topic Changing password over GlobalProtect in General Topics

Changing password over GlobalProtect

Hamid.Saffarzadeh — Wed, 09 Dec 2020 14:48:23 GMT

Hi team,

Does anybody know if there is any compatibility issue between Palo Alto and Aruba Clearpass for changing users' passwords?

When we use Microsoft NPS, GlobalProtect users will be prompted for changing their passwords when the passwords are expired. However, when we use Aruba Clearpass instead of Microsoft NPS it doesn't work. The only workaround we have found is to use Clearpass in Proxy mode.

Thanks in advance.

Re: Changing password over GlobalProtect

SureshReddyM — Wed, 09 Dec 2020 16:46:19 GMT

Hi,

As per ClearPass web form cannot change a password in an external identity store.

But using EAP-PEAP, EAP-MSCHAPv2 the password changing works.

https://docs.paloaltonetworks.com/content/dam/techdocs/en_US/pdf/clearpass/clearpass-integration-guide.pdf

Best Regards,

Suresh