Auth type not supported by External DB

[ruben.montes]

Hello,

we have configured authentication with AD for PPP access.

If the user exists in the ACS database, we have selected the option to go to search the password to the Windows database.

When we try to access with one of these users, we got this error:

"Auth type not supported by External DB".

In the other hand, when the user it is not in the database, it works...

Any idea which could be the problem?

Regards,

Ruben

[will.shaw]

This error message usually means that the authentication protocol you are using isn't configured within your AD. Try changing to a different protocol to check, or alter the AD configuration.

[abwahid]

Hi,

The error showing that the authentication protocol is not supported by the external DB.

Looking at a trace of the RADIUS packets will tell you what protocol is being used.

you cannot use CHAP against Windows/AD

Strongest recommended PPP user authentication methods — EAP-TLS or MS-CHAP v2.

use above methods and check.