Hi,
As you know, or maybe not radius servers authentication using md5 hash does work for mikrotik only partially. It works for SSH and telnet but not for winbox.
It all comes down to what a mikrotik employee explained one day in the forums:
“Yes, Winbox asks for CHAP support on RADIUS server, while Telnet and SSH ask for PAP support.” @ http://forum.mikrotik.com/t/winbox-login-through-radius/27779/1
It was five years ago.
Mikotik guys- do you think you can take a look at this again? Make it so winbox also supports PAP?
Judging by the information I’ve found in google- this is actually highly demanded by your customers.