Web auth + radius + ms-chap

MouhatNicolas · ‎01-03-2008

I set up a web auth with a radius server. I use IAS as radius server. How can I set up the controller (4402) to use mschap? When I see the IAS logs, the controller is always using PAP.

irisrios · ‎01-09-2008

Try out the CLI command config custom-web radiusauth on the controller and select the auth type as CHAP. But make sure IA server is configured to accept CHAP.

MouhatNicolas · ‎01-14-2008

Thanks, I found the option in the WebUI, but I can't set up the IAS to work with CHAP. I have constantly an error about passwords that are not reversible.

dancampb · ‎01-14-2008

The CHAP option for the controller is for CHAP, not MS-CHAP. For IAS to be able to authenticate webauth users you need to change the Radius service type from Framed to Login on the IAS server.

MouhatNicolas · ‎01-17-2008

I set up the controller and IAS as you said, but I still have the error "A reversibly encrypted password does not exist for this account"

dancampb · ‎01-18-2008

Make sure to change the webauth authentication type back to PAP. The IAS server won't be able to unhash the CHAP password.