Radius Auth: Winbox - CHAP, SSH - PAP?

RouterOS General
1

Hello,

I had set up successfully FreeRADIUS to authenticate me via ssh (and webbox) login, which uses PAP (sends password in clear text) and does not require to store user password in clear text as well (think Kerberos or Unix password backend). However, winbox login sends CHAP request which naturally fails as there is no clear text password.

To me this looks like a bug. Is there a way to set winbox auth to PAP?

[Solved] Radius - winbox accepted, SSH rejected
2

seems like WinBox do not send your password in a plaintext over the network connection, so router has nothing to send to the RADIUS… that’s why PAP is not possible in case of WinBox

3

Right, it appears that Winbox is doing some sort of challenge - response. I am just unhappy with consistency. if I want to use winbox - I have to store clear-text passwords :frowning: