Forticlient 5.4.0 AD password changes

[Zakalwe]

Hi,

Hopefully this is the right place to post this - apologies if not.

We use a mixture of versions of the Forticlient for VPN - the latest client we use is 5.4.0.0780

We use LDAP AD authentication and it works well. We noticed that when trying to connect the VPN, if the users AD password is expired, the user gets a password change prompt from the Forticlient, but, if the user cancels this box and tries again to connect, they can continue using their original password. Looking in AD we see the password change date shows the current date - it is as if the Forticlient is resetting the password to the same as the current password even though our domain policy is set to remember the previous 4 passwords.

Has anyone else noticed this behaviour? Is it a bug? Is there something we can change in AD to prevent this?