Please help!

 

Regards

Sugumar G

3 replies

sthampi_FTNT
Staff
Staff
November 14, 2022

Hi Sugumar,


Thank you for writing to us. What type of radius server do you use in your environment. FortiAuthenticator , Windows Server or a different vendor? 

Please find an article here below that provides sample configuration for password renewal while using Fortigate SSL VPN with FortiAuthenticator. 

 

config user radius     edit "fac"         set server "172.18.58.107"         set secret <fac radius password>         set auth-type ms_chap_v2         set password-renewal enable     next end

 

https://docs.fortinet.com/document/fortigate/6.4.7/administration-guide/871023/ssl-vpn-with-radius-password-renew-on-fortiauthenticator

sugumar
sugumarAuthor
New Member
November 16, 2022

Hi Sthampi,

 

We are using,Windows 2012 radius server,I hope the above link method will be workable for windows server also ?

 

Please advice

 

Regards

Sugumar G

Markus_M
Staff & Editor
Staff & Editor
November 16, 2022

Hi Sugumar,

 

yes it should work the same. RADIUS is a good standard protocol. Your RADIUS server must be speaking securely towards the domain controller using LDAPS. Given that you use the NPS, it should be automatically the case.

 

Best regards,

 

Markus

 

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!