Web auth + radius + ms-chap

[MouhatNicolas]

I set up a web auth with a radius server. I use IAS as radius server. How can I set up the controller (4402) to use mschap? When I see the IAS logs, the controller is always using PAP.

[irisrios]

Try out the CLI command config custom-web radiusauth on the controller and select the auth type as CHAP. But make sure IA server is configured to accept CHAP.

[MouhatNicolas]

Thanks, I found the option in the WebUI, but I can't set up the IAS to work with CHAP. I have constantly an error about passwords that are not reversible.

[dancampb]

The CHAP option for the controller is for CHAP, not MS-CHAP. For IAS to be able to authenticate webauth users you need to change the Radius service type from Framed to Login on the IAS server.

[MouhatNicolas]

I set up the controller and IAS as you said, but I still have the error "A reversibly encrypted password does not exist for this account"

[dancampb]

Make sure to change the webauth authentication type back to PAP. The IAS server won't be able to unhash the CHAP password.