On 10/5/05, Seth Martin <SethM at turbinegenerator dot com> wrote:
> I use windows Inet Auth Service for radius, when I force a user to
> change his pass it comes up in the windows PPTP client as needing to
> reset the password but when I put in the old and new with confirmation
> and then I get an error 691 saying that I couldn't authenticated and it
> fails.

I believe this is a major gotcha with IAS.  I recall reading in
Cisco's documentation somewhere that if a user must change their
password (expired, or forced change) and is authenticating via IAS,
they'll be stuck and not able to log in.  I believe they claimed it
was an issue in that passwords can't be changed over IAS RADIUS.

-Chris