wifi user can't connect with radius user& credential in fortinac

[williasthomas192004]

What is the issue? I can't find the issue. 

[AEK]

I find it strange that you use RADIUS to authenticate from portal. What was the default value?

RADIUS is usually used to authenticate WiFi clients with NAC.

[ebilcari]

In addition, based on the current configuration the hosts will be authenticated only for MAC authentication in the FGT and the user accounts are only verified via RADIUS, just allowing them to register their devices.
Since you have already configured Winbind, I guess you are trying to configure EAP-PEAP. To complete this, you need to configure the supplicant in the end host, change the SSID configurations to Enterprise and configure FNAC to register the host via Dot1x auto registration. Portal configurations will not be needed.

[williasthomas192004]

Could you share an actual process with me? What for use User Login type in portal?

[ebilcari]

If you want to let the users to only register their devices (BYOD), you need to create an open/PSK SSID and enable only MAC filtering/authentication, similar to the case shown here for guest self registration and use 'Standard User Login' directly with LDAP (no RADIUS needed). This is not recommended for corporate network access because there is no proper RADIUS authentication and the MAC address can also be spoofed.
Some more details can be found in this articles:

Technical Tip: Control BYOD access

Technical Tip: MSCHAPv2 authentication, join FortiNAC in domain and checks

[williasthomas192004]

Default value mean what ?

[AEK]

The default value for authentication method for "GestSelfRegistration" is "Local", which means FNAC looks in its local user DB, not via RADIUS.

Is there any reason why did you change it to RADIUS?