"Auth type not supported by External DB" error for web-auth SSIDs

Unanswered Question
Mar 26th, 2009
User Badges:
  • Silver, 250 points or more


We're having a problem with web-authentication on our 4404/WisM controllers since we moved to software rev 5.x (currently running

With software rev 4.x our web-auth SSIDs would send the authentication requests to a Cisco ACS4.0 which would then authenticate the users against MS Active directory.

Now (with rev 5.x) the same SSIDs cannot authenticate users against AD, the error in the ACS is:

Auth type not supported by External DB

Found the following Cisco Doc regarding the problem: Cisco Secure ACS and Windows AD EAP/802.1x port authentication fails with the Auth type not supported by External DB error message - Case Number K24308566. Done a packet capture on ACS to see authentications coming in and the ones that fail with above error are using CHAP - from the Cisco documentation, MS AD doesn't support CHAP.

Any ideas on how I can get the web-auth working again with software rev 5.x ?



  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
andrewswanson Thu, 03/26/2009 - 07:23
User Badges:
  • Silver, 250 points or more

my apologies - theres a setting under Controller - General for Web Radius Authentication. changed this from CHAP to PAP and its now working ok.


This Discussion



Trending Topics - Security & Network