topic Re: Web auth + radius + ms-chap in Wireless

Web auth + radius + ms-chap

MouhatNicolas — Sat, 03 Jul 2021 22:09:52 GMT

I set up a web auth with a radius server. I use IAS as radius server. How can I set up the controller (4402) to use mschap? When I see the IAS logs, the controller is always using PAP.

Re: Web auth + radius + ms-chap

irisrios — Wed, 09 Jan 2008 14:24:54 GMT

Try out the CLI command config custom-web radiusauth on the controller and select the auth type as CHAP. But make sure IA server is configured to accept CHAP.

Re: Web auth + radius + ms-chap

MouhatNicolas — Mon, 14 Jan 2008 16:48:30 GMT

Thanks, I found the option in the WebUI, but I can't set up the IAS to work with CHAP. I have constantly an error about passwords that are not reversible.

Re: Web auth + radius + ms-chap

dancampb — Tue, 15 Jan 2008 02:37:55 GMT

The CHAP option for the controller is for CHAP, not MS-CHAP. For IAS to be able to authenticate webauth users you need to change the Radius service type from Framed to Login on the IAS server.

Re: Web auth + radius + ms-chap

MouhatNicolas — Thu, 17 Jan 2008 08:26:43 GMT

I set up the controller and IAS as you said, but I still have the error "A reversibly encrypted password does not exist for this account"

Re: Web auth + radius + ms-chap

dancampb — Fri, 18 Jan 2008 14:41:21 GMT

Make sure to change the webauth authentication type back to PAP. The IAS server won't be able to unhash the CHAP password.