Handle Expired Passwords either via LDAP or radius

[marcus.k.berglund@gmail.com]

Hi,

I have run in to a problem that I would like to be solved if possible. I have created an enviroment in AWS with windows servers, active directory and OpenVPN with Google Authenticator as MFA. So far so good!

But!

When the users password expires in the active directory and needs to be changed the OpenVPN server cannot authenticate the user and change the password and of course not log on.

How is this handle by you?

Any suggestions would help!

Thanks!

[novaflash]

Unfortunately Access Server can only use an external source for authentication, and cannot reach into the authentication system to challenge and replace the password. That will still have to be handled in that external authentication system.