VIP RADIUS Integration cannot get password attribute if PAP protocol is not used

Products

• VIP Integrations

Issue/Introduction

The Validation server logs show an error saying that it cannot get the password attribute.

The validation server logs may show Access-Reject errors related to the LDAP password or LDAP username.​

text=Sending Access-Reject for user [jsmith] , reason=7; User not found in LDAP. 

Can't get password attribute

Cause

The RADIUS request is being sent to the validation server using other protocols that are not supported. 

Resolution

RADIUS requests to the VIP EG RADIUS validation server must use the RADIUS password authentication protocol (PAP). CHAP/MSCHAP/PEAP are not currently supported.