2.5.914 and below
TPAM does not support Challenge Response for primary authenticaiton. If TPAM receives an Access-Challenge from the Radius server, it is ignored, and TPAM treats the users next response as a completely new login.
Challenge-response is only supported when it is used as secondary authentication.
Challenge response is now supported for Radius and Defender primary authentication.