NPS Radius authentication problem
Posted on 2010-11-24
After a server crash on my old NPS server, I imported the xml configuration file to my new nps server. It is used with a Cisco WLC for web authentication on our guest lan.
But since I moved the nps to a new server, I keep getting "No reversibly encrypted password is stored for the user account", I even tried to select "use reversibly encryption in AD", which is not what I want, but I still get the same error in the NPS log.
I have imported the certificate to the new nps server and configured it for PEAP-MS-CHAP v.2.
If I select "Accept users without validating credential" in NPS Connection request policy my ad users can log on, but I quickly learned that you could then write anything in username and password and still get in.
The log file for NPS only says "No reversibly encrypted password is stored for the user account", I even tried to select "use reversibly encryption in AD", no matter what I try, even if I selct unencrypted authentication in NPS.
What could be wrong?