Device login with radius credentials

RouterOS The Dude
1

Hi all, with Dude 3.6 our team login in dude with radius account.
There a way to use the login credentials for access in the devices instead of using the credentials that are specified in the fields username and password in the device screen ?

Thanks Sascha

2

You will need to use a radius server, with radius setup on each Mikrotik for “Login”

3

Ok paulct, but in the dude if I click on device and I use tool → Winbox I use the credentials that I set int setting windows …
I want to use the login username and password that the user insert at login screen …

Thanks Sascha

4

That is not currently possible. As you already stated only option right now for monitored device access is already typed in user/pass.

5

Hi
I think you should set radius server for each router

6

He meant probably the domain single sign on… Not supported by ros.

7

I would like to setup RADIUS login for MikroTik routers with Microsoft NPS server.

I’m getting error message:

“The user could not be authenticated using Challenge Handshake Authentication Protocol (CHAP). A reversibly encrypted password does not exist for this user account. To ensure that reversibly encrypted passwords are enabled, check either the domain password policy or the password settings on the user account.”

Does anybody know what settings shout I use on NPS server, without using reversible encryption?

8

I only got it working with reversible encryption, sorry. But now i face another issue: i can’t open a terminal. It requires login and if i input the radius credentials again it does not work. I can alter any other settings, except opening a terminal in winbox. Any ideas ?

9

So is this supported yet @Mikrotik?

I have setup a RADIUS server and I am able to login using RADIUS credentials manually. But how to replace the stored login credentials in DUDE with the RADIUS credentials?

10

BUMP.