How to change Expired password on Forticlient

[sugumar]

Hi Team,

We have been using Forigate 100f(6.4.9) and configured SSL VPN through the Radius server, here we would like users to change their own password when the password is expired!

How to achieve this, Please help!

Regards

Sugumar G

[sthampi_FTNT]

Hi Sugumar,

Thank you for writing to us. What type of radius server do you use in your environment. FortiAuthenticator , Windows Server or a different vendor? 

Please find an article here below that provides sample configuration for password renewal while using Fortigate SSL VPN with FortiAuthenticator. 

config user radius
    edit "fac"
        set server "172.18.58.107"
        set secret <fac radius password>
        set auth-type ms_chap_v2
        set password-renewal enable
    next
end

https://docs.fortinet.com/document/fortigate/6.4.7/administration-guide/871023/ssl-vpn-with-radius-p...

[sugumar]

Hi Sthampi,

We are using,Windows 2012 radius server,I hope the above link method will be workable for windows server also ?

Please advice

Regards

Sugumar G

[Markus_M]

Hi Sugumar,

yes it should work the same. RADIUS is a good standard protocol. Your RADIUS server must be speaking securely towards the domain controller using LDAPS. Given that you use the NPS, it should be automatically the case.

Best regards,

Markus