Configuring the RADIUS Encoding/Locale Format

When OneSpan Authentication Server forwards a RADIUS packet to a RADIUS server, it encodes the password field of that packet to UTF-8 format by default. If your RADIUS server expects or requires a different encoding format, then all authentication requests sent by OneSpan Authentication Server will be rejected. The encoding setting should reflect the encoding that is expected by the back-end server.

If your RADIUS server requires the password field to be in any specific encoding/locale format other than UTF-8, then you will need to configure OneSpan Authentication Server to convert all RADIUS packets accordingly. In most environments, all hosts have the same encoding format. In this case, you need to set the encoding type to @LOCALE@. Otherwise, set the encoding type to the required format, e.g. CP850.

To configure OneSpan Authentication Server to use a different encoding format (other than UTF-8) for a RADIUS server

1. Log on to the Administration Web Interface.
2. Select BACK-END > List.
3. Select the RADIUS server that is used as the back-end server.
4. Click EDIT.
5. Enter the required encoding/locale format in the Character Encoding box.
6. Click SAVE.

If the encoding on the Network Policy Server (NPS) is changed, all user passwords on the NPS will remain in the old encoding. To prevent password failures, you need to change all user passwords on the NPS.

You can also set the character encoding/locale format for any RADIUS clients registered with OneSpan Authentication Server.

To configure OneSpan Authentication Server to use a different encoding format (other than UTF-8) for a RADIUS client

1. Log on to the Administration Web Interface.
2. Select CLIENTS > List.
3. Select the RADIUS client component you want to configure.
4. Switch to the RADIUS tab and click EDIT.
5. Enter the required encoding/locale format in the Character Encoding box. Enter a shared secret if required.
6. Click SAVE.